1. Who We Are
- Data Controller: Infoo Limited
- Registered Address: Hazlemere, 70 Chorley New Road, Bolton, Greater Manchester, BL1 4BY
- Contact for Data Protection: support@infoo.com
2. The Data We Collect About You
We may collect and process the following data:
Information You Give Us:
- Contact Data: Your email address when you register or purchase a report.
- Vehicle Data: The Vehicle Registration Marks (VRMs) you submit for searches.
- Financial Data: We do not store your credit/debit card details. This is handled securely by our payment processors (Apple/Google). We only receive transaction confirmation.
Information We Collect Automatically:
- Usage Data: Information about how you use the App, such as features used and session duration.
- Device Data: Technical information about your mobile device, such as operating system and version. This data is often anonymised or aggregated.
2a. Cookies
Functional Cookies
We use essential cookies that are necessary for our website to function properly:
- Authentication Cookies: Store your login session to keep you signed in
- Navigation Cookies: Remember your current page and navigation state
- Preference Cookies: Store your email notification preferences
These cookies are essential for the website to work and cannot be disabled. They do not track your browsing activity across other websites.
3. How We Use Your Personal Data and Our Lawful Basis
We will only use your personal data when the law allows us to. Most commonly, we will use your data in the following circumstances:
| Purpose of Processing | Type of Data | Lawful Basis for Processing |
|---|---|---|
| To register you as a new user and provide our Services. | Contact, Vehicle | Performance of a contract with you. |
| To process your payment for a Premium Report. | Contact, Financial | Performance of a contract with you. |
| To deliver your Premium Report via email and in-app. | Contact, Vehicle | Performance of a contract with you. |
| To manage our relationship with you, including notifying you of changes to our terms or privacy policy. | Contact, Usage | Performance of a contract; Legitimate Interests (to keep our records updated). |
| To improve our App, Services, and AI models. | Usage, Device, Vehicle | Legitimate Interests (to develop our business and improve our offerings). |
| To comply with a legal or regulatory obligation. | All relevant data | Legal obligation. |
We do not use your personal data for marketing purposes unless we have your explicit, opt-in consent.
4. Data Sharing
We may have to share your personal data with the parties set out below for the purposes outlined in the table above:
- Service Providers: Third-party IT, hosting, and analytics providers.
- Data Partners: The DVLA/DVSA (via API call with VRM) and our third-party provider for Premium Reports (we only share the VRM).
- Payment Processors: To handle secure payments.
- Regulatory Bodies: HM Revenue & Customs, regulators, and other authorities who require reporting of processing activities in certain circumstances.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
5. Data Security & Retention
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For example, transaction data is kept for six years for tax purposes.
6. Your Legal Rights
Under UK data protection law, you have rights including:
- Right of Access: To request a copy of the personal data we hold about you.
- Right to Rectification: To request correction of inaccurate personal data.
- Right to Erasure: To request that we delete your personal data.
- Right to Restrict Processing: To request that we suspend the processing of your personal data.
- Right to Data Portability: To request the transfer of your personal data to you or a third party.
- Right to Object: To object to our processing of your data where we are relying on a legitimate interest.
To exercise any of these rights, please contact us at support@infoo.com
7. Complaints
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.