ClearCar Report
Privacy policy
This notice applies to the ClearCar Report website and Android app, which opens the same service.
Effective 27 September 2026. Please save a copy with your purchase record.
Controller and contact
Syncade Systems Ltd is responsible for the personal data it processes to operate ClearCar Report. Company No. 17377106; ICO registration reference ZC250004. Business/contact address: Unit 18, Telekebir Road, Pontypridd, CF37 2RL. Contact info@syncadesystems.com for privacy questions or rights requests. ICO registration is not an endorsement or security certification.
Information involved
We receive the registration you enter and vehicle records returned by DVSA or One Auto API, which may include a VIN and vehicle history. We process payment status, registration-linked Checkout Session references and report references. Stripe may collect your name, email, billing information, payment details and fraud-prevention information. Our server verifies relevant transaction details but does not receive your full card number or security code. Hosting and payment providers process technical information such as IP addresses, browser details, request times and security logs. If you contact us, we receive your contact details and correspondence. Vehicle information can be personal data where it relates to an identifiable person.
Purposes and legal bases
We use registration, report and payment information to take steps you request and perform the report contract. We process operational/security information for our legitimate interests in preventing misuse, securing the service and resolving problems. We retain information where necessary to meet applicable legal obligations or handle legal claims. The Google Ads tag loads on public pages with advertising consent denied by default and may send limited cookieless signals to Google to measure visits from our adverts. If you separately allow Google Ads cookies in the registration confirmation or Cookie choices, fuller ad measurement is enabled. Ad cookies rely on that separate choice; declining them does not affect the vehicle-check service. If you have allowed them and complete a live £4 report purchase, we use a Google Ads Purchase event to measure that sale. You are not legally required to buy a report; without the necessary registration and payment information we cannot provide the paid service.
Who receives information
Netlify hosts the website and server functions and stores the private paid-report cache. Stripe processes payments and related compliance/fraud checks. DVSA receives registrations for MOT enquiries. One Auto API receives registrations for paid vehicle-history enquiries. The paid report includes data provided by Experian for vehicle identity and registration, technical specifications, finance, insurance condition/write-off, stolen-vehicle, keeper, plate-change, V5C document-history, scrappage/import/export, colour-change, previous-search and previous-identity-check information, where returned. Our email provider handles support correspondence. Advisers, authorities or other recipients may receive information where required by law or necessary to establish or defend legal claims. Google may receive limited browser, page and consent signals from public pages before you allow ad cookies, and fuller ad-measurement information if you allow them. After a verified live purchase, this may include the £4 sale value, GBP currency and a one-way derived transaction ID so repeat visits are not counted as separate sales, under Google’s own privacy notice. Providers may act as processors or independent controllers depending on the activity. Their own notices also apply to processing they control.
Security
We use HTTPS for the website and service requests, Stripe-hosted checkout for card details, and server-side verification of completed payments. Paid reports are reached through private links that expire 30 days after checkout creation; keep those links confidential. Service credentials and paid provider requests remain on the server rather than in the website or Android app. No online service can guarantee absolute security.
Retention
The application’s private paid-report link expires 30 days after checkout creation. The report cache and duplicate-request state are scheduled for deletion during the next daily cleanup, normally within a further day; operational failures can delay cleanup. This is not a promise that all associated information is deleted after 30 days. Stripe transaction records, hosting/security logs, provider records, support correspondence and records needed for legal obligations or claims have separate retention requirements. Support records are assessed according to the issue’s resolution and any continuing complaint, legal or accounting need. Downloaded copies remain on your device until you delete them.
Providers and international processing
Some providers operate internationally. Processing locations, subprocessors and transfer safeguards depend on the contracted services and account settings. Where information is transferred outside the UK, appropriate safeguards are used where required by data-protection law. Provider information: https://stripe.com/privacy, https://www.netlify.com/privacy/ and https://policies.google.com/privacy. Contact us for details about the arrangements applicable to your information.
Analytics, cookies, fonts and device storage
ClearCar Report uses Netlify Web Analytics to understand aggregate traffic such as pageviews, estimated unique visitors, referral sources, popular pages, approximate locations, bandwidth and missing-page requests. Netlify collects this information server-side. The Google Ads tag (AW-18428680385) loads on public pages with ad storage, ad user data and ad personalisation denied by default. Before you allow ad cookies, it may send limited cookieless signals to Google, including consent state, page path and ordinary request information such as browser details; our code omits page query strings and referrers. There is no automatic advertising-cookie prompt before a vehicle check. If you separately allow ad cookies, Google may set them and receive fuller browser and page information to measure visits from our adverts. For a verified live £4 payment created after Purchase measurement was introduced, and only when ad cookies are allowed, the payment page first removes the private payment reference from its address and then sends Google a Purchase event from the main page with value £4, currency GBP and a stable transaction ID derived from the Stripe session. Our site code does not add vehicle registrations, private Stripe session IDs, report references, names or email addresses to Google Ads events, and the tag does not load on private payment-return pages. We store your choice on this device for up to 180 days. You can change it using Cookie choices in the footer; declining or withdrawing ad cookies returns advertising consent to denied while the public-page tag may continue sending limited cookieless signals, and you can clear existing cookies in your browser. We do not use Google Analytics cookies. Netlify may process IP addresses and request metadata to produce these statistics. We also record three server-side funnel event payloads: a successful vehicle check, creation of a Stripe Checkout session, and first confirmation of a completed £4 payment for report processing. The event payloads contain only the event type, stage name and schema version; they do not contain vehicle registrations, Stripe session IDs, report references, names or email addresses. Stripe payment records remain the source of truth for completed purchases. The application does not create customer accounts or store a user search-history profile. The page requests fonts from Google Fonts, which involves a connection from your browser and transmission of technical information. Stripe Checkout and hosting/security services may use their own necessary technologies under their notices. Your browser may retain downloads, history and cached assets. The private payment-return URL can remain in browser history; avoid sharing it.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Rights are not absolute; for example, some records may be needed for legal obligations or claims. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. Email info@syncadesystems.com; we may need proportionate identity checks. You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.
Automated processing and changes
The application automatically verifies payment and assembles vehicle records. It does not make a lending, insurance or vehicle-purchase decision for you. Stripe may perform its own automated fraud checks. We will update this notice when our processing changes and provide appropriate notice of material changes.