Legal
Privacy Policy
Last updated: 20 September 2026
Who is responsible for your information?
The data controller is Rhys Aeron Williams, a sole trader trading as The Number Plate Specialists, at 9 The Fieldings, Dunlop, East Ayrshire, KA3 4AU.
Privacy enquiries can be sent to thenumberplatespecialists@gmail.com or made by calling 07710 517524.
Information we collect
We may collect your name, email address, telephone number, billing and delivery address, registration number, order configuration, collection or delivery choice, communications and order history.
For road-legal orders, we also collect uploaded identity, address and registration-entitlement evidence, document types and traceable document numbers needed to complete and record legally required checks.
Stripe collects payment information. We receive transaction identifiers and payment status but do not receive or store your full payment-card number.
We may also receive limited technical and security information needed to operate, troubleshoot and protect the website and its forms.
Why we use it
| Purpose | Information | Lawful basis |
|---|---|---|
| Process and fulfil orders | Contact, order, registration, delivery, collection and transaction information | Contract |
| Complete road-legal checks and maintain supplier records | Identity, address, entitlement documents and traceable document details | Legal obligation |
| Take payment and prevent fraud | Transaction identifiers, billing details and security information | Contract and legitimate interests |
| Answer enquiries and provide customer service | Contact details and communications | Contract steps and legitimate interests |
| Protect and operate the website | Technical, security and diagnostic information | Legitimate interests |
| Keep accounting and tax records | Order, payment and customer record information | Legal obligation |
Who we share information with
We share information only where needed with service providers supporting the website and orders, including Stripe for payments, Supabase for database and private document storage, Vercel for website hosting, Resend for transactional email, and Royal Mail or another delivery provider for fulfilment. We may also disclose information to professional advisers, regulators, law enforcement or public authorities where required or permitted by law.
We do not sell personal information and do not currently use it for third-party advertising.
International processing
Some service providers may process information outside the United Kingdom. Where this happens, we rely on an applicable adequacy regulation or contractual and organisational safeguards required by data protection law.
How long we keep information
Unused document-upload sessions expire after approximately two hours and are scheduled for deletion. Uploaded files linked to an order are kept only while needed to complete verification, fulfil the order, handle a query or dispute, and meet legal obligations. They are deleted when no longer needed.
The prescribed sales record for a road-legal number plate is kept for at least three years. Accounting and tax records are kept for at least five years after the relevant 31 January Self Assessment submission deadline, or longer where required for an enquiry, dispute or other legal obligation.
Other enquiry and technical information is reviewed and removed when it is no longer reasonably needed for the purpose for which it was collected.
Security
We use access controls and technical and organisational measures designed to protect personal information. Road-legal document uploads use private storage and are not sent to Stripe. No online system can be guaranteed completely secure.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your information, object to certain processing, and receive certain information in a portable form. These rights are not absolute where information must be retained by law.
Contact us to exercise a right. You may also complain to the Information Commissioner’s Office at ico.org.uk.
Changes to this policy
We may update this policy when our services or legal obligations change. The latest version will be published here with its update date.