V55/5

Privacy Policy

Last updated: February 2026

This privacy policy explains how v55-5 ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website at v55-5.com (the "Service"). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is V55/5. If you have any questions about how we handle your data, you can contact us at help.v55.5@gmail.com.

2. What Data We Collect

We collect and process the following categories of personal data:

• Form inputs: Vehicle details (make, model, VIN, registration number, etc.) and keeper/registered keeper details (name, address, date of birth) that you provide when completing the V55/5 form.
• Email address: Used to deliver your access link, payment receipts, and service communications.
• Payment metadata: Transaction identifiers, amounts, and payment status processed through Stripe. We do not store your full card details.
• Usage analytics: Pseudonymous product milestones such as starting the registration route, completing readiness, starting the form, beginning checkout, paying, and generating the PDF. These records use an anonymous case identifier and do not contain your form answers, VIN, keeper details, email address, or uploaded documents.
• IP addresses: Collected for security, fraud prevention, and analytics purposes.
• Device and browser information: Browser type, operating system, and screen resolution collected through analytics.
• Vehicle documents you choose to upload (optional): If you use the optional “auto-fill from your documents” feature, the vehicle document you upload (such as a Certificate of Conformity, foreign registration document, IVA/MSVA certificate or purchase invoice) is processed transiently to read vehicle data from it. See section 5a below. We do not accept identity documents (passports, driving licences, utility bills) through this feature.

3. Lawful Basis for Processing

We process your personal data on the following lawful bases under the UK GDPR:

• Contract performance (Article 6(1)(b)): Processing your form data and email address is necessary to provide the V55/5 form completion service you have requested and paid for.
• Legitimate interests (Article 6(1)(f)): We use analytics data, IP addresses, and usage patterns for fraud prevention, service improvement, and ensuring the security and stability of our Service. We have assessed that these interests do not override your rights and freedoms.
• Consent (Article 6(1)(a)): Where we send marketing emails or use non-essential cookies, we do so only with your explicit consent. You may withdraw consent at any time.
• Legal obligation (Article 6(1)(c)): We retain certain payment records as required by UK tax and accounting regulations.

4. How We Use Your Data

• To generate your completed V55/5 PDF form based on the information you provide.
• To process your payment and provide transaction receipts.
• To send you access links and service-related communications via email.
• To detect and prevent fraud or misuse of the Service.
• To analyse usage patterns and improve the Service.
• To comply with legal and regulatory obligations.

5. Third-Party Data Processors

We share your data with the following third-party processors, each of whom is contractually bound to protect your data:

• Stripe (payment processing): Handles all payment transactions. Stripe is PCI-DSS Level 1 compliant, the highest level of certification in the payments industry. Your card details are processed directly by Stripe and are never stored on our servers. Stripe Privacy Policy.
• Supabase (data storage and authentication): Stores your form data and manages session authentication. Data is hosted on EU-based servers. Supabase Privacy Policy.
• Resend (email delivery): Delivers transactional emails including access links and payment receipts. Resend Privacy Policy.
• Google Analytics (anonymised analytics): Collects anonymised usage data to help us understand how the Service is used and to improve it. IP addresses are anonymised before processing. Google Privacy Policy.
• OpenRouter, Inc. (AI document reading — optional feature only): If you choose to upload a vehicle document for auto-fill, the document is sent to OpenRouter, which routes it to an AI model to read the vehicle data from it. We send these requests with data retention and model training disabled, the document is handled in memory only, and it is never written to our database or storage. OpenRouter Privacy Policy.

5a. AI Document Processing (Optional)

The form offers an optional feature that reads vehicle data from documents you already have — for example a Certificate of Conformity or a foreign registration document — so you don't have to type it all in. In plain English, here is exactly what happens if you use it:

• It only runs when you actively upload a document. Nothing is uploaded automatically, and every field can be filled in manually instead.
• The document is sent once, over an encrypted connection, to an AI model via OpenRouter to read the vehicle values printed on it. We instruct the provider not to retain the document or use it for model training.
• The document itself is processed in memory and discarded when the request completes. We never store your document on our servers, in our database, or in your browser.
• Only the vehicle values you choose to apply are kept, as part of your form data, under the normal 30-day retention rule described in section 6.
• We do not accept identity documents (passports, driving licences, national ID cards, utility bills or bank statements) through this feature, and the extraction deliberately requests no personal data — any names or addresses printed on a vehicle document (for example the previous keeper on a foreign registration certificate) are ignored.
• The lawful basis for this processing is your consent (Article 6(1)(a)), given by the act of uploading; you can simply not use the feature.

6. Data Retention

We retain your data for the following periods:

• Form data: Retained for 30 days after generation to allow you to access and download your completed PDF, after which it is permanently deleted.
• Payment records: Retained for 7 years as required by UK tax and accounting legislation (including HMRC requirements).
• Analytics data: Google Analytics data and first-party product milestones are retained for up to 26 months for service improvement, after which they are deleted.
• Email address: Retained for the duration of the service period (30 days) unless you have consented to marketing communications, in which case it is retained until you unsubscribe.
• Uploaded vehicle documents: Processed transiently and discarded when the reading request completes — never stored. Only the extracted values you choose to apply are kept, within the 30-day form data retention above.

7. Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You can request that we delete your personal data, subject to any legal obligations we may have to retain it.
• Right to restrict processing: You can request that we limit how we use your data in certain circumstances.
• Right to data portability: You can request a copy of your data in a structured, commonly used, machine-readable format.
• Right to object: You can object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at help.v55.5@gmail.com. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UK:

• Supabase: Data is stored on EU-based servers, which benefit from a UK adequacy decision.
• Stripe: May process data in the United States. Transfers are protected by Standard Contractual Clauses (SCCs) approved by the UK Government.
• Resend: May process data in the United States. Transfers are protected by Standard Contractual Clauses (SCCs).
• Google Analytics: May process data in the United States. Transfers are covered by Google's data processing terms and Standard Contractual Clauses.
• OpenRouter: Used only if you upload a vehicle document for the optional auto-fill feature. Documents may be processed in the United States under the provider's data processing terms, with retention and training disabled; the document is not stored.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure storage with access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at help.v55.5@gmail.com and we will take steps to delete such data.

11. Cookies and Local Storage

We use cookies and local storage technologies to operate the Service and analyse usage. For full details on the cookies we use and how to manage them, please see our Cookie Policy.

12. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

• Email: help.v55.5@gmail.com
• Website: v55-5.com