Privacy Policy

Last updated: 8 October 2026

1. Who we are

Motoble is a trading name of Varnexity Ltd (company number 17410354), registered in England and Wales. We are the data controller for the personal data described in this policy.

2. What data we collect

On the free vehicle lookup tool:

• The vehicle registration number you enter to run a lookup.
• Anonymised, aggregated patterns drawn from lookups over time - for example, which makes/models/areas are searched most. This is never linked back to you individually.
• Standard technical data (IP address, browser type, device type) collected automatically for the site to function and for basic analytics.

On the Business Portal enquiry form:

• Your name, company name, and email address.
• What you're enquiring about (business account or API access), and any message you choose to add.

On My Garage:

• Your email address and the registration(s) of any vehicle you add.
• A record of each vehicle's most recently known MOT expiry date, tax due date and advisory text, so we can tell you when something changes.
• A single-use confirmation token, sent to your email, used only to confirm you own that email address and to let you manage or remove a vehicle later.

On the paid Confidence Report:

• The vehicle registration and email address you provide, so we know what to check and where to send the report.
• Payment details, handled entirely by our payment processor, Stripe - see Section 4. We never see or store your full card details ourselves.
• Evidence that you actively confirmed the checkout consents shown to you before payment (the time you did so, and your IP address and browser/device information at that moment) - kept specifically so we can show, if ever challenged, that this happened for a given purchase.
• The vehicle-history data returned by our commercial data supplier for that specific report (see Section 6 of our Terms).
• The free lookup results for that vehicle at the time of purchase, which are included in your report when available.

3. Why we collect it, and our lawful basis

What we mean by "anonymised"

When we say data is anonymised, we mean it's been stripped of anything that could identify you or your specific search - no registration number, no IP address, no device identifier - and combined into patterns across many searches. For example: "320 people in the Bristol area searched for a 2019 Ford Focus this month" is anonymised; a record showing that you specifically searched for that car is not. Once data is genuinely anonymised this way, it's no longer personal data, and the individual rights in Section 6 below don't apply to it.

This is different from pseudonymised data - data that's had obvious identifiers removed but could still be pieced back together to identify someone. Pseudonymised data is still personal data under UK GDPR. If Motoble retains anything at that in-between stage before it's fully aggregated, it's treated with the full protections in this policy, not as anonymised data.

• Running a lookup: to provide the service you've asked for (legitimate interest / performance of a request you've initiated).
• Anonymised aggregate patterns: to improve Motoble's own data and insight over time (legitimate interest).
• Business Portal enquiry: to respond to the enquiry you've submitted (legitimate interest / performance of a request you've initiated).
• My Garage: your consent - we only ever start sending you MOT and tax reminders for a vehicle after you've clicked the confirmation link in the email we send you (double opt-in). You can withdraw this at any time by removing the vehicle.
• The paid Confidence Report: performance of the contract you enter into by purchasing a report (to actually generate and deliver it); a legal obligation (we have to keep payment records for statutory accounting and tax purposes); and legitimate interest, for the consent evidence described in Section 2, so we can demonstrate the checkout process worked as described if a purchase is ever queried or challenged. We also use order records to prevent misuse of the checkout, such as repeated unpaid orders (legitimate interest).

4. Who we share data with

• Stripe, our payment processor, to take payment for a Confidence Report. Stripe receives and handles your card details directly - they never pass through, or get stored on, Motoble's own servers. We also pass Stripe your email address and the vehicle registration, so your payment and receipt match your order.
• Experian, via our data supplier's platform, to retrieve the finance, stolen, write-off, salvage, keeper, plate and colour records included in a Confidence Report. We send them the vehicle registration you're checking; we don't send your name, email, or payment details.
• Resend, our transactional email provider, to send confirmation links, MOT and tax reminders, and Confidence Reports to the email address you provide.
• Our hosting and database providers, who store and run Motoble's infrastructure on our behalf. They process data only to provide that infrastructure to us, and don't use it for their own purposes.
• Our own staff, where needed to look into a support query about an order or My Garage vehicle.
• Some of the above may involve your data being processed on servers outside the UK/EEA; where that happens, it's covered by that provider's own standard contractual safeguards.
• We do not sell your personal data to third parties.
• We do not share individual lookup, Garage, or report data with trade customers - only genuinely anonymised, aggregated patterns feed into anything trade-facing.

5. How long we keep it

• Vehicle lookups: kept only for the shortest period operationally necessary before being aggregated and anonymised.
• Business Portal enquiries: sent directly to our own inbox as a one-off message, not stored in a separate database - kept only as long as normal business email correspondence, and never used to send unsolicited marketing.
• My Garage: a vehicle you add stays on file until you remove it or ask us to delete it. An unconfirmed vehicle (the confirmation link was never clicked) is automatically dropped after 72 hours.
• The paid Confidence Report: the vehicle-history data and free lookup results used in your report are kept for 30 days after purchase, then permanently deleted at our next daily clean-up. During that time they're used only to let you view and download your report again from your report link, and to re-send it if delivery fails. They're never reused for any other purpose or sent to Experian again. To open your report from its link, you'll be asked for the email address you used at purchase, unless you're using the same browser you bought it on. The order and payment record itself (registration, email, price, consent evidence) is kept for longer, as required for our statutory accounting and tax record-keeping obligations (normally 6 years).

6. Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you.
• Ask us to correct or delete it.
• Object to processing based on legitimate interest.
• Withdraw consent, or ask us to delete correspondence, at any time.

To exercise any of these rights, contact us using the details in Section 9 below. You also have the right to complain to the Information Commissioner's Office, though we request that you first contact us using the details below in this form so that we may support your request directly.

7. Children

Motoble is not directed at children, and we do not knowingly collect personal data from anyone under 13.

8. Changes to this policy

We'll update this policy as Motoble's functionality develops, and update the date at the top when we do.

9. Contact

Email us with any questions about this policy.