Privacy policy
This policy explains what personal data PartFerret ("we", "us") collects when you use partferret.com, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact for anything privacy-related: [email protected].
What we collect
- Account data — name, email address, password (stored hashed, never readable by us).
- Search data — the vehicles and parts you search for, including vehicle registration numbers you enter (used only to look up make/model via the DVSA MOT History API) and optional postcodes (used to show distances). Searches are linked to your account so you can revisit them.
- Billing data — your purchases, subscription status and credit balance. Card details go directly to Stripe; we never see or store them.
- Usage data — pages visited and product events (via PostHog, EU-hosted) and error reports (via Sentry), used to fix problems and improve the product.
How we use it
- To run your searches: your search request (vehicle, part, requirements — not your name or contact details) is processed by our AI provider and web-retrieval services to find and verify listings. Contract.
- To manage your account, credits and payments. Contract / legal obligation.
- To send transactional email — verification, receipts, saved-search alerts you set up. Contract. We don't send marketing email without your consent.
- To keep the service secure (rate limiting, abuse prevention) and improve it (aggregate analytics). Legitimate interests.
Who processes it for us
| Processor | Purpose |
|---|---|
| Laravel Cloud / AWS (eu-west-2, London) | Hosting and database |
| Anthropic | AI processing of search requests (vehicle/part text only) |
| ScrapingBee | Retrieving public listing pages |
| DVSA MOT History API | Registration → make/model lookup |
| Stripe | Payments and subscriptions |
| Resend | Transactional email |
| Cloudflare | DNS, TLS and traffic protection |
| PostHog (EU) | Product analytics |
| Sentry | Error monitoring |
Some processors (e.g. Anthropic, Stripe) may process data outside the UK; transfers are covered by their standard contractual safeguards. We do not sell personal data to anyone.
Cookies
We use essential cookies for login sessions and security, and an analytics cookie (PostHog) to understand product usage. No third-party advertising cookies.
Retention
Account and search data are kept while your account is open. If you close your account, we delete or anonymise personal data within 30 days, except billing records we must keep for tax purposes (6 years) and minimal logs kept for security.
Your rights
You can ask us to access, correct, delete or export your personal data, or object to or restrict processing — email [email protected] and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the ICO (ico.org.uk).