Privacy Policy

Motofly is the data controller for personal data we collect through the Service. You can contact us at info@motofly.co.uk for any privacy-related questions or to exercise your rights under the UK GDPR.

• Account information: name, email address, phone number, password (stored as a salted hash), and account role (buyer, seller, or dealer).
• Listing content: vehicle details, photos, pricing, and location information you submit when listing a vehicle.
• Messages: the content of messages exchanged between buyers and sellers through the Service.
• Usage data: pages viewed, listings favourited, and basic analytics necessary to operate and improve the Service.
• Technical data: IP address, browser type, and device information, collected automatically for security and fraud prevention.

We rely on the following lawful bases under Article 6 of the UK GDPR:

• Contract: to provide you with an account, publish your listings, and facilitate communication between buyers and sellers.
• Legitimate interests: to maintain platform safety, prevent fraud, and improve the Service. These interests are balanced against your rights and freedoms.
• Consent: for non-essential cookies and any marketing communications, which you can withdraw at any time.
• Legal obligation: where we must process data to comply with applicable UK law.

• To create and maintain your account
• To display your listings to other users
• To enable messaging between buyers and sellers
• To verify dealers and prevent fraudulent listings
• To respond to your support requests
• To comply with our legal and regulatory obligations

We do not sell your personal data. We share it only with the following categories of recipients, each acting as a data processor under our instructions:

• Supabase — database and authentication provider (EU-West region).
• Vercel — application hosting (London region primary).
• Other Motofly users — when you publish a listing or send a message, the relevant content (including your seller display name and any contact details you choose to publish) is visible to other users of the Service.
• Law enforcement or regulators — where we are legally required to disclose data.

Our infrastructure is hosted within the United Kingdom and the European Economic Area. Where any processor transfers data outside the UK, we rely on the UK Government's adequacy regulations or the International Data Transfer Agreement (IDTA).

We retain account data for as long as your account is active. If you delete your account, we delete personal data within 30 days, except where we are required to retain it to comply with legal obligations or to resolve disputes. Listings and messages may be retained in anonymised form for fraud-prevention and analytics purposes.

Under the UK GDPR you have the right to:

• access the personal data we hold about you
• request correction of inaccurate data
• request erasure of your data
• restrict or object to our processing
• data portability
• withdraw consent at any time

To exercise any of these rights, email info@motofly.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have mishandled your data.

We use a small number of strictly necessary cookies to keep you signed in and to remember your preferences (including your cookie-consent choice). We do not currently use any third-party analytics, advertising, or tracking cookies. Should we introduce any in future, we will request your consent through the cookie banner before they are set.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date and, where appropriate, notify you by email or through the Service.