Last updated: July 2026
1. Who we are
LastSeen (last-seen.co.uk) is a community vehicle registry platform allowing users to search for and share the history of vehicles. Contact: contact@last-seen.co.uk.
2. What data we collect
- Account data: name/display name, email address, password (hashed via bcrypt), registration date.
- Submitted content: vehicle registration numbers, sighting reports, vehicle history claims, photos/media uploaded by users.
- Technical data: IP address, browser/device information, session data, CAPTCHA verification data (Cloudflare Turnstile).
- Removal requests: details submitted via the removal request form, including reason for removal and contact email (routed to removals@last-seen.co.uk).
- Location data: county-level only — we deliberately do not store or display precise location/GPS data. Where possible all EXIF GPS metadata is stripped from uploaded images. Users of this site are required to ensure no location information is posted at any time
3. Legal basis for processing (UK GDPR Art. 6)
- Contract: to provide the account and platform services you've signed up for.
- Legitimate interest: fraud prevention, moderation, platform security, and preventing misuse (e.g. facilitating vehicle theft).
- Legal obligation: responding to lawful requests from authorities (e.g. police, DVLA) where required.
- Consent: where applicable, e.g. marketing communications (if introduced later).
4. How we use your data
- Operating and improving the platform
- Moderating submissions and investigating reports of misuse
- Responding to removal requests
- Communicating with you about your account (e.g. activation emails)
- Preventing fraud and illegal activity
5. Who we share data with
- Hosting/infrastructure: BlinkWeb (hosting), Cloudflare (CDN/security/CAPTCHA).
- Email delivery: via sendmail transport, domain-hosted mailboxes (contact@, removals@).
- We do not sell user data to third parties.
- We may disclose data to law enforcement where legally required, particularly in cases of suspected vehicle crime.
6. International transfers
Data is currently hosted within the UK. If this changes (e.g. future international expansion), this section will be updated to reflect appropriate safeguards.
7. Data retention
- Account data: retained while your account is active, deleted within 30 days of account deletion request.
- Removal requests: retained for 30 days for audit trail purposes, even where the associated vehicle record is not found.
- Logs/technical data: retained for security purposes for [X days].
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure ("right to be forgotten")
- Request restriction of processing
- Data portability
- Object to processing based on legitimate interest
To exercise these rights, contact contact@last-seen.co.uk. For vehicle/listing removal specifically, use removals@last-seen.co.uk.
9. Vehicle data and third-party information
Some data on LastSeen relates to vehicles (and may indirectly relate to current or former owners) submitted by other users. If you believe data about a vehicle you own or owned is inaccurate or should be removed, please use our removal request process.
10. Data breach notification
In the event of a data breach affecting your personal data, we will notify the ICO (Information Commissioner's Office) within 72 hours where required, and affected users without undue delay where there is high risk to their rights and freedoms.
11. Children
LastSeen is not directed at or intended for use by individuals under 18.
12. Changes to this statement
We may update this statement from time to time. Material changes will be notified via the platform or email.
13. Complaints
You have the right to lodge a complaint with the ICO (ico.org.uk) if you believe your data has been mishandled.