Privacy & Cookies Policy

Organisation & Data Controller

Matt's Motor Club (“MMC”, “we”, “us”, “our”), based in London, W1W 7LT, United Kingdom, operates as the data controller for personal information collected through our website and member portal. We are registered in England.

Policy Scope

This policy covers MMC's products and services including the website at www.mattsmotorclub.com, the member portal, email alerts, marketing communications, and social media channels. It does not apply to third-party companies outside our control.

Age requirement: Users must be at least 18 years old. We do not knowingly collect information from minors.

When We Collect Personal Information

We collect personal information when you:

• Visit and use our website or member portal
• Register for an account or complete onboarding
• Subscribe to or purchase any membership or add-on
• Save, watch, or interact with vehicles in your portal
• Update your preferences, region, or budget band
• Send us email communications or use live chat
• Contribute reviews, testimonials, or referrals
• Enter promotions or incentive programmes

Categories of Personal Information Collected

Account & profile information

• Name, email address, and display name
• Region, budget band, and vehicle preferences (body type, fuel type, manufacturers)
• Purchase window and buying timeline
• Membership tier, premium status, and subscription history

Portal activity

• Saved vehicles, watched vehicles, and vehicle views
• Sold vehicle reports submitted by members
• Preference changes and change history
• Custom vehicle pack briefs (Hunter members)

Payment information

• Payment transactions are processed by Stripe. We store your Stripe customer ID and subscription ID but never see or store your card details.

Technical data

• IP address, browser type, operating system
• Pages visited, clickstream data, and page interaction information
• Device type and screen resolution

How We Use Your Information

Contract fulfilment

Processing necessary to provide the service, manage your account, process payments, deliver vehicle alerts, and fulfil our contractual obligations to you as a member.

Consent

• Marketing communications (email, SMS, WhatsApp, push notifications)
• Targeted advertising on third-party platforms

You can opt out of marketing communications at any time via unsubscribe links in emails or by contacting us. Push notifications can be disabled via your device settings.

Legitimate interests

• Providing information about products and services we believe are relevant to you
• Measuring advertising effectiveness
• Service notifications (e.g. subscription expiry, Look Back window closing)
• Portal administration, troubleshooting, and security
• Analytics and research to improve the service
• Fraud prevention and detecting misuse (including trade/commercial use)

Legal obligation

Where required by law, regulation, or legal process, or to protect our rights and the safety of our members.

Third-Party Service Providers

We use the following categories of third-party providers to operate our service:

• Cloud infrastructure & authentication: We use third-party cloud database and authentication services to securely store your account data, preferences, and portal activity.
• Payment processing: Stripe processes all payments. Stripe supports credit/debit cards, Apple Pay, and Google Pay. Stripe's own privacy policy governs their handling of your payment data.
• Marketing automation & communications: We use a third-party marketing platform to send emails, SMS, and WhatsApp messages, manage referral programmes, and automate member communications.
• Analytics: We use Fathom Analytics for privacy-focused website analytics, and may use additional analytics services (such as Google Analytics or Facebook Pixel) for measuring advertising effectiveness.
• Advertising platforms: We may share aggregate, non-identifiable data with advertising platforms (such as Facebook, Google, Instagram) for targeted advertising to reach potential members.

We do not rent or sell your personal data.

Data Sharing & Disclosure

We may share personal information in the following circumstances:

• With payment processors (Stripe) for transaction processing and security
• With communications platforms for delivering alerts, notifications, and marketing
• With analytics partners using aggregate, non-identifiable data
• Member testimonials and reviews displayed publicly (with your consent)
• With law enforcement and regulatory authorities where required by law, for fraud prevention, debt collection, rights protection, or safety
• During any corporate reorganisation (merger, acquisition, asset sale) with prior notice to affected members

Cookies & Tracking Technologies

We use cookies and similar technologies to distinguish users, personalise your experience, and improve the service.

Types of cookies we use

• Strictly necessary: Required for security, authentication, payments, and core portal functionality. Cannot be disabled.
• Analytical/performance: Help us understand how visitors use the site so we can improve it. We use Fathom Analytics which is privacy-focused and does not use personal data.
• Functionality: Remember your preferences and personalisation choices.
• Targeting: Used by advertising platforms to deliver relevant ads. You can opt out of targeted advertising through your browser settings or industry opt-out tools.

How to manage cookies

Most browsers allow you to refuse all or some cookies via settings. Blocking all cookies (including essential ones) may prevent you from accessing parts of the site. You can also opt out of targeted advertising through industry mechanisms.

Security

We employ industry-standard technical and organisational security measures to protect your data. All payment transmissions use SSL encryption via Stripe. Portal authentication uses secure magic link email verification — no passwords are stored.

However, no internet transmission is completely secure. You transmit data at your own risk. You should keep your email account secure as it is used for authentication.

Third-Party Links

Our service contains links to third-party websites, including dealer listings and external services. These sites have their own privacy policies. MMC is not responsible for the privacy practices of third-party websites.

Data Transfers Outside the UK

Your personal data may be transferred to and stored in countries outside the United Kingdom or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent protections, to ensure your data receives an adequate level of protection.

By using our service, you consent to this transfer, storage, and processing.

Data Retention

• Active accounts: We retain your data for as long as your account is active and as needed to provide the service.
• Marketing data: Retained until you request cessation, plus a short period for implementation.
• Account deletion: When you delete your account, we remove your profile data, preferences, saved vehicles, and watch history. We aim to complete deletion within 10 business days. Some data may be retained in backup archives for a limited period.
• Cancelled subscriptions: Your account reverts to free membership. Data is retained to allow you to continue using the free service or re-subscribe later.

When no legitimate business need exists for retaining your data, it is deleted, anonymised, or securely isolated from further processing.

Your Data Protection Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

1. Be informed about how your personal data is used (this policy)
2. Access and receive copies of your personal data
3. Rectification — request correction of inaccurate data
4. Erasure — request deletion where no lawful ground for processing exists
5. Restrict processing of your data in certain circumstances
6. Data portability — receive your data in a structured, machine-readable format
7. Object to processing based on legitimate interests
8. Withdraw consent at any time for consent-based processing

To exercise any of these rights, contact us at admin@mattsmotorclub.com. We may require proof of identity. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Marketing Opt-Out

You can opt out of marketing communications at any time by:

• Clicking “unsubscribe” in any marketing email
• Adjusting notification preferences in your portal
• Contacting us at admin@mattsmotorclub.com

Opting out of marketing does not affect essential service communications (e.g. subscription confirmations, security alerts).

Changes to This Policy

We may update this policy from time to time. Updates take effect immediately upon posting to the website. The “Last updated” date at the top of this page reflects the most recent revision.

For material changes, we will notify you by email to your primary account address or by prominent notice on the website. Continued use of the service after changes constitutes acceptance.

Contact Us

For questions about this policy, requests about your personal data, or to exercise your data protection rights:

Email: admin@mattsmotorclub.com

Data Controller: Matt's Motor Club, London, W1W 7LT, United Kingdom