Legal
Privacy Policy
Last updated 29 May 2026
This policy explains how CarOkay Ltd (“CarOkay”, “we”, “us”) collects and uses personal data when you use carokay.co.uk. We are the data controller. CarOkay is not affiliated with the DVSA.
What we collect
- Vehicle lookups. When you enter a registration we query official sources — the DVSA MOT history API, the DVLA Vehicle Enquiry Service, and the Motor Insurance Database (MID) — to show MOT, tax and insurance status. A registration is vehicle data, not personal data, unless combined with information that identifies you.
- AI diagnosis. Symptoms you describe and photos you upload are sent to our AI provider (Anthropic’s Claude) to generate a diagnosis. Diagnosis results may be cached briefly so a shareable link works; they are not used to identify you.
- Bookings & quote requests. When you contact a garage or request quotes we collect your name, email, phone (if given), postcode and request details so the garage can respond.
- MOT reminders. If you opt in, we store your registration and email to send reminders before your MOT is due.
- Garage accounts. For garages, we store business details, login credentials and subscription/billing information (payments are handled by Stripe).
- Technical data. Standard server logs, and essential cookies/session tokens needed to keep you signed in and protect the service.
How we use it & our legal basis
- To provide the checks, diagnosis, search and booking features you ask for (performance of a contract / your request).
- To send MOT reminders and transactional emails via our email provider, Resend (consent for reminders; legitimate interests for transactional messages).
- To operate, secure and improve the service, and prevent abuse (legitimate interests).
Sharing
We share booking and quote details with the garage(s) you choose, so they can respond. We use processors who act on our instructions — including Cloudflare (hosting), Anthropic (AI), Resend (email), Stripe (garage payments) and Google (garage listings via the Places API). We do not sell your personal data.
Retention
We keep data only as long as needed for the purpose it was collected. Vehicle and Places data is kept transiently or cached for short periods; booking and account data is kept for the life of the relationship and as required by law. You can ask us to delete your data at any time.
Your rights
Under UK GDPR you have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent (e.g. unsubscribe from reminders — every email has a one-click unsubscribe). To exercise any right, email hello@carokay.co.uk. You may also complain to the UK Information Commissioner’s Office (ICO).
Contact
CarOkay Ltd, United Kingdom — hello@carokay.co.uk.