MOTCO
Need help?my orders

Privacy Policy

GRZA Ltd (trading as MOTCO) ("us", "we", or "our") operates the https://www.motco.co.uk website (the "Service"). This page explains how we collect, use, and protect your personal data.

Data Controller

GRZA Ltd is the data controller for personal data collected through this Service.

Company name: GRZA Ltd (trading as MOTCO)
Company number: 16414673
Registered address: 724 High Road Leytonstone, London, England, E11 3AJ
ICO registration reference: ZC123478
ICO registration date: 14 April 2026
Contact: info@motco.co.uk

Information We Collect

While using our Service, we may collect the following personal information:

  • Email address (when you register or make a purchase)
  • Phone number / WhatsApp number (if you opt in to WhatsApp delivery or V5C alerts)
  • Vehicle registration numbers you search
  • Payment information (processed securely by Stripe — we never store card details)
  • IP address, browser type, pages visited, and usage data

Lawful Basis for Processing

We process your personal data on the following lawful bases under UK GDPR:

  • Contract performance: To create and manage your account, deliver premium reports, and process payments.
  • Legitimate interests: To monitor usage, prevent fraud, improve our Service, and maintain security — where these interests are not overridden by your rights.
  • Consent: To send MOT/tax reminders and V5C alerts via email or WhatsApp. You may withdraw consent at any time.
  • Legal obligation: To retain financial records as required by UK tax law.

How We Use Your Information

We use your personal data to:

  • Provide, operate, and improve the Service
  • Process purchases and deliver premium reports
  • Send MOT, tax, and V5C logbook change reminders (where you have opted in)
  • Respond to support requests and complaints
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

Log Data

We automatically collect information that your browser sends when you visit our Service. This includes your IP address, browser type and version, pages visited, time and date of visits, and time spent on pages. This data is used for security, analytics, and service improvement.

Cookies

We use cookies to maintain your session, remember preferences, and analyse usage. You can instruct your browser to refuse all cookies, but some parts of the Service may not function correctly without them. We use a cookie consent banner to obtain your consent for non-essential cookies.

Third-Party Services

We use the following third-party services that may access or process personal data on our behalf. Each is bound by their own privacy policy and, where applicable, a data processing agreement:

  • Stripe: Payment processing. Your card details are handled directly by Stripe and never stored on our servers. See stripe.com/privacy.
  • Brevo: Email delivery for reports, reminders, and notifications.
  • Twilio: WhatsApp message delivery for report delivery and V5C alerts.
  • DVSA & DVLA: Official UK government vehicle data (MOT history and vehicle registration data).
  • CheckCar Details: Third-party vehicle history data provider used for premium reports.
  • Vercel: Hosting, edge functions, and analytics.
  • Neon / Turso: Database services used to store account and purchase data.
  • Upstash Redis: Caching layer used to reduce repeated API calls.

Data Storage and Security

We store your data securely using industry-standard encryption. Your payment information is never stored on our servers — it is processed directly by Stripe, our PCI-compliant payment processor.

While we strive to protect your personal data, no method of transmission over the internet is 100% secure. We will always act in accordance with UK GDPR and the Data Protection Act 2018.

Data Retention

We retain personal data only as long as necessary:

  • Account information: Until you request deletion or close your account
  • Search history: 12 months from last activity
  • Premium reports and vehicle data: Retained for support and warranty purposes
  • Payment records: As required by UK tax law (currently 6 years)
  • Reminder preferences (WhatsApp/email opt-ins): Until you unsubscribe or request deletion

Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right to access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to restrict processing: Request that we limit how we use your data
  • Right to data portability: Receive your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@motco.co.uk. We will respond within one month as required by UK GDPR.

Right to Complain to the ICO

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

We would appreciate the opportunity to address your concerns before you contact the ICO, so please contact us first.

Links to Other Sites

Our Service may contain links to third-party sites. We have no control over and assume no responsibility for the content or privacy practices of those sites. We recommend reviewing the privacy policy of any site you visit.

Children's Privacy

Our Service is not directed at anyone under the age of 13. We do not knowingly collect personal data from children under 13. If you believe your child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or, where appropriate, by email. Changes take effect when posted. We recommend reviewing this page periodically.

Jurisdiction

This Policy is governed by the laws of England and Wales and UK GDPR as retained in UK law under the Data Protection Act 2018.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: info@motco.co.uk
Post: MOTCO, 724 High Road Leytonstone, London, E11 3AJ

Last updated: May 2026

© 2026 GRZA Ltd trading as MOTCO. All rights reserved.