Privacy Policy

1. Who We Are

KickingTyres is a car auction aggregation platform operated in England. We bring together listings from auction houses across the UK into a single searchable platform for enthusiasts.

For data protection enquiries, contact us at hello@kickingtyres.uk.

2. What Data We Collect

We collect the following personal data:

• Account information: Email address and name (optional) when you create an account.
• Usage data: Saved cars, saved searches, search preferences, and buying project contents.
• Analytics data: Pages visited, features used, and general usage patterns. This data is aggregated and does not identify you personally.
• Communication preferences: Whether you have opted in to the weekly email digest and search alerts.

3. How We Collect It

• Directly from you: When you create an account, save a car, create a search alert, or use any feature that stores your preferences.
• Automatically: Through cookies and analytics when you browse the site.

4. Why We Collect It (Lawful Basis)

• Consent: Account creation and email notifications — you actively choose to sign up and can opt out at any time.
• Legitimate interests: Analytics and service improvement — we use aggregated usage data to understand how people use the platform and improve it.
• Contract performance: To provide the service you signed up for, including saved searches, alerts, and personalised features.

5. Authentication

We use Supabase Auth for account management. You can sign up and log in using email and password or magic link (a one-time login link sent to your email). We do not store your password directly — it is handled securely by our authentication provider.

6. Cookies

We use the following cookies:

• Session cookies: Essential cookies to keep you logged in and maintain your session. These are strictly necessary for the site to function.
• Analytics cookies: We use Vercel Analytics to understand general usage patterns. This data is aggregated and does not personally identify you.

We do not use advertising or tracking cookies.

7. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase: Authentication and database hosting (EU region).
• Vercel: Website hosting and analytics.
• Resend: Transactional email delivery (alerts, digests).
• Stripe: Payment processing for premium subscriptions.

Each of these services has their own privacy policy. We only share the minimum data necessary for each service to function.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Aggregated analytics data (which does not identify you) may be retained indefinitely.

9. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct any inaccurate data.
• Erasure: Ask us to delete your data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Object: Object to processing based on legitimate interests.
• Restrict processing: Ask us to limit how we use your data.

To exercise any of these rights, email us at hello@kickingtyres.uk. We will respond within 30 days.

10. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email (if you have an account) or by placing a prominent notice on the site. The "last updated" date at the top of this page indicates when the policy was last revised.