Privacy Policy
Last updated: April 2026 · SpecialistLink Ltd
1. Introduction
SpecialistLink ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use the SpecialistLink website and services.
By using our website, you agree to the collection and use of information in accordance with this policy. If you have questions, please contact us at the address provided in Section 9.
2. Information We Collect
We may collect the following types of information:
- Search data: Postcode or city searches, car brand filters, and garage enquiries, used solely to return relevant results and are not linked to your identity.
- Contact information: If you submit a garage registration form, we collect your name, business name, address, phone number, email, and website URL.
- Usage data: Standard server logs including IP address, browser type, pages visited, and timestamps, used for site analytics and security monitoring.
- Cookie data: See our Cookie Policy for full details.
3. Vehicle & Location Data
This section is specifically required under UK data protection law for automotive data services.
MOT History: We use the DVSA (Driver and Vehicle Standards Agency) public API to retrieve MOT history data for UK-registered vehicles. We do not store full VIN numbers. Vehicle registration numbers entered into the MOT checker are processed in real-time and are not associated with your personal identity or retained after your session.
Location Data: The "Near Me" garage search feature uses your device's browser geolocation capability (with your explicit permission). This data is processed entirely in real-time by your browser to calculate distances. Your coordinates are never transmitted to or stored on our servers.
AI Advisory Queries: Text queries submitted to the Service Advisor are processed by our AI provider (OpenAI / compatible) under a data processing agreement. These queries are not linked to your identity and are not used to train AI models without appropriate consent.
4. How We Use Your Information
- To provide and improve our garage search and directory services.
- To process and display MOT history and AI-generated advisory analysis.
- To review and approve garage registration submissions.
- To send transactional communications related to your garage listing (if applicable).
- To monitor for fraud, abuse, or security incidents.
- To comply with legal obligations under UK law.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
5. Legal Basis for Processing
Under UK GDPR, we process personal data on the following lawful bases:
- Legitimate interests: Operating and improving the directory, fraud prevention, and site analytics.
- Contract performance: Processing garage registration submissions.
- Consent: Cookie placement (where required) and location access.
- Legal obligation: Retaining business records as required by UK law.
6. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Garage registration data: Retained for the duration of the listing plus 6 months.
- Server logs: Retained for up to 90 days for security purposes.
- Cookie preferences: Stored for 30 days (or until cleared).
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of access: Request a copy of your personal data.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure: Request deletion of your data ("right to be forgotten").
- Right to restrict processing: Request we limit how we use your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests.
To exercise any of these rights, please contact us using the details in Section 9.
8. Third-Party Services
We use the following third-party services which may process data on our behalf:
- DVSA: Vehicle and MOT data (public API).
- OpenAI / AI provider: Processing of advisory queries.
- Hosting provider: Server infrastructure and storage.
All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
9. Contact Us
If you have questions about this policy, wish to exercise your rights, or have concerns about how your data is handled, please contact our Data Controller:
SpecialistLink
Email: privacy@specialistlink.co.uk
We aim to respond to all data requests within 30 days, as required under UK GDPR.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.