Privacy notice
This notice explains what personal data Torque Teardown collects, why, and what your rights are under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Who we are
Torque Teardown is run by Torque Teardown, a sole trader. We are the “controller” of your personal data, which means we decide how it is used.
Contact: TorqueTeardown@gmail.com
ICO registration number: [ICO registration number, or remove if exempt – check at ico.org.uk/fee]
What we collect
- Account details – your email address and a login record. Passwords are handled by our login provider (Supabase) and stored in a scrambled (hashed) form; we never see them.
- My Garage – the cars you save, including make, model, year, any registration numbers you enter, and your own notes, prices and part numbers.
- Registration lookups – when you look up a registration, we send it to the DVSA MOT History service and show you the results (test dates, mileage, pass/fail, advisories). If you add a car to My Garage, the MOT results you load for it are saved to your account so you can see them again.
- Subscription details – if you take out Pro, payment is handled by Stripe. We receive your subscription status, plan, billing dates and a Stripe customer reference. We never see or store your full card details.
- Technical data – like most websites, our hosting provider keeps basic logs (such as IP address, browser type and time of visit) to keep the site running and secure.
- Messages – if you email us, we keep the email and our reply.
We don’t use advertising trackers and we don’t sell your data.
Why we use it, and our lawful basis
- To run your account, My Garage and Pro features – because it’s needed to provide the service you signed up for (contract).
- To take payment and manage your subscription – contract, and to keep tax and accounting records (legal obligation).
- To look up MOT history – contract, because you asked us to run the lookup.
- To keep the site secure, fix faults and prevent misuse – our legitimate interests in running a safe, working service.
- To reply to you – legitimate interests (or contract, if it’s about your subscription).
Who we share it with
We use trusted service providers (“processors”) who only use your data to provide their service to us:
- Supabase – accounts, login and database (including My Garage). Region: the EU (Ireland)
- Stripe – payments and subscriptions. Stripe is also a controller for some payment data under its own privacy policy: stripe.com/gb/privacy.
- Netlify – website hosting and the small server functions that run lookups. Region: worldwide, including the USA
- DVSA (Driver and Vehicle Standards Agency) – we send a registration number to the DVSA MOT History service to fetch MOT records. We don’t send your name or email.
- Font and code delivery networks – the site loads fonts from Google Fonts and code libraries from cdnjs (Cloudflare) and jsDelivr. These services see your IP address when your browser fetches the files.
We may also share data if the law requires it, or with professional advisers (such as an accountant).
Where your data is stored
Our database is hosted in the EU (Ireland). Some providers (for example Stripe and Netlify) may process data outside the UK, including in the USA. Where that happens we rely on the safeguards in each provider’s data processing terms, such as the UK adequacy regulations for the EU and the UK–US Data Bridge.
How long we keep it
- Account and My Garage data – while your account is open. When you delete your account we remove it within 30 days, and from backups within 30 days.
- Payment and invoice records – 6 years, to meet UK tax rules.
- Server logs – up to 30 days.
- Emails with us – up to 12 months after the matter is closed.
Cookies and local storage
We only use what’s needed for the site to work. We don’t use advertising or tracking cookies.
- Login – your browser keeps a login token (in local storage) so you stay signed in.
- Preferences and recent items – your browser stores things like your settings and recently viewed cars on your device.
- Payments – Stripe’s checkout page may set its own cookies to prevent fraud.
These are “strictly necessary”, so we don’t ask for consent first. You can clear them in your browser settings, but you’ll be signed out and lose saved preferences.
Your rights
You have the right to:
- ask for a copy of your data
- ask us to correct it
- ask us to delete it
- ask us to limit how we use it, or object to how we use it
- get your data in a portable format
- withdraw consent at any time, where we rely on consent
To use any of these rights, email TorqueTeardown@gmail.com. We’ll reply within one month. It’s usually free.
Deleting your account
To delete your account, email TorqueTeardown@gmail.com from the email address you signed up with and we’ll delete it. Deleting your account removes your My Garage cars, saved registrations and notes. If you have Pro, please cancel your subscription first so you aren’t charged again. We keep payment records only as long as the law requires.
Children
There is no minimum age to use Torque Teardown. If you are under 13, a parent or guardian must agree before you create an account. If you are under 18, you need a parent or guardian to buy Pro.
Complaints
If you’re unhappy with how we’ve handled your data, please contact us first at TorqueTeardown@gmail.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk, or call 0303 123 1113.
Changes
We’ll update this notice if anything changes, and tell you by email or in the app if the change is important.