VIN Story (“we”, “us”) provides on-demand vehicle history reports at vinstory.co. We collect only what we need to deliver the report you paid for and nothing else.
What we collect
- Vehicle Identification Number (VIN)— the 17-character identifier you submit so we can look up the vehicle’s history.
- Email address — required to send you the report and order updates.
- Payment confirmation — we never see or store your card details. We only receive a confirmation that payment succeeded.
- Approximate location — used solely to show prices in your local currency.
- Anonymous usage analytics— only if you accept analytics cookies. See “Cookies and analytics” below for the full detail.
We do not collect names, postal addresses, phone numbers, dates of birth, or any optional profile data. We do not run advertising trackers, we do not build user profiles, and we do not set marketing cookies.
Why we use it
- To run the VIN lookup and prepare your report.
- To deliver the resulting report to your email.
- To let you check the status of your order via a private link.
- To process your payment and issue refunds where applicable.
- To meet legal obligations such as keeping basic accounting records of paid transactions.
We do not use your data for advertising, profiling, or sale to third parties.
Who we share it with
We share the minimum data necessary with trusted service providers that help us run VIN Story. Each one is contractually bound to use that data only on our behalf:
- A payment provider, to process your purchase.
- An email delivery provider, to send your report and updates.
- An analytics provider (Google Analytics 4), only if you accept analytics cookies, to give us aggregate, non-identifying usage statistics. IP addresses are anonymised before storage and we have disabled all advertising features.
We do not transfer your data to anyone else, and we do not sell or rent it under any circumstances.
How long we keep it
We keep your order details only as long as we need them — long enough to deliver your report, support any follow-up questions, and meet legal record-keeping obligations. Abandoned checkouts are removed shortly after they expire.
The report file itself is retained alongside your order so you can re-download it from your private order link if you misplace the original email. If you’d prefer it removed sooner, write to support@vinstory.co and we’ll delete it on request.
Your rights
You can ask us at any time to confirm what data we hold about you, correct it, or delete it (subject to legal retention obligations). To exercise any of these rights, email support@vinstory.co from the address you used to place the order. We’ll respond within 30 days.
If you believe we’ve handled your data improperly, you also have the right to lodge a complaint with your local data protection authority.
Security
We take reasonable steps to keep your data safe in transit and at rest. Payment processing is handled directly by an established third-party provider so your card details never reach our systems.
Cookies and analytics
We split cookies into two clearly separated buckets and ask for your consent before any non-essential cookie is set.
- Strictly necessary — used to run the checkout session, remember your cookie preference, and keep the site functional. These do not require consent under EU/UK law and you cannot disable them without breaking the site.
- Analytics (optional, off by default)— Google Analytics 4. Only loaded after you tap “Accept” on the cookie banner. We have IP anonymisation enabled, all Google advertising features disabled, and we use Google Consent Mode v2 so that nothing is sent until you opt in.
We do not set advertising, marketing, retargeting or social-media cookies under any circumstances.
You can change your mind at any time. Click “Cookie settings” in the page footer to accept or withdraw your consent. Withdrawing consent stops further data collection immediately.
Changes to this policy
If we update this policy materially we’ll change the effective date above and, where the change affects you, notify you by email before it takes effect.