Privacy notice
The short version: we collect as little as possible, we never sell it, there's no ad tracking, and if you ask us to delete your details we will.
What we collect, form by form
- Waitlist: your email, age band, monthly budget and postcode district (the “E17” bit, never your full address).
- Watch alerts: your email plus the car, age and postcode district you asked us to watch — and, from 29 July 2026, our own estimate for that car on the day you asked, so we can tell you when it moves. Every alert email has a one-click link that stops the watch and deletes it.
- “Tell us your real quote”: the quote amount, your age, postcode district, the insurer and whether it was black-box. No email, no name — it's anonymous, and it only gets used to make our estimates more accurate.
- Pro Check interest: your email and the car (or reg) you want checked.
- Selling a car: your reg plate, name, phone number and asking price.
- “Email my match”: your email and the car we're sending you.
Reg-plate checks
When you enter a reg on the Check page we send it to the DVSA (the government's MOT service) to fetch that car's public MOT history, and show it to you.
Checked registrations. When a registration is checked, we keep a summary of our analysis — the car's details and MOT-pattern signals, not the full MOT record — for up to 90 days, so a shared report link keeps working if the live DVSA service is unavailable. It's deleted automatically after that. We treat a registration as personal data: it identifies a vehicle first, but someone who already knows whose car it is — the DVLA, or anyone who recognises the plate — could link it back to you, so we don't assume otherwise. Our lawful basis for keeping it is legitimate interests: running the check you asked for, for a limited time, with nothing else attached. If you want a reg's summary removed sooner, email us and we'll delete it.
Postcode search on the risk map
When you type a postcode into the risk map, your browser looks it up directly with postcodes.io, a free open-data service, to find the spot on the map. That request goes from your browser straight to them — the postcode is never sent to Vouched, it is not stored by us, and it is never attached to an analytics event. What we do record is much coarser: which postcode district (the first half, like N9) a search resolved to, so we can see which parts of the country the map gets used for. That district also appears in the page's own web address, so it travels with a link if you share one.
Analytics
We use privacy-friendly product analytics (PostHog, hosted in the EU) to see which tools get used — page views and button clicks tied to a random ID stored in your browser, not to your name or email. No advertising trackers, no selling data to anyone, no cross-site anything.
Where it lives, and for how long
Form submissions are stored securely with our database provider (Supabase, encrypted). We keep data only as long as it's useful for the purpose you gave it to us for, and we delete it when it isn't — or whenever you ask, whichever comes first.
Your choices
Want your details gone, or want to see what we hold? Email hello@vouched.autos (or use any form on the site and just say so) and we'll sort it — usually same-day. Every alert email we send includes an unsubscribe.