CarVeto Privacy Policy
Last updated: 15th September 2026
1. About CarVeto and this privacy policy
CarVeto Limited provides free and paid UK vehicle history checks for private motorists, car buyers and sellers.
Our services include free car checks and detailed Gold, Platinum and CarVeto Complete vehicle history reports.
Depending on the Car Information Check selected and the data available, CarVeto combines vehicle information from multiple sources to help customers investigate a vehicle’s identity, MOT and tax status, mileage, outstanding finance, theft, insurance write-off, salvage and other recorded history.
This privacy policy explains how CarVeto collects, uses, stores and protects personal information when you:
- Visit carveto.co.uk.
- Run a vehicle check.
- Create or use a CarVeto account.
- Purchase or access a vehicle history report.
- Buy or use a CarVeto report bundle.
- Register for vehicle reminders.
- Contact our customer support team.
- Request a refund or raise a complaint, data query or guarantee claim.
“Personal information” means information relating to an identified or identifiable person. A vehicle registration mark or VIN may constitute personal information where it is connected with a customer, account, vehicle owner or transaction.
The commercial terms governing CarVeto reports and vehicle data are contained in our Terms and Conditions.
2. Who is responsible for your personal information?
CarVeto Limited is the data controller responsible for the personal information described in this policy.
CarVeto Limited
Registered in England and Wales
Company number: 16780980
Registered office: 13 Harbury Road, Bristol, BS9 4PN
ICO registration reference: ZC221756
Data protection contact: Marcus Rockey
Email: [email protected]
3. Personal information we collect
The information collected depends on the CarVeto service you use.
Information you provide
We may collect:
- Your name and email address.
- Your account details and communication preferences.
- A vehicle registration mark entered to run a check.
- A VIN, mileage or other vehicle identifier where required for a particular report or enquiry.
- Details of the report or report bundle you purchase.
- Messages and other information supplied when you contact us.
- Information provided in connection with a complaint, refund, finance query or data-guarantee claim.
- Supporting documents supplied for a claim, which may include a purchase receipt, vehicle details and seller or lender information.
Please do not provide personal information that is not necessary for your enquiry or claim.
Information created when you use CarVeto
We may create or retain:
- A customer, account, order or report reference.
- The date and time of a vehicle check.
- The type of report requested.
- The vehicle registration and, where applicable, the VIN associated with a report.
- Transaction amount, status and payment reference.
- Saved report and bundle-credit information.
- Vehicle-reminder and communication preferences.
- Customer-support correspondence.
- Technical information such as IP address, browser type, device type, access times and security logs.
- Cookie and analytics identifiers where non-essential cookies are permitted.
Information received from other organisations
We may receive:
- Payment confirmation and limited transaction information from Stripe, PayPal, Braintree or Monzo.
- Vehicle information from or through sources such as DVLA, DVSA, Experian, the Motor Insurance Database and askMID, together with finance, insurance, mileage, salvage and other specialist vehicle-data sources.
- Information from technical intermediaries used to retrieve and deliver vehicle data.
- Information required to investigate a vehicle-data query or administer a guarantee claim.
- Website usage information from analytics providers where analytics cookies are permitted.
Vehicle-data sources and suppliers may change as CarVeto’s services develop.
CarVeto vehicle history reports do not provide the names, contact details or addresses of current or previous registered keepers.
4. How and why we use personal information
Purpose | Information Used | Lawful Basis |
|---|---|---|
Running a free vehicle check | Vehicle registration and technical request information | Our legitimate interests in providing and operating the requested free service |
Supplying a paid vehicle history report | Name, email, vehicle identifiers, order and report information | Performance of our contract with you |
Creating and managing an account | Name, email, account identifiers, saved reports and preferences | Performance of our contract with you |
Managing report bundles | Email address, purchase information, bundle credits and usage | Performance of our contract with you |
Processing and recording payments | Name, email, order value, payment status and transaction reference | Performance of our contract and compliance with legal obligations |
Sending reports and service messages | Name, email, order and report information | Performance of our contract |
Providing requested vehicle reminders | Email address, vehicle registration and reminder preferences | Providing the service you requested |
Handling support, complaints and refunds | Contact, account, order, report and correspondence information | Performance of our contract and our legitimate interests in resolving enquiries and maintaining service records |
Investigating vehicle-data or guarantee queries | Customer, order, report, vehicle and supporting claim information | Performance of our contract, compliance with legal obligations and our legitimate interests in investigating claims |
Preventing fraud, misuse and security incidents | Account, transaction, IP address, device and technical-log information | Our legitimate interests in protecting customers, CarVeto and our services |
Maintaining and improving CarVeto | Technical, report-performance and website-usage information | Our legitimate interests in operating and improving our services; consent where non-essential cookies are involved |
Sending optional marketing | Name, email address and marketing preferences | Your consent |
Meeting tax, accounting and regulatory requirements | Order, payment and customer records | Compliance with legal obligations |
Establishing or defending legal claims | Relevant customer, order, report, support and transaction information | Our legitimate interests and compliance with legal obligations |
Where we rely on legitimate interests, those interests include operating a secure and reliable vehicle-check service, preventing fraud, investigating complaints, maintaining appropriate business records and improving the customer experience.
