Privacy

The short version

Nothing about you is shown to anyone until you switch it on. We hold as little as we can. We do not sell anything to anybody, and there is nobody we would sell it to.

What we hold about you

Your email address. The name, number plate and vehicle details you entered. The contact numbers you chose to record, and any emergency contact you added. Your blood group, if you gave one.

We do not ask for and do not store a national identity number. There is no password anywhere in this system, so there is no password to be stolen.

What a stranger sees

Only what you switched on, and only for the situation it applies to. Someone reporting your lights are on and someone reporting an accident are shown different things, because you decide them separately.

If you have switched nothing on, they see a page telling them you have been notified — and nothing about you at all.

Every change you make to these settings is recorded, with the exact wording that was on screen when you made it. That record is why we can answer, years later, why a particular stranger saw a particular number.

What we hold about people who scan

Whoever scans your sticker is never asked who they are. If they choose to leave a name or number so you can reply, we pass that on to you and keep it with the scan.

We keep an unreadable fingerprint of where the scan came from — not the address itself, and not anything that can be turned back into it. It exists so that if somebody uses your sticker to harass you, we can tell that the scans came from one place and act on it.

That fingerprint is never shown to you, and is removed entirely after a year.

How long we keep things

Scans are kept, but what identifies the scanner is removed after a year. Notifications are kept for a year. Reports are kept for two. Payment records are kept permanently, because they are financial records — with the payment screenshot deleted a year after we have checked it.

Anything with a shorter life than that is listed in full in our retention policy, which is enforced by a job that runs every day rather than by anyone remembering.

Who else sees it

Our hosting, database and email providers process this data because they have to in order to deliver it. Nobody else does.

There is no bulk export of contact numbers anywhere in this system, and every individual look at a payment screenshot is logged with who looked.

Getting it back, or getting rid of it

You can download everything we hold about you, in a machine-readable form, from your account screen.

You can delete everything from the same place. It happens immediately and cannot be undone by us or anyone else.