PRIVACY POLICY
ED AutoMoto
www.uploadyourcar.com
Last updated: April 9, 2026
This Privacy Policy describes how ED AutoMoto ("we", "us", or "our") collects, uses, and discloses your personal data when you use our website and services. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable data protection laws in the United States, including the California Consumer Privacy Act (CCPA) where applicable.
By accessing or using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.
1. Data Controller
The data controller responsible for your personal data is:
ED AutoMoto
Enterprise Number: 0742.905.479
Bomerstraat 77 bus B, 3990 Peer, Belgium
Email: info@uploadyourcar.com
For any privacy-related inquiries, you may contact our designated Data Protection contact at the above email address.
2. What Personal Data We Collect
We collect personal data that you provide directly to us and data collected automatically when you use our website.
2.1 Data You Provide to Us
When you submit a vehicle for valuation or sale through our platform, we may collect:
- Full name and contact information (email address, phone number)
- Vehicle information (make, model, year, mileage, registration number, VIN)
- Vehicle condition details and photographs uploaded by you
- Bank account details, where required for payment processing
- Any additional information you voluntarily provide in messages or forms
2.2 Data Collected Automatically
When you visit our website, we automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type, language, and version
- Device type and operating system
- Pages visited, time spent on pages, and navigation paths
- Referring URLs and search terms
- Cookie identifiers and similar tracking technologies
3. Legal Bases for Processing (GDPR)
We process your personal data on the following legal grounds under Article 6 of the GDPR:
Contractual necessity (Art. 6(1)(b)): Processing your data is necessary to fulfil the contract between you and us, including evaluating and purchasing your vehicle.
Legitimate interests (Art. 6(1)(f)): We process certain data for our legitimate business interests, such as fraud prevention, improving our services, and maintaining the security of our platform.
Legal obligation (Art. 6(1)(c)): We may process data to comply with applicable legal obligations, including tax and financial reporting requirements.
Consent (Art. 6(1)(a)): Where required, we will ask for your explicit consent before processing your data for marketing communications or optional analytics. You may withdraw consent at any time.
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
- To process and respond to vehicle submission inquiries and offers
- To contact you regarding the status of your vehicle submission
- To verify vehicle information and conduct due diligence checks
- To process payments and maintain transaction records
- To prevent fraud, money laundering, and other illegal activities
- To comply with legal and regulatory obligations
- To improve and optimise our website and user experience
- To send you service-related communications
- To send marketing communications, where you have provided consent
5. Sharing and Disclosure of Personal Data
We do not sell your personal data to third parties. We may share your data with the following categories of recipients:
5.1 Service Providers
We engage trusted third-party service providers who process data on our behalf, including hosting and IT infrastructure providers, payment processors, identity verification services, and analytics providers. All such processors are bound by data processing agreements and are required to handle data in accordance with GDPR requirements.
5.2 Legal and Regulatory Authorities
We may disclose personal data to law enforcement agencies, courts, or regulatory authorities where required by applicable law, or where necessary to protect our legal rights.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice before your data becomes subject to a different privacy policy.
6. International Data Transfers
We operate across Europe and the United States. Your personal data may therefore be transferred to, stored, and processed in countries outside the European Economic Area (EEA), including the United States.
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other approved transfer mechanisms as permitted under the GDPR
You may request a copy of the safeguards in place for international transfers by contacting us.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods are determined based on the nature of the data and the purpose of processing:
- Vehicle submission and transaction data: retained for 7 years to comply with financial and tax regulations
- Account and profile data: retained for the duration of your relationship with us, plus 2 years
- Marketing data: retained until you withdraw consent or opt out
- Website usage and analytics data: retained for up to 26 months
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised.
8. Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights in relation to your personal data:
Right of access (Art. 15): You have the right to request a copy of the personal data we hold about you.
Right to rectification (Art. 16): You have the right to request correction of any inaccurate or incomplete personal data.
Right to erasure (Art. 17): You have the right to request deletion of your personal data, subject to certain legal exceptions.
Right to restriction of processing (Art. 18): You may request that we restrict the processing of your data in certain circumstances.
Right to data portability (Art. 20): You have the right to receive your data in a structured, machine-readable format.
Right to object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at info@uploadyourcar.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
9. Rights for US Residents (CCPA)
If you are a resident of California or another US state with applicable privacy laws, you may have additional rights, including:
- The right to know what personal information we collect, use, disclose, or sell
- The right to delete personal information we have collected from you
- The right to opt out of the sale or sharing of personal information
- The right to non-discrimination for exercising your privacy rights
We do not sell your personal information as defined under the CCPA. To exercise your rights, please contact us at info@uploadyourcar.com. We will verify your identity before processing any request.
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics data. We use the following categories of cookies:
- Strictly necessary cookies: required for the website to function and cannot be disabled
- Analytics cookies: help us understand how visitors interact with our website (only with your consent)
- Preference cookies: remember your settings and preferences
- Marketing cookies: used to deliver relevant advertisements (only with your consent)
You may manage your cookie preferences through our cookie consent banner or through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments, and staff training on data protection obligations.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
12. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under 18, we will take prompt steps to delete such information. If you believe we may have collected data from a minor, please contact us immediately.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by posting the updated policy on our website and updating the "Last updated" date at the top of this document.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
ED AutoMoto
Bomerstraat 77 bus B, 3990 Peer, Belgium
Email: info@uploadyourcar.com
Website: www.uploadyourcar.com