Privacy, clearly explained.

ConnectCover is the document-service brand of Connectcover Limited. We are responsible for the personal information we process to operate these document-service pages and handle enquiries addressed to us.

This notice describes the document website, its vehicle search and its forms. It does not replace the privacy information supplied with an earlier purchase or another service.

The information involved depends on which part of the website you use:

• Vehicle search: the registration you submit and the vehicle details returned, such as make, model and year.
• Form entries: your name, email address, document reference, enquiry topic and message, where entered. How these fields are handled is explained below.
• Direct correspondence: information you send to our email or postal address, together with the details needed to answer you.
• Technical records: hosting and security services may record IP addresses, request times, requested pages, browser information and error information.

Keep sensitive information out of free-text fields unless it is specifically needed. Do not provide payment-card details, passwords or another person’s private information without an appropriate reason and authority.

We receive information when you deliberately submit a vehicle search, send the contact form, or contact us directly by email or post. Hosting services also handle the requests needed to display the website.

Submitting the contact form sends your name, email address, enquiry topic, optional document reference and message to our server. We use Resend to forward the enquiry to our support inbox, with your email address as the reply address. The form displays a confirmation after the email service accepts the message. Submitting a document-access request sends your email address and registration or document reference to our server to match a completed document order. Matching documents are read from private Supabase storage and emailed through Resend to the address saved on that order. The page does not display private documents or confirm whether an order exists. We limit repeat requests to help prevent misuse.

FAQ search runs locally. The automated document guide sends each question to our server to find an answer in our site guidance. It does not connect you to a live agent or forward chat messages to the team. The recent conversation is kept in session storage in this browser tab so it can continue between pages. Use Clear chat to remove it; saved history is not restored after 30 minutes without a saved message.

• To return the vehicle information you request.
• To display pages, identify errors and protect the website against misuse.
• To respond to correspondence we actually receive, including privacy requests and complaints.
• To meet applicable legal duties and establish, exercise or defend legal claims where necessary.

Entering information or searching for a vehicle does not subscribe you to marketing. These pages do not use the information to make automated decisions with legal or similarly significant effects.

Where data-protection law requires a lawful basis, our purposes are linked to the following bases:

• Legitimate interests: providing a vehicle search you request, running a reliable and secure website, and answering general correspondence. We must consider your interests and rights alongside those purposes.
• Steps requested before a contract or performance of a contract: where correspondence is necessary to discuss or fulfil a specific service you have asked us to provide.
• Legal obligation: handling rights requests and keeping or disclosing information where a law requires it.
• Consent: where a separate optional activity requires your consent. Consent must be a real choice and can be withdrawn.

A vehicle search passes the registration to our server and, when the search is available, to the configured vehicle-data provider. The website uses a Vehicle Data Global integration. The response supplies the vehicle information displayed on the page.

Hosting, infrastructure and security providers process information needed to deliver and protect the website. Resend handles contact-form email delivery, and email providers handle the correspondence in our inbox. A provider may also process information for its own lawful purposes under its own notice.

Information may be disclosed to professional advisers or public authorities where necessary and lawful. We do not sell personal information.

The document pages described in this notice do not collect payment-card details. Keep those details out of contact messages.

If you use a separate payment service, read the privacy information presented there before entering payment details.

The Your documents page has registration, document-reference and email fields. These currently support local form interaction and validation; entering them does not send an access request or retrieve a private document.

Local values remain in the page while it is open. Your browser’s own autofill, history or session-restoration settings may also affect what it remembers. Contact-form and document-access entries are not written to local or session storage by those forms. The document guide uses session storage as described above.

Keep document references and any links you receive private. Only request access to information you are entitled to see.

The document-page scripts do not set analytics or advertising cookies or use tracking pixels. The document guide uses session storage for recent chat history; contact-form and document-access entries are not saved there. Fonts are served with the website.

A strictly necessary cookie may be set for authorised maintenance access. It expires after 12 hours. Hosting and security providers may also process technical information needed to protect access.

If optional tracking is introduced, its purpose and any required choice must be explained before it is used. Browser settings can also control cookies, although blocking necessary cookies can affect access.

Local form entries and vehicle results are not saved in browser storage by these pages. This does not prevent the browser from remembering information through settings you control.

For correspondence and operational records held by us or on our behalf, retention depends on the purpose: completing the enquiry, resolving a security issue or complaint, meeting a specific legal duty, or dealing with a relevant legal claim. Records should be deleted or anonymised when those purposes no longer justify keeping them.

Service-provider logs may have separate retention periods. You can ask us for information about the records relevant to your request and the retention criteria applied to them.

The operator is based in Gibraltar. The location of technical processing also depends on the hosting, vehicle-data and communications services used.

Where a transfer is restricted by applicable data-protection law, it must have a permitted basis, such as a relevant adequacy arrangement or appropriate contractual safeguards. Contact us to ask where information relating to you is processed and for details or copies of applicable safeguards.

Our responsibilities include limiting access to people and providers who need the information for the relevant purpose, and applying technical and organisational protections appropriate to its sensitivity and the risks involved.

No website can promise absolute security. Use a trusted device, keep access details private and tell us promptly if you believe information has been exposed or used incorrectly.

Depending on the law and processing involved, you can ask for access, correction, deletion, restriction or a portable copy of your information. You can withdraw consent for processing based on consent without affecting the lawfulness of earlier processing.

Your right to object: you may object to processing based on legitimate interests for reasons relating to your situation. You can object to direct marketing at any time.

Send a request to enquiries@connectcover.uk or the postal address above. Explain what you need and provide enough information for us to identify the relevant records. We may need proportionate identity checks. Rights are subject to applicable conditions and exemptions.

Under UK data-protection rules, requests are normally answered within one month. Where the law allows an extension, we must explain it and keep you informed. You do not need to pay merely to make a routine request.

Learner practice logs may be relevant to younger people. Keep entries limited to useful practice information and avoid unnecessary sensitive details about yourself, supervisors or other people.

If you are helping a younger person, make sure they understand what is entered and how it is used. Contact us if you are concerned that a child’s information has been provided inappropriately.

Links may take you to another organisation’s website. Its privacy information applies to what it collects there. Check the destination and its notice before providing information.

A link does not mean that we control the other organisation or its processing.

We update this notice when the service or the way information is handled changes. The date at the top identifies this version.

We will explain material changes to how we use your information. Updating this notice does not retrospectively authorise a new use of information or remove an existing right.

Send privacy questions and rights requests to enquiries@connectcover.uk, or write to:

Include “Privacy” in your subject or heading and tell us how you would like a response. You can also visit the Help centre for general guidance.

Tell us what happened, when it happened and what you would like us to investigate. Where UK data-protection complaint rules apply, we must acknowledge your complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome.

You may raise a concern with the UK Information Commissioner’s Office where UK data-protection law applies, or the Gibraltar Regulatory Authority, acting as Information Commissioner, as appropriate. Contacting us does not remove your right to complain to a competent authority.