Privacy Policy

EPOCHS IT LIMITED, trading as Car Checkout, is the controller of personal information processed through this website.

• Registered office: 2 Fleetwood Road, Slough, England, SL2 5ET
• Company number: 15148783
• ICO registration number: 00016081831
• Email: info@carcheckout.co.uk

• Account details: your email address, an optional name and a securely hashed password if you register.
• Guest purchases: if you buy a report without registering, your email address. We keep it with your order so we can send you the report and a private link to it. If you register later with the same email, the report appears in your account.
• Vehicle check details: the registration number, VIN, mileage or condition you enter, and the report we return. Signed-in checks can be saved to your History.
• Order details: the report you bought, the registration, the price, the date and time, and Revolut's order and transaction references. We do not receive or store your full card details.
• Shared reports: if you share a report, we record that a share link exists. Anyone you give the link to can view that report until the link expires (30 days) or you stop sharing.
• Messages: your name, email address and message when you contact us. If you are signed in we may link the message to your account.
• Technical details: your IP address, browser, device and connection information needed to run the site, limit abuse, keep it secure and fix faults.

• to run the checks you ask for and show or email you the report (with the PDF attached and a private link);
• to take payment and keep a record of your order;
• to create and secure your account, send one-time codes and reset passwords;
• to answer your questions and complaints;
• to help you identify a report if you make a claim under the Experian AutoCheck Data Guarantee; and
• to keep the service working, prevent fraud and misuse, and meet our legal duties.

• Contract: to provide the checks, reports, account and support you ask for.
• Legitimate interests: to keep the site secure (including Cloudflare's bot check and rate limits), prevent fraud, improve the service and keep saved History for signed-in users.
• Legal obligation: to keep financial records and respond to lawful requests.
• Consent: for any optional cookies. You can withdraw consent at any time from cookie settings.

We share only what each organisation needs:

• Vehicle-data providers: One Auto API, the DVLA Vehicle Enquiry Service and the DVSA MOT History service receive the registration number or VIN needed to produce your report. One Auto passes it to its own sources (such as Experian and other providers listed in our Terms and Conditions) for the checks in your package. They receive the vehicle details only, never your name or email.
• Revolut (Revolut Ltd) takes your payment. It receives your email address, the amount and an order reference, and handles your card details under its own privacy notice (opens in a new tab).
• Cloudflare (Cloudflare, Inc.) runs the Turnstile security check and protects the site. It processes your IP address and browser details to tell people from bots.
• Our hosting and email providers store data and send emails (such as your report and our replies) on our instructions, under data-processing agreements.
• Experian, if you make a claim under its guarantee, may receive details needed to identify your report and purchase.
• Police, regulators or courts where the law requires it.

We do not sell your personal information.

Some of these providers may process data outside the UK (Cloudflare, for example, is based in the US). Where they do, the transfer is protected by the UK International Data Transfer Agreement or Addendum, or by a UK adequacy decision.

• Your account and reports: until you delete your account. If nobody signs in to an account for 3 years, we delete it.
• Saved History of lookups: 12 months.
• Reports bought without an account: 12 months, then the report is deleted (the order record stays, see below).
• Orders and payment records: 6 years from the purchase, as UK accounting law requires. If you delete your account, these are kept without your name or email.
• Unpaid orders and unfinished sign-ups: 90 days and 30 days.
• Messages to us: 2 years.
• Share links: they stop working after 30 days, or straight away if you stop sharing.
• Checks run without an account: not kept as a personal profile.
• We delete data automatically when these periods end.

We use essential cookies and browser storage to keep you signed in, remember your choices and remember that you passed the security check. Optional analytics or marketing cookies are only used if you allow them.

See our Cookie Policy for the full list and to change your choices.

You have the right to:

• get a copy of the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted in some circumstances;
• restrict or object to certain uses;
• receive your information in a portable format in some circumstances; and
• withdraw consent where we rely on it.

If you have an account, you can download a copy of your data and delete your account yourself from My account.

For anything else, or if you bought without an account, email info@carcheckout.co.uk from the address you used. We may need to confirm your identity first. We will reply within one month, as UK law requires.

If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (opens in a new tab). We would appreciate the chance to help first.

Passwords are stored hashed, connections to the site are encrypted and access to our systems is restricted. No system is completely secure, so please use a strong, unique password and sign out on shared devices.

Car Checkout is for adults. You must be 18 or over to buy a report, and we do not knowingly collect information from children.

We will update this page when the way we use personal information changes. The date at the top shows the current version.