Privacy policy
Last updated 19 October 2026
Who we are
CarPriceExpert (carpriceexpert.co.uk) is run by David Basnett, a sole trader in the United Kingdom, who is the data controller for the personal data described here. "We" and "us" in this policy mean CarPriceExpert.
For anything about your data, email privacy@carpriceexpert.co.uk.
What we collect, and why
If you just browse
- Server logs. Like every website, our web server records each request: your IP address, the page, the time and your browser's user agent. We use them to keep the site running and secure (legitimate interests).
- Searches. We record the make, model, years and keywords of each search, to see which cars people look for. If you are signed in, the search is linked to your account (legitimate interests).
- Analytics and advertising cookies, only where you have agreed to them. See "Cookies" below (consent).
If you create an account
- Your account: email address, username, a hash of your password (we never store the password itself), and, if you sign in with Google, your Google account identifier. We also record when you created the account and when you last signed in. We need these to run your account (contract).
- Your saved searches in the garage, and the figures we calculate for them (contract).
- Digest emails. Whether you have switched digests on, how often each search is sent, and a record of each email we send. We only send digests when you have switched them on, and every digest has a link to switch them off (consent).
- Service emails. We email you to confirm your address and to reset your password when you ask (contract).
If you buy Premium
- Payments are taken by Stripe on its own checkout page. We never see or store your card details.
- Stripe tells us your Stripe customer and subscription identifiers, your subscription status and renewal dates, and the billing details you gave at checkout (name, email and address). We use your billing country to check that you are in the UK, because Premium is only sold to UK customers (contract, and legal obligation for tax records).
Who we share it with
We do not sell your personal data. We use these services, each of which handles data on our behalf or under its own privacy policy:
- Google Analytics: how the site is used (pages, device, approximate location). Google's privacy policy.
- Google AdSense: the adverts on the site. Google may use cookies to show adverts based on your visits to this and other sites, if you agree. How Google uses information from sites that use its services. Premium members see no adverts.
- Google sign-in, if you choose it, and Google reCAPTCHA, which checks that registrations come from a person and not a bot.
- Stripe: Premium payments. Stripe's privacy policy.
- Webgains: affiliate links to car buying and selling services. If you click one, Webgains records the click so we can be paid a commission.
- Our email provider, which delivers account and digest emails.
- Our hosting provider, which runs the server the site and its database are on.
Some of these companies process data outside the UK, mainly in the United States. Where they do, the transfer is covered by the UK's adequacy regulations (including the UK-US data bridge) or by standard contractual clauses.
Cookies
When you first visit, a message from Google asks whether you agree to analytics and advertising cookies. You can change your choice at any time from the "Privacy and cookie settings" link that message leaves on the page, or by clearing this site's cookies in your browser.
| Cookie | Set by | What it is for | Needs consent |
|---|---|---|---|
PHPSESSID | Us | Keeps you signed in. Deleted when you close the browser. | No, strictly necessary |
_GRECAPTCHA | Google reCAPTCHA | Bot protection on registration. | No, strictly necessary |
g_state | Google sign-in | Remembers the state of the Google sign-in prompt. | No, strictly necessary |
_ga, _ga_* | Google Analytics | Counts visits and how the site is used. | Yes |
__gads, __gpi, __eoi, IDE | Google AdSense | Shows, limits and measures adverts. | Yes |
| Webgains cookies | Webgains | Records an affiliate click. | Yes |
How long we keep it
- Your account, saved searches and digest records: until you ask us to delete your account.
- Password reset and email confirmation links: they stop working when they expire; the records are kept with your account.
- Billing records: six years after the payment, because UK tax law requires it.
- Search records: kept to show which cars people search for. When your account is deleted, we remove the link between your searches and you.
- Server logs: kept for a limited period, then deleted automatically by the server.
Your rights
Under UK data protection law you can ask us for a copy of your personal data, and ask us to correct it, delete it, restrict what we do with it, or send it to you in a portable form. You can object to anything we do on the basis of legitimate interests, and withdraw consent at any time (switch digests off from your account page or any digest; change your cookie choice as above). To delete your account or use any of these rights, email privacy@carpriceexpert.co.uk from the address on your account. We will reply within one month.
If you are unhappy with how we have handled your data, please tell us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
Children
CarPriceExpert is not meant for children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top. If a change affects how we use the data of people with accounts, we will email them first.