This is a brief, not the wording. The points below are what this document has to cover. Nothing here is live terms, and we are not going to generate plausible-sounding legal text and let it look finished.
⚠UNVERIFIED — not yet drafted or reviewed
What this document must cover
Data controller identity and, if one is required, the ICO registration number.Known: the controller is Sorted Cars Ltd (company no. 17134462), ICO registration ZC181175. Still to draft: everything below.
What is collected: account email, registrations you look up, purchase records.
The one that matters here: a registration is personal data when it can be linked
to a keeper. Say plainly whether searches are stored against an account, for how long, and
whether they are ever used for anything other than showing you your own history.
Lawful basis for each purpose — contract for the report, legitimate interests for
fraud prevention, consent for anything optional.
Processors: the hosting, database and payment providers, and where they are.
Third-party data sources, and that we pass a registration to them to answer your query.
Retention periods, including how long a purchased report stays available.
Your rights: access, rectification, erasure, portability, objection, and how to use them.
Cookies and any analytics, and how to refuse the non-essential ones.