Last updated: 20 September 2026

1. Who we are

Key2Car Limited (“Key2Car”, “we”, “us”, “our”) is the “controller” of the personal data we process about you. We are a company registered in England and Wales under company number 16949981, with our registered office at Ferry Lane, TW19 6HG. We are registered with the Information Commissioner’s Office (ICO) under registration number ZB171886.

This policy applies to the Key2Car website at key2car.co.uk and related services (the “Platform”). For questions about it, contact us at info@key2car.co.uk.

2. Data we collect

Depending on how you use the Platform, we may collect:

• Account & profile data – your name, email address, password (stored in encrypted form), and telephone number, plus any other details you add to your profile.
• Buyer activity – saved/favourited cars, searches, enquiries and messages you send to sellers, and callback requests.
• Seller & dealer data – your (or your business’s) name and contact details, the content of your listings, and subscription and billing information. Card payments are handled by our payment providers and we do not store full card numbers.
• Vehicle check data – the vehicle registration marks you enter when using our vehicle check tool.
• Communications – messages you send us or other users, support requests, contact-form submissions and any live-chat conversations.
• Technical & usage data – your IP address, device and browser type, and information about how you use the Platform, collected via cookies and similar technologies (see our Cookies Policy).
• Marketing preferences – your choices about receiving marketing from us.

3. How we collect it

We collect data directly from you (for example when you register, list a vehicle, contact a seller or use a tool), automatically as you use the Platform (through cookies and analytics), and from third parties such as our vehicle-data providers, payment providers, and analytics and advertising partners.

4. How and why we use your data

We use your personal data for the following purposes, relying on the lawful bases shown:

Where we rely on legitimate interests, those interests are operating, securing and improving a trustworthy marketplace, and we balance them against your rights.

5. Marketing

We will only send you marketing where we are permitted to do so. You can opt out at any time using the unsubscribe link in our emails or by emailing info@key2car.co.uk. Opting out of marketing does not stop service messages relating to your account or listings.

6. Cookies

We use cookies and similar technologies for essential functions, to remember your preferences, to analyse usage, and for advertising. For details and how to manage them, see our Cookies Policy.

7. Site measurement

When you have accepted cookies, we record how the site is used so we can improve it and understand which of our adverts are working. We log the action taken — a car viewed, saved, or an enquiry sent — together with the car concerned, the page it happened on, and where you arrived from.

We do not store your IP address for this purpose. If you are signed in, the record is linked to your account so we can show sellers how their own adverts are performing; if you are not signed in, it is not linked to any identifiable person.

Our lawful basis is your consent, given through the cookie banner, and you can withdraw it at any time using the Cookie settings link. Measurement records are kept for 24 months and then deleted.

We also use Google Analytics for the same purpose. Google acts as a separate controller for that data; their handling of it is covered by Google’s own privacy policy.

We also use Microsoft Clarity to see how pages are used — scrolling, taps, and where people get stuck. Clarity records a picture of the page rather than what you type: it hides the contents of form fields, and we have told it to blank out the account, checkout, dashboard and listing-form areas in your browser before anything is sent, so it does not receive your name, address, payment details or the messages you write. Microsoft acts as our processor for Clarity and may process the data outside the UK under an approved transfer mechanism. Clarity runs only if you have accepted cookies, and Microsoft’s privacy statement is at privacy.microsoft.com/privacystatement.

8. Who we share your data with

We do not sell your personal data. We share it only as follows:

• Sellers and buyers – when you contact a seller (or, as a seller, receive an enquiry), we share the information needed to connect you, such as your name, the message and relevant contact details.
• Service providers (processors) acting on our instructions, including web hosting, payment processing, email delivery, analytics (Google), session replay and page analytics (Microsoft Clarity), image compression (QUIC.cloud), advertising (Google AdSense), our vehicle-data providers, and live-chat/support tools.
• Authorities and advisers – where required by law, to prevent fraud or crime, or to establish, exercise or defend legal claims.
• Business transfers – if we reorganise, sell or transfer our business, your data may be transferred as part of that transaction.

Photographs uploaded to the Platform, including the photographs that come with a dealer’s stock feed, are sent to QUIC.cloud to be compressed and converted to a faster web format. Camera information attached to a photograph, which can include location, is removed as part of that process. Compression is carried out on the image itself; we do not send QUIC.cloud any details about the person who uploaded it. Their privacy policy is at quic.cloud/privacy-policy.

9. International transfers

Some of our providers (for example, our analytics, advertising and image-compression partners) may process data outside the UK. Where they do, we take steps to ensure your data is protected by an appropriate safeguard, such as a UK adequacy decision or the International Data Transfer Agreement / Standard Contractual Clauses.

10. How long we keep it

We keep personal data only for as long as necessary for the purposes above. Account data is generally kept while your account is active and for a reasonable period afterwards; transaction and billing records are kept for as long as required by law (typically at least six years); and other data is kept in line with our retention practices before being deleted or anonymised.

11. How we protect it

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including encryption in transit, access controls, and use of reputable service providers. No online service can be guaranteed to be completely secure, so you also play a part by keeping your password confidential.

12. Your rights

Under UK data protection law you have the right to: be informed about how we use your data; access a copy of it; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to processing (including direct marketing); data portability; and to withdraw consent where we rely on it. To exercise any of these rights, email info@key2car.co.uk. We will respond within the time limits set by law, and we will not charge a fee except where permitted.

13. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Third-party links

The Platform may contain links to third-party websites and services (including sellers’ own sites and third-party tools). We are not responsible for their privacy practices, and we encourage you to read their policies.

15. Changes to this policy

We may update this policy from time to time. The “last updated” date above shows the latest version. Where changes are significant, we will take reasonable steps to bring them to your attention.

16. Contact and complaints