We consider whether the processing is necessary and proportionate and whether our interests could be overridden by your rights.
5. Vehicle registrations, VINs and report data
CarVeto uses a vehicle registration mark and, for some services, a VIN or current mileage to request information and generate a vehicle history report.
Vehicle information may be obtained directly from DVLA and DVSA or through Experian, askMID and other specialist vehicle-data sources and technical intermediaries.
We may retain a vehicle registration and VIN where they:
- Form part of a purchased or saved report.
- Are connected with a CarVeto account or vehicle reminder.
- Are required to investigate a data query.
- Are relevant to a complaint, refund or guarantee claim.
- Are reasonably required for fraud prevention, security or legal purposes.
Vehicle identifiers used to generate a report are normally transmitted without the customer’s name or email address. We do not routinely provide customer contact information to vehicle-data suppliers merely to run a vehicle check.
If you raise a complaint, outstanding-finance query or guarantee claim, we may need to share limited customer, order, report and vehicle information with Experian or another relevant supplier so that the matter can be investigated.
6. Information required to supply CarVeto services
Certain information is necessary to provide a CarVeto service:
- A vehicle registration is required to run a registration-based check.
- A VIN may be required for certain vehicle-history checks or investigations.
- An email address is required to deliver and provide continued access to a purchased report.
- Name and transaction details may be required to process an order, refund, complaint or guarantee query.
If required information is not provided, we may be unable to supply or administer the requested service.
Marketing consent is optional and is not required to purchase a CarVeto report.
7. Payments
CarVeto accepts payments through Stripe, PayPal, Braintree and Monzo.
Depending on the payment method selected, payment or banking information is entered into and processed by the relevant provider.
CarVeto does not receive or store your complete card number or card security code.
We may receive and retain limited payment information such as:
- The payer’s name or email address.
- The amount paid.
- Payment status.
- Transaction or bank-transfer reference.
- The payment method used.
- Limited billing or payer information supplied by the provider.
Where a payment is made through Monzo, the transaction information made available to CarVeto may include the payer’s name, payment reference and other limited information associated with the transfer.
These organisations process payment information under their own legal obligations and privacy notices.
8. When we share personal information
CarVeto does not sell customer personal information.
We may share information with the following categories of recipient where necessary:
- Vehicle-data suppliers and technical intermediaries used to generate a report or investigate a data query.
- Experian or another relevant provider where necessary to investigate a guarantee matter.
- Payment and banking providers, including Stripe, PayPal, Braintree and Monzo.
- Hosting, database, authentication, security and other technical-service providers.
- Email and communications providers used to deliver reports and customer messages.
- Analytics providers where non-essential analytics technologies are permitted.
- Accountants, insurers, legal advisers and other professional advisers.
- Regulators, law-enforcement agencies, courts and public authorities where disclosure is legally required or reasonably necessary.
- A purchaser or successor if CarVeto undergoes a sale, merger or business reorganisation, subject to appropriate confidentiality protections.
Where CarVeto links to an external service, the external provider’s privacy policy applies to information you provide after following that link.
We only disclose customer information for third-party marketing where the customer has provided the necessary consent or expressly requested the relevant service.
Some recipients process information on CarVeto’s instructions.
Others, including payment providers and Experian when administering a guarantee claim, may act as separate data controllers for their processing.
9. International transfers
Some of our technology, payment, communications and analytics providers may process personal information in, or make it accessible from, countries outside the United Kingdom, including the European Economic Area and the United States.
Where a restricted international transfer takes place, CarVeto requires an appropriate transfer mechanism under UK data-protection law. Depending on the provider and destination, this may include:
- UK adequacy regulations.
- The UK International Data Transfer Agreement.
- The UK Addendum to approved Standard Contractual Clauses.
- Another transfer mechanism permitted under UK data-protection law.
You may contact us for further information about the safeguards relevant to your personal information.
