DiaCars Privacy Policy
Effective Date: 14 August 2026
This Privacy Policy explains how AVERLANE LTD (“AVERLANE LTD”, “DiaCars”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit or use DiaCars, create or use an account, order vehicle information reports or other products or services, add funds to or use DiaCars Balance, submit a refund request, contact support, or otherwise interact with us.
We process personal data in accordance with applicable UK data protection and privacy law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), in each case as amended from time to time.
1. Who We Are and How to Contact Us
DiaCars is operated by AVERLANE LTD, a company registered in England and Wales under company number 16648869.
For the processing described in this Privacy Policy, AVERLANE LTD is generally the data controller, meaning that we determine why and how relevant personal data is processed.
Company: AVERLANE LTD
Registered address: 27 Old Gloucester Street, London, United Kingdom, WC1N 3AX
Email: info@diacars.com
Phone: +371 29767933
If you have a question about this Privacy Policy, want to exercise a data protection right, or want to make a privacy complaint, please contact us using the details above.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal data processed through the DiaCars website and related DiaCars services, including user accounts, vehicle information reports, the online shop, payment and transaction functionality, DiaCars Balance, Top Ups, refunds, customer support, website analytics and marketing communications.
It does not govern the independent processing activities of third-party websites or services that you access outside DiaCars. Those organisations may provide their own privacy information.
3. Personal Data We Collect
The personal data we collect depends on how you use DiaCars. We may collect the following categories of information:
3.1 Identity, Account and Contact Data
- name, username or account identifier;
- email address, telephone number and billing or delivery address;
- account login and authentication information;
- account settings and preferences; and
- information you provide to verify your identity, account or ownership of a payment method where reasonably required for security, fraud prevention, refund processing or a payment dispute.
3.2 Order and Service Data
- products or services ordered through DiaCars;
- order numbers, purchase amounts, dates, status and delivery information;
- vehicle reports requested and report delivery information; and
- information relating to physical products, fulfilment, returns and delivery where the DiaCars shop is used.
3.3 Vehicle and VIN Data
- Vehicle Identification Numbers (VINs) submitted to request vehicle information;
- vehicle details associated with a submitted VIN; and
- vehicle information obtained from third-party databases, data aggregators, public records or other external vehicle-data sources.
A VIN or vehicle record is not always personal data. However, it may be personal data where it can directly or indirectly be linked to an identifiable individual. Where that is the case, we handle it in accordance with this Privacy Policy and applicable law.
3.4 Payment, Transaction and DiaCars Balance Data
- payment amount, currency, date and transaction status;
- Top Up amount and status;
- current DiaCars Balance and balance movements;
- purchases made using DiaCars Balance;
- transaction and payment-provider reference numbers;
- limited information about the payment method, such as payment method type, card brand, tokenised identifiers or limited card details made available by the payment provider;
- failed or reversed payments, refunds, chargebacks and other payment adjustments; and
- information needed to reconcile transactions and maintain accounting records.
DiaCars does not store full payment card numbers or card security codes (CVV/CVC) on its own systems. Full card details are processed by the payment service providers used for the relevant transaction.
3.5 Refund, Dispute and Chargeback Data
- refund requests and the reason provided for the request;
- the relevant Top Up, order, Balance or payment history;
- support correspondence and documents provided in connection with the request;
- identity or payment-method verification information where reasonably required;
- chargeback, reversal or dispute information received from payment providers, banks, card schemes or other relevant parties; and
- the decision, outcome and records associated with the refund or dispute.
3.6 Technical, Usage and Security Data
- IP address, browser type, operating system and device information;
- session information, referring URLs, pages viewed and actions taken on the Website;
- login events, timestamps and technical logs;
- security events, suspicious activity indicators and fraud-prevention signals; and
- cookie identifiers and similar online identifiers where applicable.
3.7 Communications and Support Data
- emails, messages and other communications with DiaCars;
- customer-support requests and complaint records; and
- feedback or other information you choose to provide to us.
