Privacy Policy | Logbooked

1. Who we are

Logbooked is a UK-based car social platform operated as a sole trader / small business. We are the data controller for the personal data you provide to us. You can contact us about data matters at privacy@logbooked.co.uk.

2. What data we collect and why

Data	Purpose	Legal basis
Email address	Account authentication	Contract (Article 6(1)(b))
Username, bio, avatar	Public profile	Contract (Article 6(1)(b))
Social links (Instagram, TikTok, YouTube)	Profile display (optional)	Consent (Article 6(1)(a))
Vehicle registration number	Car profile creation, DVLA lookup	Contract (Article 6(1)(b))
DVLA vehicle data (make, colour, fuel, engine, MOT/tax status)	Populating car profiles	Legitimate interest (Article 6(1)(f))
Photos you upload	Posts, cover photos, avatar	Contract (Article 6(1)(b))
Photos processed by AI	Automatic registration plate detection in photos	Consent (Article 6(1)(a))
Comments, reactions, updates	Social features	Contract (Article 6(1)(b))
Notifications, follows, friendships	Social features	Contract (Article 6(1)(b))
IP address, request logs	Security, rate limiting	Legitimate interest (Article 6(1)(f))

3. AI photo processing

When you upload a photo, it is sent to Anthropic(our AI provider) to automatically detect UK vehicle registration plates. This helps us tag photos with the cars that appear in them. Anthropic acts as our data processor under a Data Processing Agreement. Images are not used to train Anthropic's models. You consented to this at account registration; you may withdraw consent by deleting your account.

4. DVLA data lookup

When you add a vehicle, we query the DVLA Vehicle Enquiry Service using your registration number. This is a DVLA-licensed API. We store the returned data (make, colour, fuel type, engine size, MOT and tax status) as part of your car profile. The DVLA acts as a separate data controller for its own systems.

5. Third-party processors

Supabase — database and file storage, hosted in the EU
Anthropic — AI photo analysis
DVLA — vehicle registration data
Vercel — web hosting and edge functions

All processors are bound by Data Processing Agreements and may not use your data for their own purposes.

6. How long we keep your data

Account data — until you delete your account
Posts, photos, comments — until you delete your account or the individual item
DVLA vehicle data — until you remove the car from your garage
Server logs — 30 days rolling

7. Your rights under UK GDPR

Access — request a copy of all data we hold about you
Erasure — ask us to delete your account and all associated data
Portability — download your data in machine-readable JSON format via Settings → Export my data
Rectification — correct inaccurate data via your profile settings
Object — object to processing based on legitimate interest
Restrict — ask us to limit processing while a dispute is resolved
Withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any right, email privacy@logbooked.co.uk or use the contact page. We will respond within 30 days.

8. Cookies

We use only essential cookies required for authentication (Supabase session tokens). We do not use advertising, analytics, or tracking cookies.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or an in-app notice. Continued use of Logbooked after changes constitutes acceptance.