Privacy, without surprises.
Privacy notice · 21 October 2026
Who is responsible
Motli is the trading name used for this vehicle-introduction service. Contact Motli at hello@motli.co.uk about the personal information described in this notice. Full service-provider identity and address disclosures remain incomplete; see the separate business disclosures page.
For privacy requests, withdrawal or support, email hello@motli.co.uk. Business disclosures are separate from this privacy notice.
Information we use
When you request a registration lookup, we send that registration to the Driver and Vehicle Standards Agency (DVSA) MOT History API to retrieve vehicle details and recorded MOT results, mileage and defects. We show these as suggestions for you to check; historical mileage is not a current reading. Lookup does not retrieve your name, address, finance, accident or service history, and does not produce a vehicle valuation. Manual entry remains available if lookup fails. The lookup response is not retained in a vehicle-data cache; your checked submission follows the retention rules below.
Sellers provide their name, email, phone number, vehicle registration, vehicle details, photographs, selling timeframe and outward postcode area. We do not ask for a home address or full postcode. Please keep addresses, people, documents and unrelated personal information out of photographs and notes. Uploaded photographs are re-encoded to remove embedded metadata, including GPS data; visible content still needs review.
Traders provide business and contact details, postcode area, professional-buyer confirmation and buying preferences. We keep approval decisions, sign-in records and introduction history. Hosting and authentication services also process technical information such as IP addresses, request and security logs. Application rate limits use a keyed hash rather than storing the raw IP in their rate-limit table.
Why we use it
After submission, Resend sends a receipt with a private listing-management link. The link allows status checks, vehicle-detail corrections, withdrawal and marking a car sold without a seller account. Keep it private. It expires after 180 days or earlier if the listing or contact record is removed or its access is revoked. Opening it sets an essential, secure browser cookie for up to seven days; access is checked again on every request. Listing changes are recorded for support and security.
We also email an availability reminder five days before a live listing expires. You may explicitly confirm that the car remains available to extend its listing by 30 days. Opening the email or link does not renew it. Renewal does not extend the existing personal-data retention or private-link expiry. We record the renewal and previous expiry to prevent duplicate changes and support your listing.
Traders may voluntarily record an introduction outcome, such as contacted, offer made or car bought. Only that trader and Motli’s owner can see the report. We use it to help traders track their activity and understand introduction quality. A report is self-reported, not verification of a completed sale; it does not send an offer or change the seller’s listing.
We use seller information to review and display vehicle previews, arrange the introductions requested, handle withdrawals and support, and protect against misuse. Seller consent covers sharing contact details with no more than three approved buyers for that vehicle. You can withdraw that consent by emailing hello@motli.co.uk with your seller reference. Withdrawal does not undo a disclosure already made, and we cannot make a trader forget information already received.
We use trader information to assess applications, provide accounts and requested introductions, manage access and respond to support requests. Providing the necessary details is optional, but without them we cannot provide the relevant service. Service administration relies on taking steps at your request before entering a contract or performing the requested service contract; security and fraud prevention rely on legitimate interests in protecting Motli and its users.
Who receives it
Approved traders can see reviewed vehicle previews and approximate areas. Seller names, email addresses, phone numbers and full registrations are released only after a confirmed free introduction or verified payment, to a maximum of three buyers per listing. Buyers must use them only to discuss that vehicle, not for marketing or resale. Those independent buyers are responsible for their subsequent handling of the information.
The free pilot does not require a payment card and does not create automatic charges or a subscription. When the free allowance or pilot ends, further introductions remain unavailable unless a separate paid service is enabled and you deliberately make a purchase.
Motli uses Vercel for hosting, Supabase for database, authentication and private photo storage, and Resend for account email delivery. Incoming support email is forwarded through Namecheap to a private Google Gmail inbox used by the operator. We do not publish that inbox address. When paid introductions open, Stripe will process payment information; Motli does not store card details. We may also disclose information when legally required or necessary to address fraud or legal claims. We do not sell contact lists to unrelated marketers.
Where information is processed
The configured Supabase project is in Ireland. This does not mean all processing is in Ireland: hosting, email and their support/subprocessors may process data in other countries, including the UK, EEA and US. Vercel, Supabase and Resend publish data-processing terms incorporating standard contractual clauses and UK transfer provisions where applicable. You can read their Vercel, Supabase and Resend terms or request information about the arrangements applying to your data at hello@motli.co.uk. Publication of this notice is not a claim that the incomplete business disclosures have been legally cleared.
How long we keep it
Seller contacts normally have a 180-day retention period from submission. Publication may extend this to at least 90 days after the listing expires so existing introductions can be supported. The contact-access expiry shown in the trader dashboard is the applicable deadline; ending the free pilot does not extend it. Expired seller data and photos are processed by scheduled deletion jobs, not deleted instantaneously when a listing closes.
Provider database backups follow the provider’s separate backup cycle. Encrypted database and photo recovery copies are also kept on the operator’s Mac with restricted access. Local copies have a separate manual retention review and are not automatically erased when a listing closes. Contact hello@motli.co.uk for a deletion review covering live records and recovery copies. These backup arrangements do not extend the period in which traders can access seller details.
Pending trader applications are normally removed after 180 days; rejected applications after 30 days without updates. Approved account, introduction and security records are retained while needed to operate the account, prevent abuse, resolve disputes or meet legal obligations. Financial records, once payments open, may need to be retained separately from seller contact data. Contact us to request account closure or an earlier deletion review.
Your choices and rights
You can ask to access or correct your information, request deletion or restriction, and where applicable receive a portable copy. You may withdraw consent at any time. You can object to processing based on legitimate interests. Email hello@motli.co.uk; we may need to verify your identity before acting. Rights depend on the processing and legal obligations, so deletion is not always immediate or absolute.
You can complain to the Information Commissioner’s Office. You do not have to contact Motli first, although we welcome the opportunity to resolve a concern.
Optional Google Ads measurement
After your vehicle enquiry is saved, we ask whether Google Ads may measure it. Accepting is optional and does not affect your enquiry. We load Google’s tag only after acceptance. We send a random enquiry reference to avoid counting the same enquiry twice, the public seller-page address and any advertising click identifier. We do not send your form answers, name, contact details, registration or photographs to Google. Enhanced conversions and personalised advertising are off.
Google receives technical information such as your IP address, browser and device information, and advertising identifiers. Google’s processing, storage periods and international transfers are described in its business privacy information and advertising cookie information.
We remember acceptance or rejection on your device for 180 days. We keep up to 100 random enquiry references for duplicate checks, ignore references older than 90 days, and replace expired records when another consenting enquiry is measured. You can clear these records in your browser.
Use Advertising privacy settings on the saved-enquiry receipt to withdraw. This records rejection, removes our duplicate-check records and first-party advertising cookies within our control, and opens a clean seller page. Your submitted enquiry remains saved. Google may receive the withdrawal update; data already sent or requests already started cannot be recalled. Google’s own cookies are controlled through your browser and Google settings. No advertising tag runs on the new denied page.
Cookies and automated matching
Sign-in uses essential authentication cookies. Your light/dark preference is stored on your device. Vehicle matching and filters help traders discover stock; they do not constitute a solely automated decision with legal or similarly significant effects. An operator reviews seller submissions and trader applications, and buyers and sellers decide whether to transact directly.