Privacy Policy
CarBonnet.co.uk Last updated: June 2026
Who We Are
CarBonnet.co.uk is operated by WebStacked, based in Swindon, United Kingdom. We provide a free vehicle and MOT history lookup service through our website and iOS app.
If you have any questions about this privacy policy, you can contact us at: hello@webstacked.co.uk
What Information We Collect
Information you provide
We do not require you to create an account or provide any personal information to use the free vehicle lookup features of the CarBonnet app or website.
Vehicle lookups
When you search for a vehicle registration number, that registration number is sent to our server at CarBonnet.co.uk, which forwards it to the DVLA Vehicle Enquiry Service and the DVSA MOT History API to retrieve publicly available vehicle data. We do not store or log the registration numbers you search for.
Device tokens (push notifications)
If you choose to allow push notifications from the CarBonnet iOS app, your device’s push notification token is stored securely on our server. This token is a randomly generated identifier provided by Apple — it does not contain any personal information and cannot be used to identify you personally. It is used solely to send you notifications from CarBonnet. You can withdraw consent at any time by disabling notifications for CarBonnet in your iPhone’s Settings.
Lookup history
The CarBonnet app stores your recent vehicle lookup history locally on your device only. This data never leaves your device and is not transmitted to us or any third party. You can clear your lookup history at any time from within the app.
MOT expiry reminders
If you set an MOT reminder, this is stored as a local notification on your device only. We do not store or have access to any reminder data.
How We Use Your Information
We use the information described above solely to provide the CarBonnet service. Specifically:
- Registration numbers are used to retrieve vehicle data from official government APIs and are not retained
- Device push tokens are used only to send CarBonnet notifications you have opted into
- We do not use any data for advertising, profiling, or marketing purposes
- We do not sell any data to third parties
Third Party Services
CarBonnet uses the following third party services to provide its features:
DVLA Vehicle Enquiry Service — provides vehicle details including make, colour, tax status, and MOT status. Operated by the Driver and Vehicle Licensing Agency. Privacy policy at dvla.gov.uk.
DVSA MOT History API — provides MOT test history. Operated by the Driver and Vehicle Safety Agency. Privacy policy at dvsa.gov.uk.
Apple Push Notification Service (APNs) — used to deliver push notifications to iOS devices. Operated by Apple Inc. Privacy policy at apple.com/privacy.
Wikimedia / Wikipedia — used to retrieve representative images of vehicles. Images are sourced from Wikipedia’s public API. Privacy policy at wikimedia.org/wiki/Privacy_policy.
API Ninjas — used to retrieve extended vehicle specification data such as body style, transmission, and fuel economy. Privacy policy at api-ninjas.com/privacy.
Data Retention
- Registration number searches — not retained
- Push notification tokens — retained until you uninstall the app or disable notifications, after which tokens become invalid and are no longer used
- Local app data (lookup history, reminders) — stored on your device only and deleted when you uninstall the app or clear the data manually
Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding any personal data we hold:
- Right of access — you can request a copy of any personal data we hold about you
- Right to erasure — you can request deletion of your personal data
- Right to rectification — you can request correction of inaccurate data
- Right to object — you can object to processing of your personal data
- Right to withdraw consent — where processing is based on consent (such as push notifications), you can withdraw at any time
To exercise any of these rights, contact us at hello@webstacked.co.uk. We will respond within 30 days.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Cookies
The CarBonnet website (carbonnet.co.uk) does not use tracking or advertising cookies. Any cookies used are strictly necessary for the operation of the website.
Children
CarBonnet is not directed at children under 13 and we do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date at the top. We encourage you to review this policy periodically.
Contact
WebStacked Swindon, United Kingdom hello@webstacked.co.uk carbonnet.co.uk