3.8 Marketing and Preference Data
- marketing preferences and consent records;
- unsubscribe or opt-out status; and
- information about engagement with marketing communications where such tracking is used lawfully and, where required, with consent.
4. How We Collect Personal Data
We may collect personal data in the following ways:
- Directly from you, for example when you create an account, submit a VIN, place an order, make a Top Up, submit a refund request, complete a form or contact us.
- Automatically, when you use the Website, through server logs, cookies and similar technologies.
- From payment and financial service providers, for example transaction status, limited payment-method information, refunds, reversals, chargebacks and fraud-related information.
- From vehicle-data providers and public or commercial data sources used to prepare vehicle information reports.
- From delivery, fulfilment or logistics providers where physical products are ordered.
- From security, anti-fraud, analytics, hosting or other service providers where they provide information needed for the relevant service.
5. How and Why We Use Personal Data
Under UK data protection law, we must have a lawful basis for processing personal data. The lawful basis depends on the purpose and circumstances of the processing. The main purposes and lawful bases we expect to rely on are summarised below.
Purpose | What this includes | Main lawful basis |
Create and manage your account | Registering users, authentication, account administration and maintaining account settings. | Contract; legitimate interests |
Provide DiaCars services | Processing orders, generating and delivering vehicle reports, providing digital services and fulfilling shop purchases. | Contract |
Process payments, Top Ups and DiaCars Balance | Taking payment, crediting or adjusting Balance, recording purchases, reconciliation and transaction administration. | Contract; legitimate interests |
Handle refunds, reversals and disputes | Reviewing refund requests, verifying relevant transactions, processing eligible refunds, responding to chargebacks and resolving payment disputes. | Contract; legitimate interests; legal obligation where applicable |
Prevent fraud and protect security | Detecting suspicious activity, preventing unauthorised payments, protecting accounts and systems, investigating abuse and enforcing relevant terms. | Legitimate interests; legal obligation where applicable |
Customer support and complaints | Responding to questions, service issues, complaints and requests concerning orders, reports, Balance or payments. | Contract; legitimate interests |
Legal, tax and accounting compliance | Maintaining transaction and business records, responding to lawful requests and meeting statutory or regulatory requirements. | Legal obligation; legitimate interests |
Operate and improve the Website | Troubleshooting, service monitoring, performance analysis, product improvement and security. | Legitimate interests; consent where required for non-essential cookies or similar technologies |
Marketing communications | Sending promotional messages and recording marketing preferences. | Consent |
Establish, exercise or defend legal claims | Protecting our rights, recovering debts, responding to claims and maintaining evidence relating to disputes. | Legitimate interests; legal claims |
Corporate transactions | Due diligence and administration relating to a merger, acquisition, financing, restructuring or sale of all or part of the business. | Legitimate interests; legal obligation where applicable |
Where we rely on legitimate interests, those interests include operating and securing DiaCars, preventing fraud and misuse, managing payment risk and disputes, improving our services, maintaining appropriate business records and protecting our legal rights. We consider whether those interests are proportionate and whether your rights and interests override them.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Payments, Top Ups and DiaCars Balance
Payment card and other external payment transactions are processed through third-party payment service providers. Those providers may collect payment information directly from you and may process it under their own privacy notices and legal obligations.
DiaCars receives and maintains the transaction information reasonably necessary to operate payment and Balance functionality, including payment status, transaction references, Top Up amounts, balance movements, purchases, refunds and reversals.
DiaCars Balance is linked to the relevant DiaCars account. We process Balance records so that we can show your available balance, credit successful Top Ups, deduct purchases, process authorised adjustments and maintain an accurate transaction history.
7. Refund Requests, Chargebacks and Fraud Prevention
DiaCars Balance does not include an automatic cash-out or withdrawal function. Where you request the return of unused paid Balance, you must submit a refund request. We process the information necessary to identify the relevant account and transaction, assess the request, prevent fraud and, where approved or legally required, process the refund in accordance with our Terms and applicable payment rules.
We may compare account activity, payment history, device or network information, previous refund or dispute activity, and information received from payment providers where reasonably necessary to detect or investigate fraud, unauthorised payments, chargebacks, payment abuse or other misuse of the Services.
