Privacy policy.

1.Who we are

up mii go (“the site”, “we”, “us”) is an Arcscribe project, owned and run by Arcscribe Ltd, a company registered in England and Wales (company number 16921982) whose registered office is at 18 Colegate, Norwich, NR3 1BQ.

Arcscribe Ltd is the controller of the personal data described here, which means we decide how and why it’s used and we’re responsible for it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

2.What we collect

Information you give us

• Account details: your email address (we use it to send sign-in links; there are no passwords), your username, and optionally a display name, bio and profile picture.
• Your cars: make, model, year, colour, trim, nickname, the story you write, and photos.
• Registration numbers: if you add one. A registration number can identify you as the keeper of a vehicle, so we treat it as personal data. It’s private by default and only shown publicly if you switch that on.
• Private plate details: if you tell us a plate is private, optionally what you paid, where it came from, the year you got it and what it means. The price is private unless you choose to show it.
• What you post: forum threads and replies, Revs (short videos, including their audio) and captions, comments, photos, likes, tags and mentions.
• Messages to us: anything you send when you contact us, report content or make a request.

Information collected automatically

• Views: to show how many people have seen a thread or a Rev, we record one view per signed-in member (linked to your account) or, if you have accepted analytics cookies, one per browser using a random identifier in a cookie. We never show anyone who viewed what.
• Technical data: like any website, our hosting and database providers process your IP address, browser and device details, and request logs, to deliver pages, keep the service secure and fix problems.
• Membership card: when you join we issue a membership number and a card number, check code and validity dates for your digital membership card, and ask for your full name to print on it. The card details aren’t a payment card and only you can see them; your full name isn’t shown on your public profile.
• Sign-in records: when you sign in and from where (IP address), kept by our authentication provider for security.
• Analytics: only if you accept analytics cookies. We don’t run any analytics yet. If we add a tool such as Google Analytics, it will collect information about how you use the site (pages visited, approximate location, device type) and will only run with your consent.

We don’t ask for special category data (such as health or religious beliefs). Please don’t post it, and take care with photos and videos that show other people or other people’s registration numbers.

3.How we use it, and why

Data protection law requires a lawful basis for each use of your data. Ours are:

Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object (see your rights). We don’t sell your data, and we don’t make decisions about you by automated means that have legal or similarly significant effects.

4.What other people can see

up mii go is a public community. Anyone, including people who aren’t signed in and search engines, can see:

• your username, display name, profile picture, bio and when you joined;
• your cars, their photos and details (but not the registration number or plate price unless you choose to show them);
• your forum posts, Revs, comments and photos, and like and view counts.

Your email address is never shown. When you post a Rev, other members can reuse its audio as a “sound” in their own Revs, credited to you. Please think before you post: content that has been public may have been copied or cached by others before you delete it.

5.Who we share it with

We use a small number of trusted providers who process data for us under contracts that require them to protect it:

• Supabase, Inc. provides our database, sign-in and file storage. Your data is stored in its EU (Ireland) region.
• Vercel, Inc. hosts the website and delivers pages and files.
• Our email delivery provider, which sends sign-in links on our behalf.
• Google LLC, only if you accept analytics or advertising cookies and only once we start using Google Analytics.

We may also share data:

• with professional advisers (such as lawyers and accountants) where needed;
• with the police, regulators or courts where the law requires it, or where it’s needed to protect someone’s safety or our legal rights;
• with a buyer or successor if the site or Arcscribe Ltd’s business is sold or reorganised, who would be bound by this policy.

6.International transfers

Our main data stores are in the EU, which the UK recognises as providing adequate protection. Some of our providers are based in the United States and may access data from there. Where that happens we rely on the UK’s recognised safeguards: the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. Email us for more detail.

7.How long we keep it

• Your account and profile: for as long as your account is open.
• Your posts, cars, photos and Revs: until you delete them, or until we remove them under our terms. When you delete something, it’s removed from the site straight away.
• When you close your account: we delete or anonymise your personal data within 30 days. Where replies quote you, the quoted text stays but is no longer linked to your account.
• Backups: deleted data may remain in encrypted backups until they’re overwritten, normally within 30 days.
• Security and server logs: usually up to 90 days, unless needed longer to investigate a problem.
• Reports and moderation records: up to two years, so we can handle repeat abuse and appeals.
• Cookies: see the cookie policy.

8.Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you and get a copy;
• correct data that’s wrong (you can edit most of it yourself in Settings);
• erase your data, including closing your account;
• restrict or object to how we use it, including anything based on legitimate interests;
• data portability: receive the data you gave us in a machine-readable format;
• withdraw consent at any time, for example by changing your cookie settings. This doesn’t affect anything done before.

To use any of these rights, email contact@arcscribe.co.uk from the address on your account. We’ll respond within one month, and there’s normally no charge. We may need to confirm your identity first.

9.Children

You must be at least 13 to create an account. The site isn’t designed for children, and we don’t knowingly collect data from anyone under 13. If you believe a child under 13 has an account, email contact@arcscribe.co.uk and we’ll delete it.

10.Security

Data is encrypted in transit (HTTPS) and at rest. Access to the database is controlled by row-level security rules, so members can only change their own content, and private details like registration numbers and plate prices are only readable by their owner unless made public. Sign-in uses single-use email links rather than passwords. No system is perfectly secure; if we become aware of a breach that puts you at risk, we’ll tell you and the Information Commissioner’s Office where the law requires.

11.Cookies

We use essential cookies to keep you signed in and remember your choices, and we’ll only use analytics or advertising cookies if you agree. The cookie policy lists every cookie and lets you change your settings.

12.Changes to this policy

We’ll update this policy when the site or the law changes, and change the date at the top. If a change materially affects how we use your data, we’ll tell you on the site or by email before it takes effect.

13.Contact and complaints

For any privacy question or request, email contact@arcscribe.co.uk or write to Arcscribe Ltd, 18 Colegate, Norwich, NR3 1BQ.

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.