1. Who we are
Race for Sale (“we”, “us”, “our”) operates the Race for Sale marketplace at raceforsale.com and associated subdomains.
Race for Sale is the data controller for your personal data processed through this platform.
2. Data we collect
We collect personal data in the following categories:
- Account data: name, email address, password (hashed), phone number (optional), company name and VAT number (for pro accounts).
- Listing data: vehicle details, photos, pricing, location, and any documents you upload in support of provenance claims.
- Payment data: billing name, billing address, and last four digits of payment card. We do not store full card numbers — these are handled by our payment processor (Adyen).
- Usage data: pages visited, search queries, filters applied, clicks on listing cards, time spent on listings. Collected via server logs and first-party analytics.
- Communications: messages sent through our enquiry system, support tickets, and any correspondence with our editorial team.
3. How we use it
- To operate the marketplace — matching buyers with sellers, processing listings, and sending leads to sellers.
- To process payments and issue invoices.
- To verify identity and conduct editorial review of listings.
- To send transactional emails (listing approved, new enquiry, auction ending).
- To send marketing emails, where you have opted in.
- To improve the platform through aggregated analytics.
- To comply with legal obligations including fraud prevention and tax record-keeping.
4. Legal basis for processing
We process your data under the following legal bases:
- Contract performance — to deliver the services you have signed up for.
- Legitimate interests — for fraud prevention, security, and improving the platform.
- Consent — for marketing emails and non-essential cookies.
- Legal obligation — for tax records, anti-money-laundering checks on high-value transactions, and responding to lawful requests from public authorities.
6. How long we keep your data
- Account data: for as long as your account is active, plus 2 years after closure.
- Listing data: 7 years (UK tax record requirement).
- Payment records: 7 years (UK HMRC requirement).
- Usage logs: 13 months.
- Support communications: 3 years after resolution.
7. Your rights
Under GDPR and UK GDPR, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion, subject to our retention obligations.
- Portability — receive your data in a machine-readable format.
- Object — opt out of processing based on legitimate interests or direct marketing.
- Restriction — request that we pause processing while a dispute is resolved.
To exercise any of these rights, email privacy@raceforsale.com. We will respond within 30 days. You may also lodge a complaint with the UK ICO at ico.org.uk or your local EU supervisory authority.
9. Contact us
Data protection enquiries: privacy@raceforsale.com
General enquiries: see our contact page.