Privacy Policy

Motorsync Ltd, registered in England & Wales (Company No. 12700123) with registered address at 5 Maltby Court, Leeds, LS15 9BA, acts as the primary data controller for the MIRA mobile application, MIRA Business portal, and associated automotive software platforms.

1. Information We Collect

Information Provided Directly by You

We collect data voluntarily submitted when creating an account or using MIRA features:

• Account & Contact Details: Name, email address, contact phone number, and physical address.
• Vehicle Information: Registration marks (VRN), valuation inputs, and saved vehicle listings.
• Communications & Enquiries: Messages sent to dealerships, support tickets, and chat interactions.
• Biometric Verification: Facial scan data processed temporarily for identity verification during secure account access and finance onboarding.
• Verification Documents: Government-issued photo identification (driving licence, passport) and proof of address required for identity checks.

Information Collected Automatically

When accessing MIRA web or mobile interfaces, technical metadata is captured automatically:

• Precise Geolocation: GPS coordinates (with explicit device permission) used for location-based showroom check-in.
• Device Identifiers: Operating system, hardware model, browser user-agent, and IP address.
• Application Activity: Feature usage, vehicle page impressions, search filters applied, and navigation flow.
• Camera & Document Scans: Images captured via mobile device camera for licence plate recognition and document processing.

Publicly Displayed Vehicle & Dealer Information

To present a comprehensive marketplace, MIRA aggregates publicly available motor vehicle inventory from authorised dealership websites:

• Listing Information: Make, model, specification, mileage, price, vehicle history, and public vehicle imagery.
• Dealer Commercial Data: Business trading name, showroom location address, opening hours, and contact channels.

2. How We Use Your Information

We process personal data for clearly specified legitimate purposes:

• Service Delivery: Providing vehicle discovery, showroom check-in, test drive booking, and customer enquiry management.
• Identity Verification: Utilising computer vision and automated document recognition systems to prevent identity fraud and fulfil regulatory obligations.
• Automated Assistance: Powering plate recognition, smart vehicle matching recommendations, and automated customer support chat.
• Financial Services Facilitation: Routing customer finance enquiries directly to regulated credit broker partners.
• Platform Security: Detecting suspicious activity through risk-based authentication and behavioural threat prevention.

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), processing is justified by:

• Contractual Necessity: Fulfilling our end-user agreement and delivering requested services.
• Legitimate Business Interests: Maintaining platform safety, optimising user experience, and personalising search features.
• Consent: Where explicit opt-in consent is provided, such as for location services or marketing communications.
• Legal Obligations: Complying with financial record-keeping, anti-fraud laws, and regulatory directives.

4. Information Sharing and Disclosure

Data is disclosed strictly under controlled safeguards to authorised entities:

• Partner Dealerships: Showrooms receive your contact details only when you submit an enquiry, request a callback, purchase a vehicle, or opt to check in at their location (sharing contact details during showroom check-in is strictly optional and may be opted out by the customer at any time).
• Regulated Credit Brokers: FCA-authorised credit brokers and registered lending partners selected on the finance application screen receive finance applications directly.
• Sub-Processors & Service Providers: Trusted cloud infrastructure, secure storage, and SMS transactional message providers operating under data processing agreements.
• Law Enforcement: Mandatory disclosure only when strictly required under court order or statutory requirement.

5. Data Retention Schedule

We retain personal data strictly for as long as required by operational, legal, and tax obligations.

6. Your Privacy Rights

Under UK data protection laws, you retain enforceable rights:

• Right of Access (SAR): Request full copies of your stored personal records.
• Right to Rectification: Correct inaccurate or out-of-date information.
• Right to Erasure ("Right to be Forgotten"): Request permanent account and data deletion.
• Right to Data Portability: Obtain your data in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke marketing or geolocation consent at any time via settings.

To exercise any right, submit your request to info@motorsync.co.uk. Requests are handled free of charge within 30 days.

7. Data Security Measures

We employ defense-in-depth technical measures, including TLS 1.3 in-transit encryption, AES-256 at-rest database encryption, strict access control policies, and continuous security vulnerability monitoring.

8. International Data Transfers

Primary data storage facilities are located within the United Kingdom and European Economic Area (EEA). Any cross-border data transfer relies upon International Data Transfer Agreements (IDTA) or UK Standard Contractual Clauses.

9. Children's Privacy

MIRA platforms are intended strictly for users aged 18 and older. We do not knowingly process personal data belonging to minors.

10. Policy Updates

We periodically review this policy to reflect platform updates or legal amendments. Material changes will be communicated through in-app notices or direct email communications.

11. Data Protection Officer Contact