Privacy Policy

1. Data Controller

The data controller for your personal information is Motor Board Ltd, a company registered in England and Wales (Company Number 17175063).

If you have any questions about how we handle your data, contact us at info@motorboard.co.uk.

2. What Data We Collect

We collect the following categories of personal data:

• Account registration — your name, email address, and phone number when you create an account.
• Vehicle listing data — photographs, vehicle details (make, model, year, mileage, condition), descriptions, asking price, and contact details associated with a listing.
• Payment data — payments are processed by Stripe. We do not store your full card number, CVV, or other sensitive payment credentials. We retain a record of the transaction amount, date, and Stripe payment reference.
• Browsing data — page views, hashed IP addresses, and user agent strings for platform analytics and fraud prevention. Raw IP addresses are not stored.
• Cookies — session cookies used to keep you logged in (see Section 8).

3. Why We Collect It

We use your personal data to:

• Provide and operate the MotorBoard marketplace — including account management, vehicle listings, and buyer–seller communication.
• Process payments for listing fees and dealer subscriptions.
• Communicate with you about your account, listings, and platform updates.
• Improve the platform — understanding how people use MotorBoard helps us fix problems and build better features.
• Prevent fraud and enforce our Terms & Conditions.
• Send marketing emails if you have consented to receive them (you can opt out at any time).

4. Legal Basis (UK GDPR)

We process your personal data under the following legal bases:

Activity	Legal Basis
Creating an account and managing your listings	Contract performance — necessary to provide the service you've requested
Processing listing fees and subscription payments	Contract performance
Platform improvement and fraud prevention	Legitimate interests — we have a legitimate interest in keeping the platform secure and improving it for all users
Marketing emails	Consent — we will only send marketing emails if you have opted in, and you may withdraw consent at any time

5. Data Sharing

We do not sell your personal data to third parties. We share data only with the following service providers, who process it on our behalf:

• Stripe — payment processing. Stripe is PCI-DSS compliant. See Stripe's Privacy Policy.
• Cloudflare / R2 — secure image and media storage for vehicle listing photographs.

We may disclose personal data to law enforcement or regulatory authorities if required to do so by law, or to protect the rights, property, or safety of MotorBoard, our users, or the public.

6. Data Retention

Data type	Retention period
Account data (name, email, phone)	While your account is active, plus 6 months after account deletion
Vehicle listing data	While the listing is live; removed when the listing expires or is deleted
Payment records	7 years from the transaction date (UK tax and accounting requirement)
Browsing/analytics data	Rolling 13-month window

After the applicable retention period, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR you have the following rights in relation to your personal data:

• Access — you can request a copy of the personal data we hold about you.
• Rectification — you can ask us to correct inaccurate or incomplete data.
• Erasure — you can ask us to delete your personal data, subject to legal retention obligations.
• Portability — you can request your data in a structured, machine-readable format.
• Object — you can object to processing based on legitimate interests.
• Restrict processing — you can ask us to pause processing of your data in certain circumstances.
• Withdraw consent — where processing is based on consent (e.g. marketing emails), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, email us at info@motorboard.co.uk. We will respond within one calendar month.

8. Cookies

MotorBoard uses session cookies only. These are small files stored in your browser that keep you logged in while you use the platform. Session cookies are deleted when you close your browser or log out.

We do not use:

• Tracking cookies or persistent cookies for advertising purposes.
• Third-party advertising cookies.
• Analytics cookies that identify you personally (we use hashed, anonymised browsing data).

Because we only use strictly necessary session cookies, we are not required to obtain your consent for cookies under the UK PECR. No cookie banner is shown.

9. Security

We take appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data in transit between your browser and our servers.
• Secure payment processing via Stripe — your card details are never transmitted to or stored on MotorBoard's servers.
• Parameterised database queries to prevent SQL injection attacks.
• Access controls limiting personal data access to authorised personnel only.

No system is completely immune from attack. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected users without undue delay.

10. Children

MotorBoard is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a child, please contact us at info@motorboard.co.uk and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our data practices, or our services. When we make material changes, we will notify registered users by email and update the effective date at the top of this page.

We encourage you to review this policy periodically. Continued use of MotorBoard after any changes take effect constitutes your acceptance of the updated policy.

12. Complaints

If you have a concern about how we handle your personal data, please contact us first at info@motorboard.co.uk. We will do our best to resolve your concern.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113