Privacy Policy

TheRegMarket (“we”, “us”) operates a marketplace for buying, selling and bidding on UK private number plates, and a plate-printing service. We are the data controller for the personal data described here. Contact: privacy@theregmarket.co.uk.

• Account: email address, and any display name, username and profile photo you choose.
• Marketplace activity: bids, standing/pattern bids, watched plates, plates you claim or list, and transaction history.
• Plate printing orders: your name, delivery address, phone, email, the plate specification, and — to verify entitlement — proof of identity and proof of entitlement documents (e.g. V5C, driving licence). These are sensitive and handled with extra care.
• Technical: standard log and device data, and cookies needed to keep you signed in.

• To provide the service — accounts, bidding, listings, orders (performance of a contract).
• To verify entitlement to a registration before making plates (legal obligation / legitimate interest in preventing fraud).
• To operate and improve the platform and prevent abuse (legitimate interests).
• With your consent, where required (e.g. optional public profile / leaderboard, marketing emails).

We don’t sell your data. We share it only with service providers who help us run the platform:

• Supabase — database, authentication and file storage.
• Vercel — hosting.
• Our plate manufacturer — to fulfil and ship print orders (including the verification documents needed to make road-legal plates).
• Payment provider — when payments go live, card details are handled directly by our payment processor; we never store card numbers.

We may also disclose data where required by law.

We keep account and transaction data for as long as your account is active and as needed for legal/accounting purposes. Identity and entitlement documents are kept only as long as needed to verify and fulfil an order, then deleted. You can ask us to delete your account at any time.

Data is stored with access controls and row-level security; verification documents are held in private storage accessible only to our fulfilment process, never publicly. We use encrypted connections (HTTPS). No system is perfectly secure, but we take reasonable measures to protect your data.

Under UK GDPR you can access, correct, delete, or restrict use of your data, object to processing, and request portability. To exercise any of these, email us. You can also complain to the ICO (ico.org.uk).

We use only the cookies necessary to keep you signed in and secure. We don’t use advertising or third-party tracking cookies.

We’ll update this policy as the product develops and post the new date at the top. Significant changes will be communicated where appropriate.