Privacy policy

Who is responsible

CARZTOGETHER LIMITED is responsible for personal information processed through CarzTogether. Our company details and postal contact address are below. This draft describes the current platform; the final retention schedule and supplier arrangements must be approved before launch.

Information we use

Account information includes your email, display name, account role and authentication records. Business profiles include contact details, services, location, opening hours and uploaded media.

We also process messages, reviews, comments, follows and saved businesses when you use those features. Verification applications can include business documents. Payment providers process payment details; the platform records payment references and purchase status.

Why we use it

We use account and activity data to provide the services you request, such as messaging, saved businesses and business profile management. The proposed legal basis is performance of our agreement with you.

We use relevant records to investigate abuse, protect accounts and moderate content. Our proposed basis is legitimate interests in running a safe service, subject to balancing those interests against your rights. Records required by law are processed to meet that legal obligation. Where consent is required, we will ask for it separately.

What other people can see

Published business profiles, posts and reviews are public. Your review display name may be shown with your review. Saved businesses are private to your account. Messages are available to the participants and may be accessed for authorised support or moderation purposes.

Verification documents are not public profile content. Access is limited through the verification workflow. Do not upload information that is unrelated to the requested checks.

Service providers and transfers

The current platform integrates Supabase for database, storage and authentication, Stripe for payments, Mapbox for maps and Mux for video. These providers receive information needed to deliver the relevant feature.

Before public launch, we must confirm processing locations, contractual safeguards and any international transfer arrangements. This draft does not promise UK-only storage. We may also disclose information where required by law or necessary to protect legal rights.

How long information is kept

Retention should depend on the purpose: operating your account, keeping business and transaction records, resolving disputes and preventing abuse. Deletion may be delayed where records are required by law or an unresolved dispute.

An approved retention schedule and deletion process are launch requirements. This draft does not claim that deleting an account immediately erases all backups or financial records.

Your rights and choices

Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information, or object to certain processing. Where processing relies on consent, you can withdraw it. Some rights have legal exceptions.

Send a privacy request to privacy@carztogether.com or write to our registered office. We may need to confirm your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

Cookies, location and updates

Authentication uses cookies to maintain your session. The app also remembers some interface preferences locally, such as your last search. Using your current location requires your browser permission; you can instead enter a location yourself.

Third-party map and video features may make requests to their providers. We use Vercel Web Analytics to count page views. It does not use cookies or store anything on your device, does not track you across other sites, and we remove search terms and other query details from page addresses before they are sent. Any additional analytics or advertising tools would require a separate assessment and, where needed, your consent first. We will date changes to this policy and explain material changes.