Privacy Policy

Last updated: 25 March 2026

1. Who We Are

Carslink.ai is a trading name of AutoProv Ltd. We operate carslink.ai, an AI-powered vehicle search engine for the UK market. AutoProv Ltd is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

2. Data We Collect

2.1 Information You Provide

• Account data — email address and display name.
• Search queries — the natural-language searches you submit.
• Saved listings — cars you bookmark.
• Dealer contact details — business name, email, phone when dealers register.

2.2 Automatically Collected Data

• IP address, browser type, device information.
• Pages visited, timestamps, referral URLs.
• Cookies and similar technologies.

3. How We Use Your Data

• To provide and improve our AI car search service.
• To personalise search results and recommendations.
• To communicate service updates and respond to enquiries.
• To onboard dealer partners and manage stock feeds.
• To detect fraud and ensure platform security.
• To comply with legal obligations.

4. Legal Basis for Processing

• Consent — where you opt in to marketing.
• Contractual necessity — to provide the service.
• Legitimate interests — to improve the platform.
• Legal obligation — to comply with applicable laws.

5. Data Sharing

We do not sell your personal data. We may share with infrastructure providers, AI model providers (anonymised), and law enforcement where required.

6. Data Retention

Account data retained while active. Search logs anonymised after 90 days. Dealer records retained 6 years after partnership ends.

7. Cookies

A cookie is a small text file stored on your device when you visit a website.

7.1 Essential Cookies

Strictly necessary cookies that do not require consent: authentication session cookies and the carslink_cookie_consent cookie (records your cookie preference, expires after 1 year).

7.2 Analytics Cookies (Require Consent)

We use Google Analytics (gtag.js) to understand how visitors use the site. These cookies are only loaded if you click "Accept" on the cookie banner. If you reject, no analytics cookies are set. Cookies used: _ga (2 years), _ga_* (2 years). IP addresses are anonymised.

7.3 No Advertising Cookies

We do not use advertising, remarketing, or third-party tracking cookies.

7.4 Managing Preferences

Clear your browser cookies and revisit the site to change your preference — the consent banner will reappear.

8. Your Rights

Access, rectification, erasure, restriction, portability, withdraw consent, lodge complaint with ICO (ico.org.uk).

9. International Transfers

Appropriate safeguards including Standard Contractual Clauses.

10. Security

TLS 1.3, encryption at rest, role-based access controls, regular audits.

11. Children's Privacy

Not directed at individuals under 16.

12. Changes

Material changes communicated via email or platform notice.

13. Contact

Email: privacy@carslink.ai