Privacy notice

Who controls the data

NONSTOP SERVICE LTD, company number 12271149, is responsible for Autrace’s processing of customer and operational data. Contact: support@autrace.co.uk.

NONSTOP SERVICE LTD is registered with the UK Information Commissioner’s Office (ICO). Registration reference: C1989967.

What Autrace processes

Autrace processes the vehicle registration you enter, report results, order references, payment status, customer email returned by Stripe, wallet balances and technical information needed to protect and operate the service.

Why it is processed

Data is processed to provide requested vehicle checks and digital reports, administer payments and credits, respond to support requests, prevent abuse and fraud, keep accounting records and meet legal obligations.

Vehicle lookups and data recipients

Registration numbers are normalised before lookup. They may be sent to DVLA, DVSA and the configured licensed provenance-data provider to fulfil your request. A one-way hash may be used as a short-lived cache key so repeated free checks do not unnecessarily call government services.

Cloudflare provides hosting, security and database infrastructure. Stripe processes card payments. Autrace does not receive or store full card numbers.

Automated summary of your report

Paid reports include a plain-English summary written by an AI language model provided by Anthropic. To produce it, the vehicle information already shown in your report — registration, vehicle details, check results and valuation figures — is sent to Anthropic for processing. Your name, email address and payment details are never sent. The model is instructed to work only from those supplied records and cannot add information they do not contain. The generated summary is stored with your report and is not used to train any model.

Cookies and private access keys

HttpOnly cookies are used to restore a credit wallet, open a purchased report and protect the private operations area. A wallet cookie may last up to six months. Wallet codes and private report links should be kept confidential.

Security and rate limiting

Autrace may process a one-way hash derived from an IP address for short-window rate limiting, fraud prevention and service protection. The rate-limit record is operational data and is not used to build advertising profiles.

Retention

Customer access to a completed report and the identifiable report payload is normally retained for up to 365 days. After that period Autrace’s operations cleanup redacts the registration, checkout email, report payload and private access token from the order record.

Minimal order and payment-reference records may be retained for up to 2555 days for accounting, disputes, fraud prevention and legal compliance, unless a longer or shorter period is required. Active wallets with unused credits are retained so the purchased credits remain usable. Expired vehicle cache, rate-limit and abandoned checkout records are removed through the operations retention process.

Your rights

You may ask about access, correction, deletion, restriction or objection where applicable. You may also complain to the UK Information Commissioner’s Office if you believe your data-protection rights have not been respected.

Email support@autrace.co.uk with enough information to identify the relevant order. Never send full card details or identity documents unless specifically and securely requested.