Privacy notice

Steady Circuit Ltd (company number 16471673, registered office 66 Paul Street, London, England, EC2A 4NA) is the data controller for RegFlags. We are registered with the Information Commissioner's Office under registration number ZC011452. This notice explains what we collect and why.

What we collect

Registrations you check, linked to your account (or an anonymous cookie if you are not signed in) so we can show your history, apply your allowance and let you re-open reports for free. We never receive keeper details from the DVSA.

Account details (name and email address) from your Steady Circuit account, used to sign you in and to send the MOT reminders and alerts you ask for.

Your agreement to our terms when you buy a paid plan: which terms you agreed to and when, recorded by the Steady Circuit account service and kept with your billing records, so we can show that you agreed.

Declarations for a dealership: if you claim your dealership's account from a RegFlags pack, or switch on listing its cars or showing its photos, your full name, your role there, your account and email, and the exact declaration you signed, with the time. We keep it as a sealed record of what was agreed for the dealership, even after the account closes, because we rely on it.

Full vehicle checks: the registration, the reason you gave for checking it, and the VIN if you enter one. The VIN is deleted as soon as the check is done. The results are kept encrypted for 24 hours, so you can view them, and then deleted. We keep a record of each check (your account, the registration, the reason and when, but not the results) for two years, because our data supplier can audit how checks are used.

Usage analytics: pages viewed, features used, device type and approximate country, collected by our own first-party analytics. We do not store your IP address and we do not use third-party trackers or advertising cookies.

Keeping the service safe: to stop abuse, such as automated collection of our listings, our security gateway looks at each request (including its IP address and browser details) to apply rate limits and block traffic that breaks our terms. It does this as the request arrives and keeps short-lived counters; RegFlags itself does not store IP addresses.

How long we keep it

Check history: 12 months. Full vehicle check results: 24 hours; records of full checks: 2 years. Analytics events: 25 months. Email logs: 12 months. Account data: until you close your account.

Who we share it with

Service providers who process data for us: our hosting provider (Hetzner, EU), Resend (email delivery) and Stripe (payments, via the Steady Circuit account service). AI summaries are generated from vehicle data only; no personal data is sent to AI providers.

If you buy a full vehicle check, we send the registration, and the VIN if you enter one, to One Auto API, which gets the check from Experian. We do not send your name or contact details.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to processing. Email privacy@steadycircuit.com. You can also complain to the Information Commissioner's Office (ico.org.uk).