Privacy Policy

1. Who we are

Race for Sale Ltd (“we”, “us”, “our”) is a company registered in England and Wales (Company No. 14XXXXXX), with registered address at 1 Chancery Lane, London WC2A 1LF. We operate the Race for Sale marketplace at raceforsale.com and associated subdomains.

For EU residents, Race for Sale Ltd acts as the data controller under the General Data Protection Regulation (GDPR). Our appointed EU representative is Race for Sale BV, Keizersgracht 555, 1017 DR Amsterdam, Netherlands.

2. Data we collect

We collect personal data in the following categories:

• Account data: name, email address, password (hashed), phone number (optional), company name and VAT number (for pro accounts).
• Listing data: vehicle details, photos, pricing, location, and any documents you upload in support of provenance claims.
• Payment data: billing name, billing address, and last four digits of payment card. We do not store full card numbers — these are handled by our payment processor (Adyen).
• Usage data: pages visited, search queries, filters applied, clicks on listing cards, time spent on listings. Collected via server logs and first-party analytics.
• Communications: messages sent through our enquiry system, support tickets, and any correspondence with our editorial team.

3. How we use it

• To operate the marketplace — matching buyers with sellers, processing listings, and sending leads to sellers.
• To process payments and issue invoices.
• To verify identity and conduct editorial review of listings.
• To send transactional emails (listing approved, new enquiry, auction ending).
• To send marketing emails, where you have opted in.
• To improve the platform through aggregated analytics.
• To comply with legal obligations including fraud prevention and tax record-keeping.

4. Legal basis for processing

We process your data under the following legal bases:

• Contract performance — to deliver the services you have signed up for.
• Legitimate interests — for fraud prevention, security, and improving the platform.
• Consent — for marketing emails and non-essential cookies.
• Legal obligation — for tax records, anti-money-laundering checks on high-value transactions, and responding to lawful requests from public authorities.

5. Who we share your data with

We do not sell personal data. We share data with:

• Adyen — payment processing (PCI DSS Level 1 certified).
• Neon / Supabase — database hosting (EU region, ISO 27001).
• Vercel — application hosting (EU region option selected).
• Resend — transactional email delivery.
• Law enforcement — where required by law or to protect the rights of users.

All third-party processors are bound by data processing agreements and may only use your data to provide services to us.

6. How long we keep your data

• Account data: for as long as your account is active, plus 2 years after closure.
• Listing data: 7 years (UK tax record requirement).
• Payment records: 7 years (UK HMRC requirement).
• Usage logs: 13 months.
• Support communications: 3 years after resolution.

7. Your rights

Under GDPR and UK GDPR, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion, subject to our retention obligations.
• Portability — receive your data in a machine-readable format.
• Object — opt out of processing based on legitimate interests or direct marketing.
• Restriction — request that we pause processing while a dispute is resolved.

To exercise any of these rights, email privacy@raceforsale.com. We will respond within 30 days. You may also lodge a complaint with the UK ICO at ico.org.uk or your local EU supervisory authority.

8. Cookies

See our Cookie Policy for full details of the cookies we use and how to manage them.

9. Contact us

Data protection enquiries: privacy@raceforsale.com

General enquiries: see our contact page.