Privacy Policy

chinavehiclehistory.com is operated by NEXAGENTS LTD, a private limited company registered in England and Wales, registered office 128 City Road, London, United Kingdom, EC1V 2NX. We are the controller of the personal data described in this policy.

You can contact us about privacy at reports@chinavehiclehistory.com or through our contact page.

We only collect what we need to provide our service:

• Account data: your name, email address and profile photo, if you create an account with email or with Google.
• Order data: the VIN you check, the plan you buy, the email address that receives the report, your order history and any coupon you use.
• Payment data: payments are handled by our payment providers. We receive confirmation of payment, the amount and a transaction reference. We never see or store your full card details.
• Business customer data: if you use our business API, your company name, contact name and email, your API key and records of your requests and balance.
• Messages: what you send us through the contact form, email, the on-site chat assistant, WhatsApp or Telegram.
• Technical and usage data: your IP address, browser and device type, pages visited and how you use the site, collected through cookies and similar technologies (see section 5).

A VIN identifies a vehicle, not a person. The vehicle records in a report come from our data sources and are not collected from you.

We use your data to:

• create and manage your account and keep you signed in;
• process your order, take payment and deliver your report by email and in your dashboard;
• answer your questions and handle refunds and disputes;
• send service emails, such as order confirmations and report links;
• keep the site secure and prevent fraud and abuse;
• understand how the site is used so we can improve it.

Our legal bases are: performing our contract with you (accounts, orders, reports), our legitimate interests (security, fraud prevention, improving the service), your consent where it is required (for example, optional analytics cookies), and our legal obligations (for example, keeping accounting records).

We do not sell your personal data. We share it only with service providers that help us run the service, and only as much as they need:

• Sign-in: Google Firebase, which manages accounts, passwords and Google sign-in.
• Payments: Stripe, PayPal and YooMoney, depending on how you pay.
• Email delivery: providers that send our order and report emails.
• Hosting and databases: providers that host our website, servers and data.
• Analytics and site improvement: Google Analytics, Hotjar, OpenReplay and Vercel Analytics.
• Vehicle data sources: they receive only the VIN needed to retrieve records, never your name or email.
• AI services: used to translate and summarise vehicle records. They receive vehicle data, not your account details.

We may also disclose data when required by law, to protect our rights, or as part of a sale or reorganisation of our business.

We use cookies and similar technologies (such as local storage) to:

• keep you signed in and remember your language and checkout progress (necessary);
• measure visits and understand how the site is used (analytics).

Our analytics tools are Google Analytics, Hotjar, OpenReplay and Vercel Analytics. Hotjar and OpenReplay can record how you interact with pages, such as clicks and scrolling, to help us find problems. Passwords and email addresses are hidden from these recordings, and card details are entered in our payment providers' secure forms, which these tools cannot see.

You can block or delete cookies in your browser settings. Necessary cookies are needed for sign-in and checkout to work.

Our service providers may process your data outside the United Kingdom and the European Economic Area, for example in the United States. When they do, we rely on safeguards recognised by UK and EU law, such as adequacy decisions or standard contractual clauses.

• Account data: for as long as your account exists. When you delete your account, your sign-in account and profile are deleted.
• Orders and payments: kept for up to 6 years after the order, as required for accounting and tax. After account deletion these records are anonymised: your email is replaced so the order can no longer be linked to you.
• Messages: up to 2 years after our last contact with you.
• Analytics data: according to each tool's retention settings, normally no longer than 26 months.

Under UK and EU data protection law you have the right to:

• access the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, including by deleting your account from your dashboard;
• restrict or object to how we use your data;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email reports@chinavehiclehistory.com. We reply within one month. If you are not satisfied with our answer, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your country.

We protect your data with encrypted connections (HTTPS), secure sign-in handled by Google Firebase, access controls on our systems and payment processing by certified providers. No system is completely secure, but we work to protect your data and will act quickly if a problem occurs.

Our service is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy from time to time. The date at the top shows when it last changed. If we make important changes, we will tell you on the site or by email.

For any question about this policy or your data, email reports@chinavehiclehistory.com or use our contact page. You can also write to NEXAGENTS LTD, 128 City Road, London, United Kingdom, EC1V 2NX.