Privacy Notice

Draft — pending solicitor review. This is a working privacy-notice baseline for Trader2Trader and connected DriveWorth Retail services. It describes the current product and must be reviewed and completed by a qualified solicitor before it is relied on as final legal text.

Last updated: 5 September 2026 Service: Trader2Trader, including the connected DriveWorth Retail experience Current privacy and account-request route: verification@worthautomotivetechnologies.uk

1. Scope

Trader2Trader operates dealer-marketplace tools and a connected Retail vehicle experience. It is a platform for verified dealers and Retail users; unless expressly agreed otherwise in writing, a listing dealer is responsible for its own vehicle, price, availability, description and transaction decisions.

2. Information we process

Depending on the feature used, we process account and contact information, such as names, business email addresses, mobile numbers, account identifiers, login/session information and security records. We process dealer and dealership details, team membership, verification information, vehicle information, listings, dealer-uploaded media, messages, enquiries, Trade offers, saved vehicles/searches, alerts and Part Exchange information.

We also process vehicle registration marks, vehicle facts, MOT information where a lookup is requested, mileage, condition, advert information and Part Exchange details. We create safety, rate-limit, audit, report, block and account-deletion-request records where needed to protect the service and meet operational, legal and security obligations.

Dealer insurance documents are stored privately. Trader2Trader uses Anthropic through a server-side process to extract readable insurance facts such as the policyholder/business name, insurer, policy reference and dates. Clear, current and high-confidence evidence may automatically verify a dealership; incomplete, conflicting, suspicious or low-confidence evidence remains subject to human fallback. Every submission is retained for retrospective human checking. Anthropic-assisted extraction does not purport to guarantee that a document is genuine or legally sufficient.

3. Why we use information

We use information to create and protect accounts; verify and administer dealer access; operate listings, Retail enquiries, messages, offers, alerts, saved searches and Part Exchange workflows; deliver service and security communications; respond to support requests; prevent fraud, abuse and prohibited use; and comply with legal or regulatory obligations. Where UK data-protection law applies, the applicable basis depends on the use, including contract performance, legitimate interests, consent where required and legal obligations.

4. Service providers and data sharing

The current service uses Supabase for authentication, database and storage services; Expo/EAS for application build and delivery services; Resend for transactional email; Anthropic for the private insurance-fact extraction described above; and approved vehicle-data providers, including VDGL, when a user requests a vehicle lookup. Providers process information only as needed to supply their services to Trader2Trader, subject to applicable contractual and legal safeguards.

Trader2Trader does not currently use the application to collect advertising identifiers or undertake cross-app tracking, and it does not sell personal information. The final solicitor-reviewed notice must confirm applicable processor, transfer and international-data wording.

5. Retail and Trade separation

Dealer-only Trade information, including Trade price, CAP-related data, Trade notes and Trade offers, is not made available to Retail users through the Retail experience. Dealer and Retail message access is controlled by authenticated participant and dealership permissions. Public Retail content is separated from private dealer source media and private Trade data.

6. Retention and deletion

Information is retained only for as long as necessary for the purposes described here, subject to legal, security, fraud-prevention, audit, dispute and transaction-history requirements. Retail users can initiate account deletion in the DriveWorth account experience. Dealer users can initiate a dealer-account deletion request from Trader2Trader Account settings. Limited safety, audit, transaction, dispute or legal-compliance records may be retained after active access is removed where necessary.

The final solicitor-reviewed notice must state the legally approved retention periods or criteria for accounts, messages, reports, blocks, verification records, listings, offers, Part Exchange records and security/audit logs.

7. Your rights and contact

Subject to applicable law, users may have rights to request access, correction, deletion, restriction, objection or portability. Retail users may use the in-app export control for permitted account data. For privacy questions, deletion requests or complaints, use the current route above and include the email address associated with the account. The final solicitor-reviewed version must identify the legal controller, permanent privacy contact and complaint route.

8. Security and changes

Trader2Trader uses measures designed to protect information, including encrypted transport, authenticated access controls, role and row-level restrictions, server-side provider credentials, private source-media storage and security/audit controls. No service can guarantee absolute security.

This notice may be updated when the service, law or processing changes. The final public version will state the applicable legal entity and effective date.