Legal

Privacy Policy

Last updated: 10 April 2026

This Privacy Policy explains how MOTQuickCheck (the “Service”) collects, uses, and shares personal data when you use the Chrome extension, the motquickcheck.uk website, or the associated backend services. The Service is operated by Dmytro Zakharchuk, trading as MOTQuickCheck (the “Operator”, “we”, “us”), a UK-based sole trader acting as the data controller for the personal data described in this policy.

1. What we collect

We collect only the data we need to run the Service, authenticate you, deliver paid features, and keep MOTQuickCheck secure and reliable. Specifically:

Account data

When you sign in through Google, we receive your Google account email address, a stable account identifier, and a display name. We do not receive your Google password.

Session and usage data

When you use the extension, we store a short session token in your browser so you don\u2019t have to sign in repeatedly. We record anonymised counters for internal quota enforcement — for example, how many listing scans your account has used today, and which listings your account has already scanned. We may keep short technical logs of requests (such as request path, timestamp, status code, and an account identifier) for reliability, abuse prevention, and debugging.

Vehicle and listing data

When you scan a listing, the extension sends the listing URL and a small amount of page context to our backend so that we can resolve the vehicle\u2019s registration and look up its MOT history from the DVSA. We do not upload the full page. We do not collect the seller\u2019s contact details.

Billing data

If you purchase a subscription, the transaction itself is handled by Paddle.com Market Limited (“Paddle”), who acts as the merchant of record. Paddle collects your payment details directly and processes them under its own privacy notice. We receive a limited subset of billing data from Paddle, including a customer ID, a subscription ID, plan status, billing period start/end dates, and webhook events. We do not see or store your card number, CVV, or full billing address.

2. What we do not collect

• We do not collect your Google password.
• We do not collect your card details or CVV.
• We do not sell personal data to anyone, ever.
• We do not run third-party advertising trackers in the extension.

3. Why we process your data

We use the data we collect to:

• identify your account and keep you signed in;
• enforce the features and limits of your current plan;
• look up vehicle MOT history from the DVSA for the listing you are viewing;
• generate short summaries of MOT history where that feature is enabled;
• process payment and subscription lifecycle events through Paddle;
• investigate abuse, technical issues, and security incidents;
• improve the quality, reliability, and performance of the Service.

4. Legal bases (UK GDPR)

Where UK GDPR applies, we rely on the following legal bases:

• Contract — to provide the Service you have asked us for, including paid subscriptions.
• Legitimate interests — to keep the Service working, prevent abuse, and enforce usage limits.
• Consent — where a specific feature requires it, for example when you initiate a checkout.
• Legal obligation — where we must retain records for tax, accounting, or regulatory reasons.

5. Third parties we use

We use a small number of third parties to run the Service. The main ones are:

• Google — sign-in via OAuth.
• DVSA MOT history service — source of MOT records.
• Anthropic — AI model used to generate MOT summaries.
• Paddle — merchant of record for billing, invoicing, and tax.
• Railway — hosting and infrastructure.

Each of these parties has its own privacy notice and may be a separate data controller or processor. You should review their notices if you want to understand how they handle data they receive from us.

6. Links to third-party sites

The Service reads and links to third-party websites, including AutoTrader. We do not control those sites and we are not responsible for their content or privacy practices.

7. Cookies and similar technologies

The website uses strictly necessary storage only (for example, to remember that you arrived from the extension and to complete a checkout). It does not use third-party advertising cookies or cross-site tracking cookies. The extension stores session state in Chrome\u2019s local extension storage, not in shared browser cookies.

8. Data retention

We keep personal data only for as long as we need it:

• Account records are kept while your account is active.
• Session tokens are short-lived and rotate frequently.
• Usage counters reset on a daily basis.
• Scan history is kept per account under fair-use limits and can be reset on request.
• Billing records are retained as required by tax and accounting law.

When you ask us to delete your account, we delete or anonymise the personal data we hold about you, except where we are required to keep it under law (such as billing records).

9. Security

We use standard security practices to protect personal data, including encryption in transit, hashed session tokens, strict server-side entitlement checks, and webhook signature verification for billing events. No internet service is perfectly secure, but we take reasonable steps to keep your data safe.

10. Where data is processed

MOTQuickCheck is UK-focused. Our backend runs in the European region. Some of the third parties we use (including AI model providers) may process data outside the UK or the European Economic Area. Where that happens, we rely on appropriate safeguards under UK data protection law.

11. Your rights

Under UK GDPR, you have rights over personal data we hold about you, including the right to:

• access the personal data we hold about you;
• ask us to correct data that is inaccurate;
• ask us to delete your account and associated personal data;
• object to or restrict certain processing;
• request a portable copy of your data in a common format;
• withdraw consent where processing is based on consent;
• lodge a complaint with the UK Information Commissioner\u2019s Office (ICO) at ico.org.uk.

You can exercise any of these rights by contacting us at hello@motquickcheck.uk.

12. Children

The Service is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has signed up, please contact us and we will delete the account.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the \u201cLast updated\u201d date at the top and, where the change is material, we will notify you in-product or by email before it takes effect.

14. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, contact us at hello@motquickcheck.uk.