Last updated: 11 July 2026
This website is operated by Henri Rapson trading as AutoSafe.
This notice explains how we collect and use your personal data when you use the AutoSafe website to view recorded MOT details and comparable-vehicle evidence.
| Data | Source | Stored? |
|---|---|---|
| Vehicle registration number (VRN) | You enter it | Yes - plaintext is kept with the check record for up to 24 months, then removed after a keyed pseudonym is created |
| Postcode | You enter it | Yes - kept with the check record for up to 24 months, then removed |
| Vehicle details, latest recorded MOT information, mileage provenance and the report result (predicted chance or comparison) | DVSA public records + our system | Yes - kept with your check record (same retention as above) |
| Saved-report bearer token and report payload | Our system | Stored with the check record; the public link expires after 90 days and the payload is removed at the 24-month check-record limit |
| Garage, reminder and emailed-report enquiry data (including email, optional contact details, postcode and vehicle details) | You enter it after choosing the relevant service | Yes - for up to 12 months, then deleted by the lead-retention process |
| Network/security metadata, which may include IP address | Hosting infrastructure | The AutoSafe application access log is disabled; the hosting provider may temporarily process network metadata for security and service operation |
| Aggregated usage statistics | Automatic | Yes - but not personally identifiable |
Important: When you run a check, we keep the normalised VRN and postcode, the latest recorded MOT details used by the report, provenance fields and the report result (the predicted chance or the comparable-vehicle comparison). We use the record to operate and monitor the service. We do not currently link reports to later MOT outcomes; that would require a separate source, privacy review and notice update before it began. After 24 months, the plaintext VRN, postcode, report payload and share token are removed; a keyed VRN pseudonym may remain where necessary for restricted aggregate monitoring or rights handling. You can object or ask us to erase your record - see "Your rights" below.
| Purpose | Lawful basis |
|---|---|
| Generate and save your MOT comparison report | Legitimate interests - you request this service |
| Provide reminders and emailed reports | Legitimate interests - you request the service |
| Match you with local garages for repair quotes | Consent - you explicitly opt in via the form checkbox |
| Security and fraud prevention | Legitimate interests - protecting our service |
| Understanding how our site is used | Legitimate interests - improving our service (aggregated data only) |
We do not currently link reports to later MOT outcomes. We would complete a separate lawful-source, necessity and balancing review and update this notice before introducing that processing.
We rely on legitimate interests where we have a genuine business reason to process your data, and this does not unfairly impact your rights. You can object to this processing - see "Your rights" below.
We do not sell your data.
When you request repair quotes via our garage matching form, we share your contact details (email, name, phone if provided), postcode, vehicle details, and repair description with local garages in your area so they can contact you with quotes. We only share this data when you explicitly consent via the form checkbox.
You can withdraw consent for future handling by emailing autosafehq@gmail.com. Withdrawal cannot recall details already sent; contact a garage directly about its subsequent handling.
We use the following service providers (processors) who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| Railway | Website hosting and database | Configured service region |
| Resend | Delivery of emails you request and garage enquiries you submit | United States |
| Partner garages | Providing repair quotes (only when you consent) | UK |
| Umami Analytics | Aggregated website statistics (cookieless) | Self-hosted in the configured service region |
| Google Ads (gtag) | Conversion tracking - only if you accept cookies via the consent banner | US (Google LLC) |
Railway, Resend, self-hosted Umami and Google provide services under their terms and applicable data protection agreements. Partner garages receive enquiry data only when you consent and are responsible for their own subsequent handling.
Resend and, if you accept advertising cookies, Google Ads may process limited data outside the United Kingdom. Where that is a restricted transfer, it must be covered by applicable UK adequacy regulations, appropriate safeguards or a permitted exception. Railway and self-hosted Umami process data in the configured service region; those regions and transfer arrangements must remain under review.
| Data | Retention |
|---|---|
| Check records: VRN, postcode, vehicle/MOT details, provenance, report result (predicted chance or comparison) and saved-report payload | Up to 24 months; plaintext identifiers and the report payload/token are then removed, with a keyed VRN pseudonym retained only where needed for restricted aggregate monitoring or rights handling |
| Lead enquiry data | Up to 12 months, then deleted |
| Application access logs | Disabled; application logs exclude raw VRN, raw postcode, email content and saved-report tokens |
| Analytics data | Limited allowlisted event data under the configured processor retention; no VRN, postcode, email or saved-report token event fields |
Our service processes the vehicle's recorded MOT history and details automatically. When AutoSafe can assess the vehicle's recorded MOT history and details (together with any postcode provided, used for regional context), it produces the vehicle's predicted chance of failing its next MOT; otherwise it matches recorded vehicle details, age and available mileage to the closest supported group in aggregated MOT data and reports that group's recorded failure rate. Neither result diagnoses this vehicle or determines its next MOT result.
Important:
Depending on the circumstances, UK data protection rights may include the following. These rights are not absolute and legal conditions or exceptions may apply:
To exercise any of these rights, email us at autosafehq@gmail.com.
We will normally respond within one calendar month and will tell you if the law permits more time.
Objecting to legitimate-interest processing: if you object, we will erase your check records or remove the plaintext identifiers and report payload so the retained row cannot directly identify the vehicle without the separately controlled HMAC key, unless we have a compelling legal ground to retain them. Objection does not affect a report already delivered to you. Include the vehicle registration you checked so we can locate your records.
We use cookieless Umami Analytics for limited website event statistics. Event payloads use a fixed allowlist and never include registration, postcode, email address or saved-report token. Automatic analytics are disabled on saved-report link routes. Its hosting infrastructure may process network metadata such as an IP address for delivery and security.
Google Ads conversion-measurement cookies are set only if you accept them via the consent banner on your first visit; if you decline, no advertising cookies are set and the site works fully. You can change your choice at any time by clearing the site's data in your browser, which will show the banner again.
We may update this notice from time to time. The date at the top shows when it was last updated.
If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO):