Privacy Policy

Last updated: July 2026

MDataWorks Limited ("we", "us", "our") is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. Who we are

MDataWorks Limited is a vehicle intelligence business and company registered in England and Wales (Company No. 17312538). Our registered office is 167-169 Great Portland Street, London, England, W1W 5PF. We operate the website at mdataworks.com and provide vehicle history reports and related services. MDataWorks Limited is the data controller for the purposes of UK GDPR.

2. What data we collect

When you order a Vehicle Report, we collect:

• Your name and email address (to deliver your report)
• The VIN or registration number you provide
• Payment information (processed securely by SumUp - we do not handle or store card details)

When you visit our website, we may also collect standard web server logs (IP address, browser type, pages visited) for security and performance purposes.

3. How we use your data

• To fulfil your Vehicle Report order and send you the report by email
• To respond to any enquiries you make
• To comply with our legal obligations

We do not use your personal data for marketing without your explicit consent.

4. Data sharing

We do not sell or share your personal data with third parties except where necessary to deliver our service. This includes:

• SumUp — payment processing. We do not see or store your card details.
• DVLA and MOT History Service — we may query these services using the registration or VIN you provide in order to compile your report.
• Third party vehicle data aggregators and providers — additional data such as registration history, number of keepers, salvage records, factory specification, service history and valuation data is obtained from specialist automotive data suppliers.

All processors and data suppliers are contractually or legally bound to handle data lawfully. Your personal details such as name and email address are not shared with data suppliers — only the vehicle registration or VIN is used to query these services.

5. Data retention

Order records are retained for six years in accordance with HMRC requirements. Report request data is deleted after this period.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data. To exercise any of these rights, please contact us.

7. Cookies

This website uses only essential cookies required for the site to function. We do not use advertising or analytics cookies.

8. Contact

For privacy-related enquiries, please use the contact form on our website.