Legal
Privacy Policy
Last updated: 16 June 2026 · Effective immediately
This Privacy Policy explains how RegSpecs ("we", "us", "our") operated by MD Data Source Ltd collects, uses, stores and protects your personal data when you use regspecs.co.uk or our related services.
We are committed to protecting your privacy and complying with Irish Data Protection legislation, the Data Protection Acts 1988–2018 and the GDPR.
MD Data Source Ltd is the data controller responsible for your personal data.
1. Scope of This Policy
This Privacy Policy applies when you:
- Visit or use our website
- Purchase a vehicle history report or related service
- Contact us via email or web forms
- Subscribe to marketing communications
- Interact with our advertising or analytics tools
2. Information We Collect
We may collect the following categories of personal data:
Information you provide directly
- Name
- Email address
- Phone number (if provided)
- Payment or billing information (processed securely by third parties)
- Messages or enquiries submitted to us
Vehicle and service data
- Vehicle registration numbers submitted for checks
- Data required to generate vehicle history reports
Technical and usage data
- IP address
- Device type and browser information
- Pages visited and usage behaviour
- Approximate location data derived from IP address
This data may be collected through cookies and analytics tools.
3. How We Use Your Data
We use your personal data to:
- Provide vehicle history reports and related services
- Process payments and complete transactions
- Respond to customer enquiries and support requests
- Prevent fraud and misuse of our services
- Improve website performance, security and user experience
- Send service updates (where necessary)
- Send marketing communications (only where you have opted in)
4. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Contract: To provide services you have purchased or requested
- Legal obligation: To comply with legal and regulatory requirements
- Legitimate interests: To improve services, ensure security, and prevent fraud
- Consent: For marketing communications and non-essential cookies
6. Payments and Third Parties
We use trusted third-party payment processors such as Stripe and PayPal.
We do not store full payment card details on our servers.
These providers process your data under their own privacy policies and act as independent data controllers or processors where applicable.
8. International Data Transfers
Some of our service providers may process data outside the Republic of Ireland.
Where this occurs, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Other lawful transfer mechanisms under Irish Data Protection legislation
9. Data Retention
We retain personal data only for as long as necessary:
| Data type | Retention period |
|---|---|
| Transaction and billing data | Up to 6 years (legal and tax obligations) |
| Enquiry data | Up to 12 months after last contact |
| Marketing data | Until you withdraw consent or unsubscribe |
| Vehicle lookup data | As necessary for service provision, fraud prevention, and audit |
After these periods, data is securely deleted or anonymised.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.
While we take reasonable steps to protect your data, no system or online transmission can be guaranteed as completely secure.
11. Your Data Protection Rights
Under Irish Data Protection legislation, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time (where applicable)
To exercise these rights, contact us using the details below.
You also have the right to complain to the Data Protection Commission (DPC) if you are unhappy with how your data is handled.
12. Marketing Communications
We only send marketing emails if you have opted in or where otherwise permitted by law.
You can unsubscribe at any time using the link in our emails or by contacting us directly.
We may measure engagement (such as email opens and clicks) to improve our communications.
13. Automated Decision-Making
We do not use your personal data for automated decision-making that produces legal or similarly significant effects.
14. External Links
Our website may contain links to external websites.
We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing their privacy policies before providing any personal data.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updates will be posted on this page with a revised "Last Updated" date.
We encourage you to review this policy periodically.
16. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
RegSpecs
MD Data Source Ltd
167–169 Great Portland Street
London, W1W 5PF
Republic of Ireland
Email: [email protected]