Privacy notice

This notice explains what personal data we collect when you use the Forecourt platform, how we use it, and the rights you have over it.

1. Who we are

Forecourt is operated by Forecourt Ltd (“we”, “us”), a company registered in England and Wales. We are the data controller of personal data collected through the Forecourt marketing site and dealer control panel. For dealer-owned storefronts hosted on the platform, the dealer is the controller of customer enquiry data and we act as processor on their instructions.

2. What we collect

• Account details (name, work email, role, dealership name).
• Billing details (via Stripe; we never hold card numbers).
• Site-usage data (pages viewed, features used, IP + user-agent for security logs).
• Anything you upload (logos, vehicle images, stock data, lead records).

3. Why we process it

To operate the service you’ve asked for, to bill you, to prevent abuse, and to improve the product. Our legal bases are contract, legitimate interest, and consent where we rely on it (e.g. marketing emails).

4. Sharing

Sub-processors we rely on: Postmark (transactional email), Twilio (SMS + WhatsApp), Stripe (payments), Cloudflare (DNS & image CDN), and our hosting provider. A full list is available on request.

5. Retention

We keep account data for as long as your subscription is active, and for 12 months after cancellation for compliance and accounting. You can request earlier erasure where lawfully applicable.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict, object to, and port your personal data. Email privacy@forecourt.app and we will respond within 30 days.

7. Cookies

See our cookies notice for the essential and optional cookies we set on the marketing site and in the admin panel.

This is a working-draft notice that covers the spirit of UK GDPR compliance but is not legal advice. Final published notice will be reviewed by counsel before general availability.