Payment providers and fraud-prevention systems may use automated tools or risk indicators to flag or block suspicious transactions. Where applicable law gives you specific rights in relation to a decision based solely on automated processing that produces legal or similarly significant effects, we will provide the information and safeguards required by law.
8. Sharing Personal Data
We do not sell or rent your personal data. We may share personal data where reasonably necessary with the following categories of recipients:
- Payment service providers, acquiring banks, card schemes and financial institutions, to process payments, Top Ups, refunds, reversals, disputes and chargebacks.
- Vehicle-data providers, databases and data aggregators, to obtain vehicle information and generate reports.
- IT, hosting, cloud, communications and cybersecurity providers, to operate and protect the Website and our systems.
- Analytics, cookie and similar technology providers, where their services are used and the required consent or other legal basis applies.
- Delivery, logistics, fulfilment and product suppliers, where necessary to fulfil an order for physical goods.
- Professional advisers, including lawyers, accountants, auditors and insurers, where reasonably necessary for professional services, compliance or legal claims.
- Law enforcement, courts, regulators, tax authorities and other public authorities, where disclosure is required by law or reasonably necessary to protect legal rights or investigate unlawful activity.
- Potential purchasers, investors, lenders or advisers in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.
A recipient may act as our processor, as an independent controller, or in some circumstances as a joint controller, depending on the service and the purposes for which it processes the personal data. Where a service provider processes personal data on our behalf, we require appropriate contractual and security protections as required by law.
9. International Data Transfers
Some of our service providers or their infrastructure may be located outside the United Kingdom. This means personal data may be transferred to or accessed from countries outside the UK.
Where a transfer is a restricted transfer under UK data protection law, we use an applicable lawful transfer mechanism. Depending on the circumstances, this may include UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another safeguard or exception permitted by law.
You may contact us at info@diacars.com if you would like more information about the safeguards relevant to a particular transfer, subject to any confidentiality or legal restrictions.
10. Cookies and Similar Technologies
DiaCars may use cookies and similar storage or access technologies to operate the Website, keep sessions secure, remember settings, understand website usage, improve performance and, where used, support analytics or marketing.
Strictly necessary technologies may be used where they are required to provide a service you request or to operate essential security or checkout functionality. Where consent is required for non-essential cookies or similar technologies, we will ask for your consent before using them and provide controls to manage your choices.
You can also control cookies through your browser settings. Blocking strictly necessary technologies may prevent parts of DiaCars from functioning correctly. More detailed information about the specific technologies in use may be provided through our cookie banner, preference centre or a separate Cookie Policy.
11. Marketing Communications
We send promotional email marketing to individual users where they have actively opted in to receive it. We do not treat silence, inactivity or a pre-ticked box as consent.
You may opt out of marketing at any time by using the unsubscribe mechanism in a marketing message or by contacting info@diacars.com. Opting out of marketing does not stop service messages that are necessary for your account, purchases, payments, refunds, security or other non-marketing purposes.
12. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, maintaining security, handling disputes, complying with legal and accounting obligations and establishing or defending legal claims.
Category | Typical retention approach |
Transaction, order, Top Up, Balance and accounting records | Normally retained for up to 6 years from the end of the relevant company financial year, or longer where required by tax, accounting, regulatory or legal requirements. |
Refund, chargeback and dispute records | Kept for the period needed to resolve the matter and thereafter for an appropriate period to maintain accounting records, prevent repeat abuse and establish or defend legal claims. |
Account and contact data | Kept while the account is active and for an appropriate period after closure where necessary for transaction history, fraud prevention, legal obligations or claims. Data that is no longer needed is deleted or anonymised. |
Security and fraud-prevention data | Kept for a proportionate period based on the nature of the security risk, investigation, dispute or legal requirement. |
Support communications | Kept for as long as reasonably necessary to resolve the issue and maintain appropriate service, complaint or legal records. |
Marketing preferences and consent records | Kept while relevant to your marketing status and for an appropriate period afterwards to demonstrate and respect your consent or opt-out preferences. |
Cookie and analytics data | Retained according to the lifespan and purpose of the relevant technology or service, as described in the cookie controls or related notice. |
Retention periods may be extended where necessary because of an ongoing investigation, legal claim, regulatory request, litigation hold or another lawful reason. Closing an account or exercising a deletion right does not necessarily require us to delete transaction or other records that we are legally permitted or required to retain.
