Privacy Policy
Last updated: 9 March 2026
AutoReveal Ltd is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
AutoReveal Ltd is the data controller responsible for your personal data. We operate the AutoReveal vehicle history platform at elevate-fusion.com.
Contact: support@elevate-fusion.com
2. Data We Collect
Identity Data
Name, username, display name
Contact Data
Email address
Transaction Data
Credit purchases, payment records
Usage Data
Vehicle registrations searched, report history
Technical Data
IP address, browser type, device info, session tokens
Communications
Support emails you send us
3. How We Use Your Data
Processing vehicle checks, managing your account and credits.
Processing credit purchases via Stripe. We do not store card details.
Rate limiting, detecting abuse, protecting against fraud.
Retaining transaction records as required by UK law.
Analysing usage patterns to improve the platform.
4. Vehicle Data & Third-Party Sources
When you search a vehicle registration, we submit that registration to our licensed data providers to retrieve vehicle history. These providers include:
- •DVLA — Vehicle registration and tax data (via OneAutoAPI Limited)
- •DVSA — MOT test history
- •OneAutoAPI Limited (Co. No. 13646463) — Data aggregation and enrichment
- •Stripe — Payment processing
Vehicle registration numbers submitted are processed solely to provide the vehicle report you requested. They are stored in our database linked to your account for your report history. We do not sell vehicle search data to third parties.
5. Data Retention
Account Data
Until account deleted + 30 days
Vehicle Reports
Stored indefinitely for your report history
Payment Records
7 years (legal requirement)
Session / Auth Tokens
30 days max
IP / Rate Limit Logs
90 days
Support Emails
2 years
6. Cookies
We use the following types of cookies:
Authentication session token (next-auth.session-token). Required to keep you logged in. Cannot be disabled.
Cookie consent preference stored in localStorage.
We may use analytics cookies (e.g. Google Analytics) only if you consent via the cookie banner.
7. Your Rights
Access
Request a copy of the personal data we hold about you.
Correction
Request we correct inaccurate or incomplete data.
Erasure
Request deletion of your account and personal data.
Portability
Receive your data in a machine-readable format.
Restriction
Request we limit how we process your data.
Objection
Object to processing based on legitimate interests.
To exercise any of these rights, email us at support@elevate-fusion.com. We will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO).
8. Security
We implement industry-standard technical and organisational measures to protect your data, including bcrypt password hashing, HTTPS-only connections, session token rotation, and rate limiting on all API endpoints. We never store card payment details — all payment processing is handled by Stripe (PCI-DSS Level 1 certified).
9. International Transfers
Your data is stored and processed in the UK and EU. Where data is transferred outside the UK/EEA (e.g. Stripe's US infrastructure), we rely on Standard Contractual Clauses or adequacy decisions.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of the Service after changes are posted constitutes acceptance.
Contact Us
For privacy-related queries: support@elevate-fusion.com
See also: Terms & Conditions