Privacy Policy

How we collect, use and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

1. Introduction & Our Details

Apany ("we", "us", "our", "the Company") is committed to protecting your privacy and ensuring you have a positive experience on our platform. This Privacy Policy explains what personal data we collect, why we collect it and how we use and protect it.

Apany is a UK-based company registered in England. We are the data controller for any personal data you provide to us. If you have any questions about this policy or our privacy practices, please contact us at hello@apany.co.uk.

2. Data We Collect

2.1 Account & Profile Data

When you register and use the Platform we collect: full name, email address, phone number (optional), business or personal address, and profile data you choose to share.

2.2 Listing Data

If you create a listing, we collect: vehicle registration details, vehicle specifications, photos, pricing information, location data and any additional information you provide. This data is necessary to display your listing and allow dealers to submit quotes.

2.3 Transactional Data

We store records of quotes submitted, messages exchanged between parties, and transaction history. We do not directly process payments or hold transaction funds — these are handled by third-party payment providers in accordance with their own terms.

2.4 Technical & Usage Data

We automatically collect: IP addresses, device information, browser type, pages visited, time spent on the Platform and performance metrics. This helps us improve the Platform, diagnose technical issues and provide analytics.

2.5 Communication Data

If you contact us via email, phone or our contact form, we keep records of your correspondence to respond to queries and improve our service.

3. Legal Basis for Processing

Under UK GDPR, we only process your personal data where we have a lawful basis. We process your data on the following bases:

  • Contractual necessity: To provide the Platform and fulfil your user agreement.
  • Legal obligation: To comply with UK law, tax requirements and regulatory obligations.
  • Legitimate interests: To improve our services, prevent fraud, and operate our business efficiently.
  • Consent: Where you have explicitly consented (e.g., marketing communications).

4. How We Use Your Data

  • To provide, operate and improve the Platform and its features.
  • To create and manage your user account.
  • To authenticate your identity and manage access controls.
  • To enable dealers to review listings and submit quotes to you.
  • To send essential service messages, updates and security alerts.
  • To comply with legal and regulatory obligations.
  • To analyse usage patterns and improve our services through aggregated insights.
  • To detect, prevent and address fraud or security issues.
  • To send marketing communications (only with your consent).

5. Sharing & Disclosure

We may share your personal data in the following circumstances:

  • With verified dealers: When you create a listing, dealers responding to it will see relevant listing information.
  • With service providers: We use trusted third parties for hosting, email delivery, analytics and customer support — all bound by confidentiality agreements.
  • Legal compliance: We may disclose data where required by law, court order or regulatory authority.
  • Business transfer: If Apany is acquired or merges with another company, your data may be transferred as part of that transaction.

We do not sell your personal data to third parties for marketing purposes.

6. Cookies & Tracking

We use cookies and similar tracking technologies for:

  • Session management and user authentication.
  • Remembering your preferences and settings.
  • Analytics and performance monitoring.
  • Security and fraud prevention.

You can control cookies through your browser settings. Some cookies are essential for the Platform to function; disabling them may limit functionality. We provide a cookie consent banner on first visit — you can withdraw consent at any time.

7. Data Security

We implement industry-standard security measures to protect your personal data, including:

  • Encryption of data in transit (SSL/TLS).
  • Secure storage of sensitive information.
  • Access controls limiting data to authorised staff.
  • Regular security audits and vulnerability assessments.

While we take security seriously, no system is completely secure. If you suspect a data breach or security incident, please contact us immediately at hello@apany.co.uk.

8. Data Retention

We retain your personal data for as long as necessary to:

  • Provide the Platform and fulfil our contractual obligations.
  • Comply with UK legal and regulatory requirements.
  • Resolve disputes or investigate complaints.
  • Establish, exercise or defend legal claims.

If you request account deletion, we will remove your personal data within 30 days, except for limited records we are required to retain for legal or regulatory purposes (e.g. fraud prevention, financial records). After deletion, your data may remain in backup systems for up to 90 days before permanent deletion.

9. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request correction of inaccurate or incomplete data.
  • Right to erasure: You can request deletion of your data (subject to legal exceptions).
  • Right to restrict processing: You can request that we limit how we use your data.
  • Right to data portability: You can request your data in a structured, commonly used format.
  • Right to object: You can object to processing for direct marketing or legitimate interests.
  • Rights related to automated decisions: You have rights concerning decisions made by automated means.

To exercise any of these rights, please contact us at hello@apany.co.uk with evidence of your identity. We will respond within 30 days. If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

10. Third-Party Links and Services

The Platform may link to third-party services and websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal data to them.

11. International Transfers

Apany is based in the UK and your data is primarily stored within the UK. If we need to transfer data outside the UK (including to countries outside the EEA), we will ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses.

12. Marketing Communications

We may send you marketing communications about our services, updates and promotions. You have the right to opt out at any time by clicking the "unsubscribe" link in any email or by contacting us. We will respect your preferences and not send marketing emails to you if you have opted out.

13. Children's Privacy

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal data, we will delete such data promptly and notify parents or guardians where possible.

14. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. Material changes will be notified on the Platform, via email or through other appropriate means. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact & Data Protection Officer

For privacy queries, data subject requests, or concerns please contact us:

If you have concerns about how we handle your personal data that we cannot resolve, you can lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by phone at 0303 123 1113.

Last updated: January 2025