Privacy Policy

This policy describes how BimDecode (DYN SERVICES UK LTD), acting as data controller, collects and processes your personal data in accordance with the UK GDPR and the EU GDPR.

Data collected

• Account: email address and password (stored hashed, never in clear text).
• Payment: handled by our provider Stripe; we never store card details.
• Usage: the VINs you decode, purchase and credit history.
• Technical: data strictly necessary for the site to work (session cookie).

Purposes and legal bases

• Provide the decoding service and manage your account - performance of the contract.
• Process payments and invoicing - performance of the contract / legal obligation.
• Ensure security and prevent fraud - legitimate interest.
• Optional audience measurement - consent (via the cookie banner).

Recipients and processors

Your data is never sold. It may be processed by our sub-processors: Stripe (payment), Vercel (hosting), Supabase (database) and BimmerVIN / OEM Navigations (the submitted VIN is transmitted to obtain the vehicle configuration).

Retention

Account data: while the account is active, then 12 months after closure. Billing data: retained for the period required by law (typically 6 to 10 years).

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. To exercise them, write to clement@gocarz.eu. You may also lodge a complaint with your supervisory authority (in the UK, the ICO - ico.org.uk; in France, the CNIL - cnil.fr).

International transfers

Where a sub-processor processes data outside the UK or the European Union, that transfer is covered by appropriate safeguards (standard contractual clauses).