This policy explains what personal data we collect when you use Buildsheet Pro, how we use it, and the rights you have over it. We keep data collection to the minimum needed to deliver your report.
Ascend Brands Ltd, trading as Buildsheet Pro, is the data controller for personal data processed through this site. We are registered in England and Wales under company number 15478064, with registered office at Martland Mill, Mart Lane, Burscough, Lancashire, England, L40 0SD. You can reach us at support@buildsheetpro.co.uk.
Order and report data — your email address, the registration number or VIN you submit, vehicle and report data returned for that lookup, order status and report history.
Payment data — Paddle handles checkout and payment as Merchant of Record. We receive transaction identifiers, payment status, currency, amount and other order information needed to fulfil and support your purchase. We do not receive or store your card number or other full payment credentials.
Account data — if you create an optional passwordless account, we use your email address and authentication events. Authentication is provided by Supabase; Buildsheet Pro does not store an account password.
Technical and consent data — security and service logs such as IP address, browser type and request time, plus your privacy choices. Analytics data is collected only where you consent.
We use personal data to confirm vehicle coverage, produce and deliver reports, operate optional accounts, support orders, prevent abuse, maintain the service, understand site use where you consent, and meet legal obligations such as tax and accounting records. We do not sell personal data or send marketing email unless you opt in.
We process order, report and account data where needed to perform our contract with you; security, support and limited operational data under our legitimate interests in running a safe and reliable service; records where required by law; and analytics or marketing only with consent, which you can withdraw at any time.
Paddle acts as Merchant of Record and an independent controller for checkout, payment, tax, invoicing and buyer support. We also use One Auto API and auto.dev for vehicle data; Supabase for database, storage and passwordless authentication; Resend for email delivery; Inngest for report-processing workflows; Vercel for hosting; and consented analytics providers. These providers receive only the data needed for their role. Where a provider processes data on our behalf, it does so under contractual safeguards. A registration number, VIN or other data may be processed outside the UK; where required, appropriate international-transfer safeguards apply.
Order and delivered-report records are retained for up to 6 years to meet tax, accounting, support and legal obligations. Lookup data for vehicles confirmed as unsupported is deleted within 30 days. Optional account data is kept until you delete the account or it is no longer needed. Security, workflow, email and hosting logs follow the relevant provider’s documented retention schedule and are kept no longer than needed for their purpose.
Under UK GDPR you can ask for access to, correction or deletion of your personal data; object to or restrict processing; and request portability where applicable. Email us and we will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
See our Cookie Policy for details of the cookies we use and how to manage them.