Privacy Policy
1. Who We Are
Plate Seller Ltd (“we”, “us”, or “our”) is the data controller responsible for your personal information.
Registered office: Plate Seller Ltd, Unit 1 Hill Village Business Park, Filleigh, Devon, EX32 0RP.
ICO Registration Number: ZB609956
We do not currently appoint a Data Protection Officer but any data protection queries can be directed to the above contact details.
Email: gdpr@plateseller.com
2. About This Privacy Notice
This notice explains how we collect, use, store, and protect your personal data when you use our website or services.
We are committed to protecting your privacy and handling your data transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. What Personal Data We Collect
We collect and process only the personal data necessary to provide our services, including:
- Name, address, and contact details (email address and telephone number).
- Private registration plate details and related transaction information
- Payment and transaction records
- Communications with us
- Identity verification information where required
- Technical data including IP address, browser type, device information, and website usage data
- Competition entry information including answers to skill-based questions.
Our services are not intended for individuals under 18 and we do not knowingly collect personal data from children.
4. How We Obtain Personal Data
Most personal data is provided directly by you when you:
- Enquire about buying or selling a registration plate
- Create an account or submit forms on our website
- Enter into a transaction
- Contact us by phone, email, or post
We also collect limited technical information automatically via website analytics and cookies where consent has been provided.
We may also process:
- Date of birth for age verification
- Payment transaction reference numbers
- Video recordings of live draws
- Postal entry details including handwritten information
Information relating to vehicle eligibility or registration transfer may be verified using DVLA systems or publicly available vehicle databases where necessary.
5. How We Use Your Data
We use your personal data for the following purposes:
- Providing plate buying, selling, and transfer services
- Managing your account and transactions
- Communicating with you about your enquiries or transactions
- Maintaining business records for accounting and auditing
- Preventing fraud and ensuring platform security
- Improving our services and website functionality
- Requesting feedback about our services
We will only send marketing communications where you have provided consent, which you can withdraw at any time.
6. Prize Competitions
Our competitions are structured as skill-based prize competitions and are designed to comply with the Gambling Act 2005 and relevant UK consumer protection legislation. If you enter one of our skill-based prize competitions, we will process your personal data for the purpose of:
- Administering your entry
- Validating answers to skill-based questions
- Conducting fair and transparent draws
- Verifying winner eligibility
- Contacting winners
- Delivering prizes
- Publishing winner information where legally required
Where required by UK consumer law, we may publish the surname and county of major prize winners to demonstrate transparency. Individuals may object to publication where there are legitimate grounds. Where winner information is published, only the minimum information required for transparency will be disclosed.
Competition data is processed on the basis of:
- Contract – to administer your competition entry
- Legitimate interests – to ensure fairness, fraud prevention, and regulatory compliance
Additional Sharing for Competitions
We may share limited winner information with regulatory authorities or publish limited winner details where required by UK consumer law. Live draws may be recorded and published for transparency purposes.
Free Entry Route
Where a free postal entry route is available, personal data provided via postal entry will be processed solely for competition administration.
7. Fraud Prevention and Verification
We may process personal data to verify identities, detect suspicious activity, and prevent fraud. This process is necessary for our legitimate interests in preventing fraud, protecting users, and maintaining platform security. Where required, it may also be necessary for compliance with legal obligations.
Identity verification may include checks against identity documentation or third-party verification services.
8. Automated Processing
We may use automated tools and algorithms (profiling) to assist with valuation estimates, pricing guidance, and platform functionality.
These tools support decision-making but do not produce legal or similarly significant effects without human oversight. You have the right to request human review of any automated assessment where you believe it has significantly affected you.
9. Our Lawful Bases for Processing
Under UK GDPR, we rely on the following lawful bases:
- Contract - where processing is necessary to perform a contract with you
- Legal obligation - where required for compliance with legal or regulatory requirements
- Legitimate interests - to operate, improve, and secure our platform, prevent fraud, and maintain service quality
- Consent - where you have agreed to receive marketing communications or analytics cookies
Where we rely on legitimate interests, we ensure that such interests are not overridden by your rights and freedoms and we conduct appropriate balancing assessments where required.
10. Cookies and Website Analytics
We use cookies to ensure our website functions properly and to understand how visitors use our site.
Analytics cookies are only used where you have provided consent via our cookie banner. You can withdraw or change your cookie preferences at any time via the cookie settings on our website.
11. Sharing Your Data
We only share personal data where necessary and for legitimate purposes, including:
- Buyers or sellers involved in a transaction
- Payment processors (including Stripe Payments Europe Ltd and Cashflows Europe Limited)
- Identity verification and fraud prevention providers
- Live draws may be recorded and published for transparency purposes.
- IT and website hosting providers
- Professional advisers such as accountants, auditors, and legal advisers
- Regulators or law enforcement where required by law
We require all third parties to respect the security of your personal data and comply with data protection laws. Payment providers act as independent data controllers in respect of financial transaction data and process information in accordance with their own privacy policies.
PlateSeller does not store full payment card details. Payment information is processed securely by our payment providers.
We do not sell, rent, or trade personal data.
12. Payment Processing Providers
We use third-party payment processors including Stripe Payments Europe Ltd and Cashflows Europe Limited. The information shared may include:
- Name
- Billing address
- Email address
- Payment transaction details
Card details are handled directly by Cashflows and are not stored on our servers.
13. International Data Transfers
Some of our service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place such as:
- UK International Data Transfer Agreements
- Standard Contractual Clauses
- The UK Extension to the EU-US Data Privacy Framework where applicable
Where data is transferred outside the UK, we conduct appropriate transfer risk assessments where required.
14. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory requirements.
Typical retention periods include:
- Transaction and accounting records - up to 6 years
- Account records - up to 6 years after account closure
- Website analytics data - up to 2 years
When data is no longer required, it is securely deleted or anonymised. Competition entry data – retained for up to 6 years for regulatory and audit purposes.
15. Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, or alteration.
These measures include secure hosting environments, encryption, access controls, and regular security reviews.
In the unlikely event of a personal data breach, we will follow UK GDPR requirements and notify the Information Commissioner’s Office and affected individuals where legally required.
We collect and process only the personal data necessary to provide our services.
16. Platform Messaging / Public Posts
Information you choose to publish on your profile or in listings (such as registration numbers, usernames, or listing descriptions) may be visible to other users of the platform.
17. Your Rights
Under UK GDPR you have the following rights:
- Right to be informed
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to object
- Right to data portability
To exercise any of your rights, please contact us at gdpr@plateseller.com
You can opt out of marketing communications at any time by using the unsubscribe link in emails or contacting us directly.
17. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can resolve the issue: gdpr@plateseller.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
18. Changes to This Privacy Notice
We may update this privacy notice from time to time. The latest version will always be published on our website.