Privacy Policy

CarFlipRadar ("we", "us", "our") is a UK-based service available at carflipradar.com. We are the data controller for the personal data we collect. You can contact us at contact@carflipradar.com.

This Privacy Policy explains how we collect, use, store, and share your personal data, and your rights under UK GDPR and the Data Protection Act 2018.

We collect the following personal data:

• Account data: email address, encrypted password (via Supabase Auth)
• Subscription data: Stripe customer ID, subscription status, trial usage
• Telegram data: Telegram chat ID and username if you connect Telegram notifications
• Preferences: your saved filters (region, price range, makes, models, etc.) and starred alerts
• Usage data: alert delivery logs, sent/unsent status, IP address (used once for trial abuse prevention, then retained as a log)
• Contact data: name, email, and message content if you contact us via the contact form

We do not collect payment card details directly — these are handled by Stripe.

We use your personal data to:

• Create and manage your account
• Process your subscription and payments via Stripe
• Deliver car deal alerts to your dashboard and Telegram
• Apply your filter preferences to personalise alerts
• Prevent free trial abuse
• Respond to your support enquiries
• Maintain the security and integrity of our service

We process your personal data on the following lawful bases under UK GDPR:

• Contract performance: account management, alert delivery, subscription processing
• Legitimate interests: fraud prevention, trial abuse prevention, service security
• Legal obligation: where required by law

We share data only with the third-party services necessary to operate CarFlipRadar:

• Supabase — cloud database and authentication provider
• Stripe — payment processing; governed by Stripe's Privacy Policy
• Telegram — if you connect Telegram notifications, your chat ID is used to deliver messages
• IONOS — email delivery for contact form responses

We do not sell your data or share it with advertisers.

We retain your account data for as long as your account exists. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law or legitimate business interest (e.g., financial records).

IP addresses collected for trial deduplication are retained in our logs indefinitely for fraud prevention purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten"), subject to legal obligations
• Restrict or object to processing in certain circumstances
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at contact@carflipradar.com. We will respond within one month.

We use strictly necessary cookies to maintain your login session. We do not use advertising or analytics cookies. See our Cookie Policy for full details.

Some of our service providers (including Supabase and Stripe) may process data outside the UK. Where this occurs, appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses).

If you have concerns about how we handle your data, please contact us first at contact@carflipradar.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice in your dashboard. The "last updated" date at the top of this page will always reflect the latest version.