Privacy Policy — Buildsheet Pro
Buildsheet Pro

Legal

Privacy Policy

Last updated: 10 July 2026

This policy explains what personal data we collect when you use Buildsheet Pro, how we use it, and the rights you have over it. We keep data collection to the minimum needed to deliver your report.

1. Who we are

Buildsheet Pro is the data controller for personal data processed through this site. You can reach us at support@buildsheetpro.co.uk.

2. What we collect

Order data — your email address, the registration number or VIN you look up, and your order history.

Payment data — handled entirely by Stripe. We receive confirmation of payment and the last four digits of your card; we never see or store full card details.

Account data — if you create an optional account: your email and password (stored as a salted hash).

Technical data — basic logs (IP address, browser type) used for security and to keep the service running.

3. How we use your data

To confirm vehicle coverage, produce your report, deliver it by email, process payment, provide support, and meet our legal obligations (such as tax records). We do not sell your data, and we do not send marketing email unless you opt in.

4. Lawful basis

We process order and payment data to perform our contract with you; technical data under our legitimate interest in running a secure service; and marketing (if you opt in) with your consent, which you can withdraw at any time.

5. Who we share it with

Stripe (payment processing), our vehicle-data providers (the registration or VIN you submit, to retrieve the factory record), and our email delivery provider (your address, to send your PDFs). Each processes data under its own safeguards and our instructions. A vehicle’s registration or VIN may be transferred outside the UK where a manufacturer’s records are held abroad, with appropriate safeguards in place.

6. Retention

Order records are kept for 6 years to meet tax and accounting obligations. Lookup data for vehicles that turn out to be unsupported is deleted within 30 days. Account data is kept until you delete your account.

7. Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data; object to or restrict processing; and request portability. Email us and we will respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).

8. Cookies

See our Cookie Policy for details of the cookies we use and how to manage them.