13. Data Security
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include encryption in transit, access controls, authentication measures, monitoring, logging, supplier controls and other security practices appropriate to the nature of the processing.
No online service or method of electronic storage can be guaranteed to be completely secure. If we become aware of a personal data breach, we will assess and handle it in accordance with applicable legal requirements, including notification to affected individuals or regulators where required.
14. Your Data Protection Rights
Depending on the circumstances and the lawful basis for processing, you may have the following rights under UK data protection law:
- Right of access – to request information about the personal data we hold about you and obtain a copy where applicable.
- Right to rectification – to ask us to correct inaccurate or incomplete personal data.
- Right to erasure – to ask us to delete personal data in circumstances where the law gives you that right.
- Right to restriction – to ask us to restrict the use of personal data in certain circumstances.
- Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.
- Right to object – to object to certain processing based on legitimate interests and to object to direct marketing at any time.
- Rights relating to automated decision-making – where applicable, to the protections provided by law for certain decisions based solely on automated processing.
- Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time.
These rights are not absolute and may not apply in every circumstance. For example, we may need to retain transaction records to comply with legal obligations or establish, exercise or defend legal claims even after an account is closed.
To exercise a right, contact info@diacars.com. We may ask for information reasonably necessary to verify your identity or authority to act for another person. We normally respond without undue delay and within one month, subject to any lawful extension or other rule that applies in the circumstances.
IMPORTANT – YOUR RIGHT TO OBJECT You have an absolute right to object to the use of your personal data for direct marketing. You may also object to processing based on our legitimate interests in certain circumstances. To object, contact info@diacars.com. |
15. Privacy Complaints and the ICO
If you are concerned about how we use your personal data, please contact us first so that we have an opportunity to investigate and respond.
You also have the right to make a complaint to the UK Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. Information about making a complaint is available at ico.org.uk.
Making a complaint to DiaCars does not prevent you from contacting the ICO or exercising any other right available to you.
16. Children
DiaCars is not intended for use by children. Our Terms require users to be at least 18 years old, or otherwise to have full legal capacity to enter into a binding contract under applicable law. We do not knowingly seek to collect personal data from children through account registration or payment functionality.
17. Third-Party Links and Services
DiaCars may contain links to websites, applications or services operated by third parties. We do not control the privacy practices of independent third parties. If you follow an external link or use a separate third-party service, you should review the privacy information provided by that organisation.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to DiaCars, our data-processing practices, legal requirements, service providers or regulatory guidance. The current version will be published on the Website with its effective date.
Where a change is material and it is appropriate or required to notify you directly, we may provide notice through the Website, your account, email or another suitable method.
19. Cookies and Similar Technologies
DiaCars uses cookies and similar technologies that are necessary for the operation, security and functionality of the Website. These technologies may be used to maintain user sessions, authenticate accounts, support checkout and payment functionality, prevent fraud and technical errors, and remember essential user selections.
We do not currently use cookies or similar technologies for personalised advertising or behavioural tracking.
Strictly necessary cookies may be used without your consent where permitted by applicable law because they are required to provide services or functionality requested by you.
You can control or delete cookies through your browser settings. Please note that blocking strictly necessary cookies may prevent certain features of the Website, including account, checkout or payment functionality, from working correctly.
If we introduce non-essential cookies or similar technologies in the future that require consent, including advertising or behavioural tracking technologies, we will update this Privacy Policy and implement appropriate consent controls before using them.
20. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or want to raise a privacy concern, contact:
AVERLANE LTD
27 Old Gloucester Street
London, United Kingdom
WC1N 3AX
Email: info@diacars.com
Phone: +371 29767933