Data Deletion Request

Your Right to Erasure (GDPR Art. 17)

Under UK GDPR, you have the right to request deletion of your personal data held by AllCarsUK. You can do this in two ways:

What Gets Deleted

When your account is deleted, we remove or anonymise the following:

• Your name, email address, phone number, and profile photo
• Your car listings (soft-deleted and removed from public view)
• Your messages (soft-deleted)
• Your saved favourites and search alerts
• Your login tokens and session data
• Your push notification subscriptions

What We Retain

Some data may be retained where we have a legal basis:

• Reviews — anonymised (name replaced with "Deleted User") to maintain platform integrity
• Transaction records — retained by Stripe for legal/tax compliance (we do not store payment data locally)
• Auth event logs — retained for up to 90 days for security audit purposes, then purged

Facebook Login Users

If you signed in via Facebook, you can also remove AllCarsUK's access to your Facebook data from your Facebook settings:

1. Go to Facebook → Settings → Security and Login → Apps and Websites
2. Find AllCarsUK and click Remove

Removing the Facebook app triggers our automated data deletion process. You will receive a confirmation code within seconds.

Timeline

• Account deletion via settings: Immediate
• Email deletion requests: Within 30 days
• Backup purge: Within 90 days

Contact

For data deletion requests or questions, contact our Data Controller:

AllCarsUK
Leicester, Leicestershire, LE4 2AT, UK
allcarsmarketuk@gmail.com