Smart Buy Privacy Notice
LBM Developments Limited is controller of personal data used to provide and administer Smart Buy. This notice covers business contacts, account users, trial users and people who contact us.
1. Information
- Business and account details: business name, username, role, email and password hash.
- Check inputs and records: registrations, vehicle details, photographs, cost assumptions, saved results and usage history.
- Billing identifiers from Stripe; we do not receive full card numbers.
- Support messages, complaints and policy-acceptance records.
- Technical/security data: sessions, timestamps, browser/device data, request/audit records and security events.
2. Sources
We receive data from you and authorised account users, Stripe, and vehicle-data, valuation and marketplace providers when a check runs. Vehicle information may originate from official, licensed or public sources.
3. Purposes and lawful bases
- Contract: accounts, trials, paid plans, checks, allowances, billing and support.
- Legitimate interests: security, improvement, fraud/misuse prevention, fault diagnosis, auditing and performance, balanced against individual rights.
- Legal obligation: business, accounting, security and regulatory records and lawful requests.
- Consent: where specifically requested for optional cookies or marketing; it may be withdrawn.
4. Sharing
We use contracted providers for Stripe payment processing, cloud hosting/databases, communications/support, security, and requested vehicle-data, valuation and marketplace functions. We may disclose to advisers, insurers, law enforcement, regulators or courts where lawful. We do not sell personal data.
5. International transfers
Where a provider processes data outside the UK, we use a lawful safeguard where required, such as adequacy regulations, the UK International Data Transfer Agreement/Addendum or another permitted mechanism.
6. Retention
Account and check records are held while active and afterwards only as reasonably needed for history, disputes, fraud prevention, legal obligations and claims. Billing/accounting records are normally retained six years. Support, security and audit records follow their purpose and risk; backups expire on a protected cycle. Data no longer needed is deleted or anonymised.
7. Rights
Subject to legal conditions, individuals may request access, correction, erasure, restriction, objection or portability and withdraw consent. Email admin@brakerbase.co.uk; identity/authority may be verified. Complaints may be made to the ICO at ico.org.uk.
8. Security and outputs
We use access controls, tenant separation, secure sessions and transport, restricted credentials, webhook verification, audit logs and monitoring. No online service guarantees absolute security. Smart Buy outputs support a business user’s decision and do not make a legal or similarly significant decision about an individual.
9. Changes
Updates will show a new version and effective date. Contact admin@brakerbase.co.uk.