Privacy Policy

1. Who We Are

OVERTKN (“OVERTKN”, “we”, “us”, or “our”) operates the social platform available at overtkn.com. We are the data controller for personal data processed through this platform.

If you have any questions about this policy or how we handle your data, please contact us at admin@overtkn.com.

2. Data We Collect

We collect the following categories of personal data:

• Account information: Your email address, username, display name, and a hashed (non-reversible) version of your password.
• Profile data: Optional information you choose to add, such as a bio, location, profile photo, and links to social media profiles.
• Car data: Vehicle details you submit, including make, model, year, registration number, photos, videos, modification records, and build journal entries.
• Posts and comments: Content you create or publish on the platform, including text, images, and associated metadata such as timestamps and engagement counts.
• Messages: Direct messages sent between users on the platform.
• Shop listings: Details of items you list for sale, including descriptions, prices, and associated photos.
• Event RSVPs: Records of events you have indicated attendance for.
• DVSA vehicle lookup data: When you add a vehicle by registration, we query the DVSA (Driver and Vehicle Standards Agency) API. Results returned (such as make, model, colour, MOT status) are associated with your car record.
• Payment information: When you purchase a subscription or make a payment, your transaction is processed by Stripe. We receive a record of the transaction (amount, date, subscription tier) but do not store your card number, CVV, or bank account details.
• Usage data: Information about how you use the platform, including pages visited, features used, post views, and engagement metrics.

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing and operating the OVERTKN platform and all its features.
• Creating and managing your account and authenticating you when you sign in.
• Personalising your experience, including surfacing relevant cars, events, and content.
• Processing payments and managing your subscription.
• Sending you service notifications, such as replies to your posts, new messages, or RSVP confirmations.
• Sending you marketing emails where you have given consent, and where you can unsubscribe at any time.
• Analysing usage patterns to improve and develop the platform.
• Complying with our legal obligations.
• Detecting and preventing fraud, abuse, or violations of our Terms of Service.

4. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract performance (Article 6(1)(b)): Processing necessary to provide the platform services you have signed up for, including account management, car data storage, messaging, and payment processing.
• Legitimate interests (Article 6(1)(f)): Processing for platform security, fraud prevention, service improvement, analytics, and direct communications about platform changes. We have conducted legitimate interests assessments to confirm these interests are not overridden by your rights.
• Consent (Article 6(1)(a)): For optional marketing emails. You may withdraw consent at any time via the unsubscribe link in any marketing email or through your account settings.
• Legal obligation (Article 6(1)(c)): Where we are required to retain or share data to comply with law, such as financial record-keeping obligations.

5. Data Sharing and Third-Party Processors

We do not sell your personal data. We share data only with the service providers necessary to operate OVERTKN, each bound by a data processing agreement:

• Vercel: Hosting and infrastructure for the OVERTKN web application.
• Neon: Managed PostgreSQL database hosting where your account and platform data is stored.
• Cloudflare R2: Object storage used to host uploaded photos and videos.
• Resend: Transactional and notification email delivery.
• Stripe: Payment processing for subscriptions and platform transactions. Stripe operates as an independent data controller for payment data under their own privacy policy.
• DVSA (Driver and Vehicle Standards Agency): We query the DVSA API on your behalf when you add a vehicle by registration. This query discloses the registration number to the DVSA API.

We may also disclose data to law enforcement or regulatory authorities where required by law, or to enforce our Terms of Service.

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can correct inaccurate or incomplete data, including directly through your account settings.
• Right to erasure: You can request deletion of your account and personal data, subject to any legal retention requirements.
• Right to data portability: You can request a machine-readable export of data you have provided to us.
• Right to object: You can object to processing based on legitimate interests. You can always unsubscribe from marketing emails.
• Right to restriction: In certain circumstances, you can ask us to restrict processing of your data while a complaint is resolved.

To exercise any of these rights, contact us at admin@overtkn.com or use the relevant options in your account settings. We will respond within one month in accordance with UK GDPR requirements.

7. Data Retention

• Personal data associated with an active account is retained for as long as your account exists.
• When you delete your account, your personal data is purged from our systems within 30 days. Some content you posted publicly (such as comments or posts) may be anonymised rather than deleted to maintain the integrity of conversations.
• Payment and financial records are retained for 7 years as required by UK tax and financial regulations.
• Data held for legal compliance or dispute resolution purposes may be retained for the duration necessary for those purposes.

8. Cookies

OVERTKN uses only essential cookies necessary to keep you signed in. We do not use tracking, analytics, or advertising cookies. For full details, see our Cookie Policy.

9. International Data Transfers

Our service providers process data primarily within the EU and EEA. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or adequacy decisions. If you would like more information about the specific safeguards applicable to your data, please contact us.

10. Children’s Privacy

OVERTKN is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have inadvertently collected personal data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at admin@overtkn.com.

11. Your Right to Complain

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

We would, however, appreciate the opportunity to address your concern before you contact the ICO, so please reach out to us first.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account before the changes take effect. The updated policy will also be posted on this page with a revised “Last updated” date. Your continued use of the platform after the effective date of any changes constitutes your acceptance of the updated policy.