Privacy & Security

1. Who we are

SnApptotrade is a mobile application operated by Cartotrade Ltd, a company registered in England and Wales. Our company registration number is 09062418. Our registered address is Amelia House, Crescent Road, Worthing, West Sussex, BN11 1QR. We act as the data controller for any personal data processed through this application.

For data protection queries, contact us at: privacy@cartotrade.com

2. What data we collect

When you use SnApptotrade we may collect:

• Account data: email address, full name, and business name provided at registration.
• Usage data: vehicle registration numbers you look up, timestamps, and feature usage patterns.
• Device data: device type, operating system version, and app version for diagnostics.
• Payment data: subscription and billing information processed via our payment provider (we do not store raw card numbers).

We do not collect sensitive personal data as defined under UK GDPR Article 9.

3. How we use your data

We process your data on the following lawful bases:

• Contract performance (Article 6(1)(b)): to provide the vehicle intelligence service you have signed up for.
• Legitimate interests (Article 6(1)(f)): to improve service quality, prevent fraud, and analyse usage patterns.
• Legal obligation (Article 6(1)(c)): where required by UK law.

We do not sell your data to third parties. Vehicle registration numbers entered into the app are transmitted to authorised data providers (Solera, DVSA, DVLA, Cazana) solely to fulfil the lookup you requested.

4. Data retention

We retain account data for the duration of your account plus 12 months following closure, after which it is permanently deleted. Look-up history is retained for 24 months. Anonymised aggregate usage statistics may be retained indefinitely.

5. Your rights under UK GDPR

You have the right to:

• Access a copy of the personal data we hold about you (Article 15).
• Rectify inaccurate or incomplete data (Article 16).
• Erasure of your data in certain circumstances (Article 17) — see Section 6.
• Restrict processing where you contest accuracy or object to processing (Articles 18–21).
• Data portability in a machine-readable format (Article 20).
• Lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

To exercise any right, email privacy@cartotrade.com. We will respond within 30 days.

6. Right to erasure (data removal)

Under Article 17 of UK GDPR, you have the right to request that we delete your personal data. SnApptotrade does not currently offer in-app self-service account deletion, so this is handled as a manual request:

1. Email snappsupport@cartotrade.com from the email address registered to your account, with the subject line “Delete my account”.
2. We will delete your account and associated data within 30 days and confirm by email. (30 days matches the UK GDPR one-month response requirement for data subject requests.)

We will delete: your Firebase Authentication record (email, display name, sign-in provider) and device-local app data.

We will retain: purchase and subscription transaction records, kept for 6 years to meet UK HMRC tax/accounting record-keeping requirements, even after your account is deleted.

7. Data security

We apply industry-standard security controls including TLS 1.3 in transit, AES-256 encryption at rest (Azure infrastructure), and role-based access controls limiting staff access to personal data. We conduct annual penetration testing and maintain an incident response procedure. In the event of a breach affecting your rights, we will notify you and the ICO as required by UK GDPR Articles 33–34.

8. Contact

Cartotrade Ltd
Email: privacy@cartotrade.com
Website: snapptotrade.com
ICO registration reference: ZA103618