Privacy Policy

1. Who We Are

Folt is a trading name of RYM Property Limited, registered in England and Wales (Company No. 15613602). We operate folt.co.uk and are the data controller for personal data collected through it. We are registered with the Information Commissioner's Office (ICO) under registration number ZC121941.

To contact us about privacy matters, please use our contact page.

2. Data We Collect

2.1 Information you give us directly

• Contact form: Name, email address, and message content.
• Payment: We do not store card details. Payments are processed by Stripe. We receive only a confirmation token and basic billing metadata.

2.2 Collected automatically

• Vehicle registration plates submitted for a check — treated as search queries, not personal data about you.
• IP address, browser type, and referring URL via server logs and analytics.
• Cookies — see Section 7.

2.3 From third parties

We receive vehicle data from the DVLA, DVSA MOT history service, and (in future) HPI registers. This data relates to vehicles, not individuals.

3. How We Use Your Data

• To deliver the service: Process your check and return your report.
• To process payment: Pass necessary data to Stripe.
• To respond to enquiries: When you contact us via the contact form.
• To improve the product: Aggregated, anonymised analytics only.
• Legal compliance: To meet our legal obligations.

We do not use your data for personalised advertising, build marketing profiles, or sell, rent, or trade your data.

4. Legal Basis (UK GDPR)

• Contract performance (Art. 6(1)(b)): Delivering the check you purchased.
• Legitimate interests (Art. 6(1)(f)): Improving the service, fraud prevention, security.
• Legal obligation (Art. 6(1)(c)): Compliance with applicable law.
• Consent (Art. 6(1)(a)): Optional marketing communications only.

5. Data Sharing

• Stripe, Inc. — Payment processing. See stripe.com/gb/privacy.
• Vehicle data providers — Only the registration plate is submitted; no personal data about you is passed on.
• Hosting providers — Bound by data processing agreements.
• Legal requirements — Where required by law or court order.

We do not use advertising networks, retargeting platforms, or data brokers.

6. Data Retention

• Check records: Anonymous logs retained for 12 months.
• Payment records: 7 years (HMRC requirement).
• Contact form enquiries: 12 months after resolution.

7. Cookies

• Essential cookies: Session management, CSRF protection, payment flow. Cannot be disabled.
• Analytics cookies: Privacy-respecting, no cross-site tracking. Opt out via our cookie banner.

We do not use advertising or tracking cookies from third-party ad networks.

8. Your Rights

Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and to object. To exercise any right, please use our contact page. We will respond within one calendar month.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We use HTTPS/TLS encryption, hashed passwords, access controls, and conduct regular security reviews. In the event of a personal data breach posing a risk to your rights, we will notify you and the ICO as required by law.

10. Children

Folt is not directed at individuals under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided data and we will promptly delete it.

11. Changes

We will update the "Last updated" date above when changes are made. Continued use after changes constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or to exercise your data rights, please use our contact form. Select "General Feedback" as the department and mention that it's a data rights request in your message.

Data controller: Folt (RYM Property Limited), Company No. 15613602, England & Wales.