Privacy Policy

Last updated: March 2026

This Privacy Policy explains how FlipTrack UK, operated as a sole trader trading as FlipTrack UK based in Leeds, United Kingdom, collects, uses, and protects your personal data. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data We Collect

Account data: When you register, we collect your email address and create a unique account identifier.

Vehicle and financial data: All vehicle details, transaction records, and profit data you enter into the app. This data is yours and is stored to provide the service.

Payment data: Payments are processed by Stripe. We do not store your card details. We receive confirmation of payment status and a Stripe customer identifier.

Usage data: We may collect basic usage information such as pages visited and features used to improve the service. This is collected in aggregate and is not linked to individual users.

DVLA and DVSA data: When you use the VRM lookup or MOT history features, we retrieve vehicle data from the DVLA and DVSA APIs. We cache this data for up to 30 days to reduce API costs. We do not store keeper names or keeper addresses — only vehicle technical data.

2. How We Use Your Data

We use your data to provide and improve the FlipTrack UK service, process your subscription payments, send essential service communications such as payment confirmations, and respond to support requests. We do not use your data for advertising or sell it to third parties.

3. Legal Basis for Processing

We process your data on the following legal bases under UK GDPR: performance of a contract (providing the service you have signed up for), legitimate interests (improving the service and preventing fraud), and legal obligation (where required by law).

4. Data Storage and Security

Your data is stored on Supabase infrastructure hosted in the EU (Ireland). We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Access to your data is restricted by row-level security policies meaning only your account can access your data.

5. Third-Party Services

We use the following third-party services to operate FlipTrack UK:

Supabase — database and authentication hosting (EU/Ireland)

Stripe — payment processing

Vercel — application hosting

Anthropic — AI listing generation (Pro feature)

DVLA / DVSA — vehicle and MOT data (Pro feature)

Each of these providers operates under their own privacy policies and data processing agreements.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and vehicle records will be removed from our systems within 30 days. Anonymised aggregate data may be retained for longer for analytical purposes.

7. Your Rights

Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict processing of your data, and request a portable copy of your data. To exercise any of these rights, contact us at support@fliptrackuk.com

8. Cookies

We use essential cookies required for authentication and session management. Please see our Cookie Policy for full details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or to exercise your rights, contact us at support@fliptrackuk.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk