Privacy notice

1. Who controls your data

CarDealerOS is the data controller for account and billing data. Where a dealer uses the service to hold its own customer records, that dealer is the controller and we act as processor on its instructions. For any data protection request, contact admin@cardealeros.app.

2. What we collect

• Account data: name, work email, telephone number, role and sign-in activity.
• Billing data: company details, VAT number, subscription and payment status.
• Business records you enter: customers, vehicles, deals, jobs, invoices and staff records.
• Technical data: device, browser, IP address and audit trails of actions taken.

3. Why we use it

To provide and secure the service (contract), to take payment (contract), to detect misuse of rooftop licensing and fraud (legitimate interests), and to meet legal and regulatory duties including FCA and HMRC record keeping (legal obligation).

4. Who we share it with

Our hosting and database provider, our payment processor, and the integrations a dealer chooses to switch on, such as vehicle data, finance, accounting and messaging providers. We do not sell personal data.

5. How long we keep it

Account and billing records are kept for seven years after the end of the relationship to meet tax and regulatory requirements. Business records are kept while the dealer's subscription is live and deleted or returned on request after it ends.

6. Your rights

You can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Ask us and we will respond within one month. You can also complain to the Information Commissioner's Office.

7. Where your data is held

Data is held in the United Kingdom or the European Economic Area. If a chosen integration transfers data outside those areas, appropriate safeguards apply.