Privacy notice

This notice explains what we collect, why, who we share it with and your rights under UK GDPR. Car Mint is the data controller. Contact: hello@carmint.co.uk.

What we collect

• Vehicle registration number and the vehicle data it returns (make, model, colour, fuel, year, MOT status, weight).
• The postcode where the vehicle is, and the collection address when you book.
• Your name, mobile number and email address.
• Your answers about the vehicle's condition, and any notes or photos you send.
• Messages between us, call recordings if we tell you a call is recorded, and your review if you leave one.
• Technical data: IP address, browser, pages visited and, if you arrived from an advert, the click identifier (for example GCLID).

Why we use it

• To give you a price and arrange collection (performance of a contract).
• To send you service messages by SMS and email about your collection (performance of a contract).
• To verify identity at collection as required by the Scrap Metal Dealers Act 2013 (legal obligation; carried out by the recycling partner).
• To measure which adverts lead to completed collections (legitimate interests). You can object at any time.
• To ask for a review after collection (legitimate interests).

Who we share it with

• The licensed recycling partner that collects your vehicle. They receive your name, mobile number, address, vehicle details and condition answers so they can collect, pay you and issue the Certificate of Destruction. They are a separate data controller for the records the law requires them to keep.
• Vehicle data providers (the DVSA MOT history service and a commercial vehicle data provider) receive the registration number only.
• Postcodes.io receives the postcode only, to validate it.
• Our SMS and email providers, who process messages on our instructions.
• Advertising platforms receive the click identifier and the fact that a collection completed, not your name or contact details.
• If you were referred by a garage, that garage is told whether the collection completed, not your contact details.

How long we keep it

Enquiries that do not lead to a booking are deleted after 12 months. Completed collection records are kept for 3 years because they support the recycling partner's statutory records and any dispute. Marketing consent is kept until withdrawn.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing, or withdraw consent, by emailing hello@carmint.co.uk. You can complain to the Information Commissioner's Office at ico.org.uk.

Marketing messages

We only send marketing texts or emails if you tick the box asking for them. Reply STOP to any text or use the unsubscribe link to stop them.