Privacy Policy
Last updated: 7 May 2026
This privacy policy explains how Bonafied Cars Ltd handles your data when you use our Open Score Check (OSC) service at osc.bonafied.co.uk and view results at bonafied.uk. We've written it in plain English. If anything is unclear, contact us at [email protected].
Who we are
Bonafied Cars Ltd is a private limited company registered in Scotland, company number SC883330.
We're the data controller for any personal data we hold about you. We're registered with the Information Commissioner's Office (ICO) under the UK Data Protection Act 2018.
What we don't collect
You don't need to register, log in, or give us any personal information to run an Open Score Check. When you submit a registration number we look up the vehicle's history and return a score. We never collect or store your name, address, phone number or any keeper details.
The DVLA does not share keeper information with us. We don't request it.
What we do collect
Vehicle registration numbers
When you submit a registration number we send it to the DVSA (for MOT history) and DVLA (for vehicle data). Registration numbers identify a vehicle, not a person, and so are not personal data under UK GDPR.
Each successful score check is stored as a record we keep indefinitely (see "How long we keep data" below). This is needed because each score check generates a permanent URL that must continue to resolve as long as the result is referenced anywhere.
IP addresses
We log IP addresses for rate limiting only (we limit free score checks per IP per 24 hours). IP records are kept for a rolling 24-hour window and then deleted automatically.
Email addresses (only if you give us one)
If you sign up to our mailing list we store your email address in Mailchimp with double opt-in confirmation. You can unsubscribe at any time using the link in any email. Mailchimp is a US-based provider; data transfers are governed by the UK extension to the EU-US Data Privacy Framework.
Score check audit data
For every score check we record: the registration submitted, timestamp, score and tier outcome, score breakdown by criterion, scoring engine version. This is operational data needed for service quality, debugging and (where applicable) responding to user complaints. Retained indefinitely.
Cookies (only essential by default)
- Analytics cookies (Google Analytics 4) — to understand how the site is used. Anonymised IP addresses, no cross-site tracking. Currently not active; will be added with consent gating before launch.
You can change your cookie preferences any time by clicking "Cookies" in the site footer.
How we use your data
We use the data we collect to:
- Provide the Open Score Check service: look up vehicle history, score it, render the result
- Maintain the permanent result URLs that score cards link to
- Prevent abuse via rate limiting
- Send mailing list emails (only if you've signed up)
- Improve the service and diagnose issues
Our legal basis for processing is legitimate interest for operational data (audit logs, rate limiting), and consent for marketing emails and optional cookies.
Who we share data with
We share data only as needed to operate the service:
- DVSA — to retrieve MOT history (registration number only)
- DVLA — to retrieve vehicle data (registration number only)
- Cloudflare — our hosting and infrastructure provider
- Mailchimp — for mailing list management (only if you've signed up)
We don't sell your data, share it for advertising purposes, or pass it to brokers. We don't share data with affiliate partners. When you click an affiliate link, you leave Bonafied and the partner site applies its own privacy practices.
We may disclose data if required to do so by UK law or by lawful request from a competent authority.
How long we keep data
- Score check records: retained indefinitely. Each record powers a permanent result URL that must continue to resolve.
- Raw API responses from DVSA/DVLA: not retained beyond the scoring run. Only structured data needed for the result page is stored.
- IP addresses (rate limiting): rolling 24-hour window, then deleted.
- Email addresses (mailing list): retained until you unsubscribe.
- Audit logs: retained indefinitely for service quality and complaint handling.
Your rights under UK GDPR
You have the right to:
- Access any personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data ("right to be forgotten")
- Restrict processing in certain circumstances
- Data portability — receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email us at [email protected]. We'll respond within one month.
Government data — Open Government Licence
Our scoring uses MOT history data from the DVSA and vehicle data from the DVLA, both published under the Open Government Licence v3.0. Commercial use is permitted under the licence terms with attribution. We attribute on every public-facing page.
Complaints
If you have concerns about how we handle your data, contact us first at [email protected]. If you remain unhappy you have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will tell you when it was last changed. Material changes will be communicated via the site banner or email (if you've signed up to the mailing list).
Contact
Questions? Email [email protected].
Stay in the loop
Bonafied is just getting started. Sign up for occasional updates as we add features.