Privacy Policy
Last updated: 27 April 2026
1. Data Controller
The data controller for information collected through the Auto Market Explorer platform (the “Service”) is AKP Ventures Ltd, a company registered in England and Wales under company number 15968817.
Contact email: [email protected]
2. Information We Collect
We may collect and process the following categories of personal data:
- Account information — email address when you create an account.
- Payment information — billing details processed securely through Stripe. We do not store card numbers on our servers.
- Phone number — mobile number provided for SMS notifications (Pro plan only).
- Usage data — alerts created, pages visited, features used, and interaction timestamps.
- Technical data — IP address, browser type, operating system, device type, and timezone.
- Communications — any correspondence you send to us via email or support channels.
3. Legal Basis for Processing
We process your personal data on the following legal bases under the UK GDPR:
- Contract performance — to provide the Service, manage your account, and process payments.
- Legitimate interests — to improve the Service, monitor usage patterns, prevent fraud, and ensure security.
- Legal obligation — to comply with applicable laws and regulations.
- Consent — where you have opted in to receive SMS notifications or marketing communications.
4. How We Use Your Information
We use the information collected to:
- Provide, maintain, and improve the Service.
- Process transactions and manage subscriptions.
- Send alert notifications via email and SMS.
- Send service-related communications (e.g. account confirmations, billing notices).
- Respond to support requests and enquiries.
- Analyse usage patterns to improve features and user experience.
- Detect, prevent, and address fraud, abuse, or technical issues.
5. Data Sharing
We do not sell your personal data to third parties. We may share your data with:
- Payment processors — Stripe processes payments on our behalf, subject to their own privacy policy.
- SMS delivery — Amazon Web Services (AWS) Simple Notification Service delivers SMS messages to Pro subscribers.
- Hosting providers — AWS Lightsail hosts our infrastructure in the EU (London) region.
- Legal authorities — when required by law, regulation, or valid legal process.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Following account deletion, we may retain certain data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements.
Alert history and notification logs are retained for up to 90 days after an alert is deleted.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure session handling, CSRF protection, and rate-limited authentication. However, no method of transmission over the internet is completely secure.
8. Your Rights
Under the UK GDPR and the Data Protection Act 2018, you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your personal data (subject to legal obligations).
- Restriction — request that we restrict processing of your data.
- Data portability — receive your data in a structured, commonly used format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
9. Cookies
The Service uses essential cookies required for the site to function (session management, CSRF protection). We do not use third-party advertising or tracking cookies.
10. International Transfers
Your data is processed on servers located in the United Kingdom (AWS eu-west-2, London). Where data is transferred outside the UK (e.g. Stripe payment processing), we ensure appropriate safeguards are in place in accordance with the UK GDPR.
11. Children
The Service is not directed at individuals under 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or by posting a notice on the Service. The “Last updated” date at the top indicates when the policy was last revised.
13. Complaints
If you are unsatisfied with our handling of your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: ico.org.uk
- Helpline: 0303 123 1113
14. Contact
For questions about this Privacy Policy, contact us at [email protected].