10. How long we retain information
CarVeto retains personal information only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, security and claims requirements.
Information | Normal Retention |
|---|---|
Paid vehicle history report | Available to the customer for six months after generation |
Vehicle registration or VIN associated with a paid report | Normally retained with the report for its availability period and longer only where required for support, claims, security or legal purposes |
Report bundle and associated email entitlement | Available for 12 months after purchase |
Account information | While the account remains open or is required to provide requested services |
Order, invoice and transaction records | Normally six years from the end of the relevant financial year for VAT, tax and accounting purposes |
Customer-support correspondence | Until the enquiry is resolved and longer where reasonably required for a complaint, dispute or legal claim |
Guarantee and formal complaint records | For the applicable guarantee or claim period and for as long as reasonably necessary after the matter is closed |
Marketing information | Until consent is withdrawn or you unsubscribe |
Marketing suppression record | For as long as necessary to ensure that we continue to respect the opt-out |
Technical and security logs | Only for as long as reasonably required for security, fraud prevention, troubleshooting and legal compliance |
Cookie information | For the periods described in our Cookie Policy and cookie controls |
A CarVeto report records the vehicle information available when the check was performed.
Making a report accessible for six months does not mean that its vehicle data is continuously updated during that period.
When information is no longer required, we delete it, anonymise it or restrict its use unless continued retention is legally required.
11. Marketing communications
CarVeto sends promotional emails where you have opted in.
Marketing consent is optional and is not a condition of purchasing a CarVeto vehicle history report.
You can unsubscribe at any time by:
- Using the unsubscribe link in a marketing email.
- Changing the available preferences in your account.
- Emailing [email protected].
Unsubscribing from marketing will not prevent CarVeto from sending necessary service messages such as:
- Order confirmations.
- Payment receipts.
- Report-access emails.
- Requested vehicle reminders.
- Security messages.
- Responses to support enquiries.
12. Cookies and analytics
CarVeto uses essential cookies and similar technologies to operate the website, maintain sessions, protect accounts and provide access to purchased reports.
We may also use non-essential analytics technologies, including Google Analytics, to understand how visitors use CarVeto and improve the website and vehicle-check experience.
Non-essential technologies are used subject to applicable consent requirements and the choices available through our cookie controls.
You can also control cookies through your browser, although blocking essential cookies may prevent parts of CarVeto from functioning correctly.
Please read our Cookie Policy for further information.
13. Automated processing
CarVeto uses automated systems to retrieve, combine and display vehicle information.
Depending on the report, these systems may highlight possible issues involving:
- Vehicle identity.
- MOT or tax status.
- Mileage discrepancies.
- Outstanding finance.
- Theft records.
- Insurance write-off history.
- Salvage history.
- Other vehicle-status markers.
CarVeto does not use these automated report processes to make decisions that produce a legal or similarly significant effect on you.
The decision whether to buy, sell or otherwise deal with a vehicle remains yours.
14. Keeping personal information secure
CarVeto uses appropriate technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures include access controls, appropriate service providers and administrative and technical security measures proportionate to the information processed.
No internet transmission or storage system can be guaranteed to be completely secure.
If you believe your CarVeto account or personal information has been compromised, please contact [email protected].
15. Your data-protection rights
Depending on the circumstances, you may have the right to:
- Ask for a copy of your personal information.
- Correct inaccurate or incomplete information.
- Ask us to delete personal information.
- Restrict how personal information is used.
- Object to particular uses, including direct marketing.
- Receive certain information in a portable format.
- Withdraw consent where processing is based on consent.
- Complain to the Information Commissioner’s Office.
These rights are not absolute.
They may be limited where CarVeto has a legal obligation or another valid reason to retain or process information.
To exercise a right, email [email protected].
We may ask for information needed to confirm your identity and locate the relevant records.
We normally respond within one month.
16. Complaints
Please contact CarVeto first if you have concerns about how we use your personal information:
Email: [email protected]
Address: CarVeto Limited, 13 Harbury Road, Bristol, BS9 4PN
You also have the right to complain to the Information Commissioner’s Office:
Make a data-protection complaint to the ICO
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
17. Children’s information
CarVeto’s vehicle history check services are not directed at children, and we do not knowingly collect personal information from children.
If you believe that a child has provided personal information to CarVeto, please contact us so that we can investigate and take appropriate action.
18. Changes to this privacy policy
CarVeto reviews this privacy policy when our services, suppliers or legal obligations change.
The date at the top of this page shows when the current version was last updated.
Where a change materially affects how we use personal information, we will provide an appropriate notice before the new use begins.