Privacy notice
This notice describes how the current CarMia service handles personal information across buyer, dealer and support journeys.
Beta legal notice — public launch gate is not complete
The operator has not supplied all legally required identity and contact details. This page is a transparent draft, not a claim of regulatory approval. Missing: legal operator name, company number, registered office, registration jurisdiction, public contact email.
Who controls your information
The data controller is not yet identified by the operator. No regulatory registration or approval is claimed unless it is expressly stated here.
Information the service handles
- Account and contact details used for sign-in, messages, dealer accounts and support.
- Saved cars, searches, alerts, garage entries and marketplace messages.
- Dealer listing, feed, subscription and billing-status records.
- Search text, a postcode you choose to provide, and voice audio/transcripts when voice search is used.
- Technical, security, anti-fraud and audit data such as request identifiers, IP-derived abuse signals and timestamps.
Purposes and lawful bases
The service uses information to provide requested marketplace features and accounts, operate dealer subscriptions, secure the service, prevent fraud, answer support requests and meet legal obligations. Optional analytics remains off by default and requires documented operator approval plus your explicit preference on the Cookies page. Advertising and marketing storage remains off.
Voice search and automated assistance
When you use voice search, the web service receives audio and relays it to the configured speech-to-text service. Search text or the resulting transcript may then be processed by the search-intent service. Automated search interpretation helps apply filters; it does not make a legal or credit decision about you.
Sharing and international transfers
Information may be handled by hosting, database, media-storage, email, speech-to-text, payments and security suppliers, and shared with a dealer when you choose to contact them. The final supplier names, controller/processor roles, locations and transfer safeguards are maintained by the operator.
Retention and security
The service uses access controls, audit records and security monitoring. Retention periods must remain justified for accounts, messages, voice data, listings, checks, billing, security logs and backups. Information must not be retained merely because storage is available.
If the optional privacy-minimal product counter is approved and enabled, it stores only fixed aggregate consented browser-interaction event names, coarse result-count buckets and dates for up to 90 days. It has no field for raw search or voice text, URLs, IP addresses, or account, session, dealer, listing or device identifiers.
Your rights and complaints
Depending on the circumstances, UK data protection law gives you rights to be informed, access, correct, erase or restrict information, object, receive portable data, and challenge certain solely automated decisions. Contact the operator (contact not yet supplied). You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Operator details
- Legal operator
- Not supplied — public launch blocked
- Company number
- Not supplied — public launch blocked
- Registered office
- Not supplied — public launch blocked
- Registered in
- Not supplied — public launch blocked
- Contact
- Not supplied — public launch blocked

