Privacy Policy

Swipe Drive is a trading name operated by an individual in the United Kingdom, responsible for personal information processed through this service. This policy covers swipedrive.co.uk and swipedrive.uk. Send privacy questions and requests to swipe.drive@outlook.com.

• Account information: email address, authentication identifiers, account type, account timestamps, profile picture and the marketing preference you choose. Passwords are handled by Supabase Auth; they are not displayed in account profiles.
• Seller and dealership information you provide: seller name, public contact details, address, website and social links.
• Vehicle information: descriptions, specifications, prices, mileage, listing location, photos, image positioning, dealer listing links, listing status and ownership.
• Activity: likes, skips, saved cars, page views, listing views and recorded search, filter, dealer-view and contact-click events. The data recorded depends on the feature used. Contact-click analytics do not record the contents of your email or phone conversation with a dealer.
• Technical information: a visitor identifier used by our own analytics, page path, referral category, device category, event times and signed-in user ID where available. Hosting and service providers also process request and security logs, which may include IP address, browser and network information.
• Billing information: Stripe customer, checkout, payment and subscription identifiers, selected plan, payment status and subscription dates. Stripe collects payment-method information in its hosted checkout; we do not receive or store your full card number or security code.
• Messages you send to support, including any diagnostic information you choose to include in a bug report or privacy request.

We use account, listing and payment information to provide the services you request, authenticate users, publish and manage adverts, save matches, manage subscriptions and respond to support requests. Where needed to perform our agreement with you, our lawful basis is contract.

We use relevant information for security, fraud prevention, moderation, resolving disputes and service improvements on the basis of legitimate interests, after considering your rights. Accounting and other legally required records are processed for legal obligations. Optional email marketing relies on your consent.

Consent required for non-essential cookies or similar technologies is separate from a data-protection lawful basis. Our current analytics and storage are described in the Cookie Policy; legitimate interests do not replace a required storage consent.

Garage Chemistry uses your likes and skips and vehicle characteristics to rank matches. Your selected filters narrow the cars shown. This recommendation does not determine creditworthiness or make a decision with legal or similarly significant effects.

Guest likes and skips are kept in browser storage. Signed-in saves may also be stored against your account. Signed-in activity timestamps support the drivers-online count. Our internal analytics stores individual events and makes reports available to authorised administrators; seller insights use relevant listing activity.

Vehicle listings and completed public dealership contact details, website, social links and logo are visible to visitors. Avoid uploading personal documents or confidential information into public photos or listing text. Public image links may remain accessible separately from a hidden listing until the underlying file is removed.

We use Supabase for authentication, database and image storage; Stripe for hosted payments, subscriptions and billing; and Vercel for hosting and Web Analytics. Account verification and password-reset emails are requested through Supabase Auth. Support email uses our Outlook contact mailbox.

We share only information needed for these services, legal obligations, fraud prevention or handling a rights complaint. We do not sell your personal information. When you follow dealer, Maps or social links, those services receive the information involved in your visit under their own policies.

Providers may process data outside the UK. Where applicable, transfers must use an appropriate UK adequacy arrangement or contractual safeguards. Contact us for information about the arrangements relevant to your data.

Marketing is optional and the signup checkbox is not pre-selected. You can change your choice in Notification Preferences or ask us at swipe.drive@outlook.com. Any promotional emails we send must include an unsubscribe option.

Necessary service messages may still be sent, including verification, password reset, security or account problems, payment receipts or failures, subscription and cancellation information, important policy changes, support replies and relevant subscription price changes. These are not permission to include unrelated promotion.

We keep information for the time needed for its purpose, including account operation, listing management, support, payment reconciliation, disputes and legal obligations. Retention depends on the record and any outstanding activity; we review what remains necessary. We do not promise that every category is erased after a single fixed period.

You can request deletion through Account settings or by email. Account deletion is separate from cancelling a Stripe subscription, and cancelling a subscription does not delete your account. Contact us about unresolved billing before deleting an account. Some financial, security, complaint or legal records may need to be retained, including records independently held by Stripe.

We may remove inactive vehicle listings after six months without payment or activity. This concerns the listing, not automatic deletion of all account or payment records. Browser saves remain on your device until cleared. Backups and provider logs may be retained separately for their limited operational purposes.

We use access controls, authenticated account routes and provider security measures to protect information. No internet service can promise absolute security. Keep your credentials private and contact us if you suspect misuse.

Subject to the applicable conditions, you can ask to access, correct, delete or receive a portable copy of your personal information, restrict its use, object to processing based on legitimate interests, and withdraw marketing consent. Withdrawing consent does not affect earlier lawful processing.

You can object to direct marketing at any time. Send requests to swipe.drive@outlook.com; we may need reasonable information to confirm your identity. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

We will update this policy when our processing changes and provide notice of material changes where appropriate. The last-updated date identifies this version.