logo-1.3
logo-1.3
logo-1.3

Privacy Policy

1. Introduction

The Plate Barn is committed to protecting and respecting your privacy. Your personal information matters to us, and we ensure it is handled safely, lawfully, and transparently in accordance with UK data protection legislation.

This Privacy Policy explains how The Plate Barn (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our website or services. Please read this policy carefully to understand how your information is handled.

2. Data Protection & UK GDPR

The Plate Barn complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We process personal data in accordance with the following principles:

  • Lawfulness, fairness and transparency
  • Purpose limitation
  • Data minimisation
  • Accuracy
  • Storage limitation
  • Integrity and confidentiality (security)

Accountability

3. Personal Data We Collect

We may collect and process the following personal data where necessary for legitimate business purposes:

  • Full name
  • Postal address
  • Email address
  • Telephone number
  • Vehicle registration number(s)
  • Photo ID (where legally required)
  • Bank account details (for payments or refunds)

4. How We Collect Personal Data

We may collect personal data in the following ways:

  • Directly from you when you complete forms, place orders, make enquiries, or contact us by email, phone, SMS, or post
  • Automatically through the use of cookies and similar technologies when you use our website
  • From third parties involved in completing a transaction, such as other registration dealers, suppliers, or service providers

5. How We Use Your Data

We collect and use personal data to provide our services, including:

  • Valuation services
  • Purchasing and processing registration orders
  • Selling registration numbers
  • Handling enquiries and offers
  • Marketing and subscription services (with your consent)

Marketing communications are optional and you may unsubscribe at any time.

6. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

  • Contractual necessity – to fulfil purchases, sales, or services you request
  • Legal obligation – to comply with DVLA, HMRC, or regulatory requirements
  • Legitimate interests – to operate, manage, and improve our business
  • Consent – for marketing and subscription communications

7. Cookies & Analytics

Our website uses cookies to ensure proper functionality and improve user experience.

  • Essential cookies are required for the operation of the website
  • Analytics cookies help us understand how visitors use our website and do not identify individuals

You can manage your cookie preferences using the cookie banner on our website.

We may use analytics tools such as Google Analytics to help monitor and improve our services.

8. Payments & Third-Party Services

We do not store credit or debit card details. All payments are processed securely by third-party payment providers.

We may use payment providers such as Stripe or PayPal to process transactions securely.

9. Sharing Your Information

We do not sell your personal data.

We may share your personal information where necessary to:

  • Provide our services and complete transactions
  • Comply with legal or regulatory obligations
  • Prevent fraud and protect our legal rights
  • Work with trusted third-party registration dealers or suppliers to complete assignments or transfers

Only the minimum data required to complete a transaction will be shared.

10. Data Retention

retain personal data only for as long as necessary and in line with legal and regulatory requirements.

  • Enquiry and correspondence data is typically retained for shorter periods
  • Transaction, accounting, and compliance records may be retained for up to 6–7 years
  • Data required for fraud prevention or legal enforcement may be retained longer where necessary

Anonymous or aggregated data may be retained indefinitely

11. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request erasure of your data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, contact us at:

Email: [email protected]

You may also lodge a complaint with the ICO at www.ico.org.uk.

12. Data Security

We take appropriate technical and organisational measures to protect your personal data from loss, misuse, or unauthorised access.

However, no system is completely secure, and we cannot guarantee absolute security. Any information you transmit to us is done at your own risk.

13. International Data Transfers

Your personal data may be stored or processed on secure servers located in the United Kingdom, United States, and Germany.

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place to protect your information in accordance with UK GDPR requirements.

14. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites and encourage you to review their privacy policies separately.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and will take effect 180 days after publication. Continued use of our website or services after this period constitutes acceptance of the updated policy.