Privacy notice

Last updated: 10 November 2026.

Who is responsible

The data controller is Tim Johnson, trading as Vehicle Vertical. This notice covers the website at vehiclevertical.com and the Vehicle Vertical dossier service.

TODO — business address: a registered or trading address has not been added yet. It will appear here once it is confirmed. Until then, write to us at hello@vehiclevertical.com. That mailbox is being set up and may not be monitored yet.

What we collect

We collect only what we need to provide the service:

• Vehicle registrations you look up, and the dossier we compile for them.
• An email address when you sign in or when you enter one at checkout.
• Payment details processed by Stripe, or a wallet transaction on Base if you pay in USDC.
• Credits, unlocked reports and a record of purchases on your account or, if you stay a guest, on this device.
• Technical logs needed to run and secure the site, such as IP address and basic request metadata for rate limiting.

Why we use it

We use this information to provide vehicle dossiers, take payment, prevent fraud and abuse, keep accounts and guest credits working, and meet UK legal obligations. The lawful bases we rely on are performing a contract with you, our legitimate interests in running a secure service, and, where required, a legal obligation.

Processors and sources

We use these processors and official sources. We do not sell your personal data.

• Stripe — card payments and receipts.
• Supabase — account sign-in and storage of account data, when accounts are connected.
• Vercel — hosting, edge delivery and related infrastructure, including Vercel Blob for guest desk data.
• One Auto — live MOT history, tax status and vehicle details.
• DVLA and DVSA — the official sources of that vehicle data, reached via One Auto.

If you pay with USDC on Base, the transfer is recorded on the public Base blockchain.

How long we keep it

We keep purchase and account records for as long as you have an account and for a reasonable period afterwards so we can handle refunds, disputes and legal obligations. Guest credits stored in a browser cookie last up to 400 days, or until you clear cookies or we migrate them onto an account.

Your rights

Under UK GDPR you can ask for a copy of your data, for it to be corrected or deleted, for us to restrict or object to certain processing, and to receive data you provided in a portable form. You can also complain to the Information Commissioner’s Office at ico.org.uk. To make a request, email hello@vehiclevertical.com once that mailbox is live.

Cookies

We only use cookies that are needed to run the service. See the cookie notice.