Last updated: 26 September 2026
This notice explains what we do with your personal information when you use this website, buy from us here or on eBay, or contact us.
1. Who is responsible for your information
The data controller is Antonio Jacquaye, trading as AutoScan Software.
83 Lynton Mead, London N20 8DH, United KingdomEmail: info@autoscansoftware.com
We have not appointed a Data Protection Officer, and we are not required to.
2. What we collect
- Website orders: your name, email address, billing address, what you bought and when, the licence key we issued, and a payment reference. We also record that you ticked the consent box at checkout, and when.
- eBay orders: eBay gives us your name, eBay user name, delivery address, phone number and order details.
- Customer accounts: if you create an account, your login details and order history.
- Emails and support: your messages to us, our replies, and any screenshots you send.
- Mailing list: if you ask for the download links or news by email, your email address and when you signed up.
- Website use: your IP address, browser and device type, and the pages you visit. See section 7 on cookies.
We never see or store your full card number. Card details go straight to Stripe or PayPal.
AutoScan reads data from your vehicle. It does not send that data to us.
3. Why we use it, and our lawful basis
- Taking your order, sending your key and supporting you: our contract with you.
- Keeping a record of your key, so we can re-send it: our legitimate interest in supporting customers and preventing fraud.
- Keeping your checkout consent record, and accounts and tax records: legal obligations.
- Handling refunds, complaints and disputes: our contract, legal obligations, and our legitimate interest in defending claims.
- Blocking spam on our forms: our legitimate interest in keeping the site secure.
- Our emails, and analytics and advertising cookies: your consent. Every email has an unsubscribe link.
Where we rely on legitimate interests, you can object (section 8).
4. Who we share it with
We do not sell your information, and we do not share it for anyone else’s marketing. We use these services to run the business:
- Hostinger: hosts our website, our WooCommerce shop and order records, our business email, and the server that runs our order tools.
- Stripe and PayPal: take card and PayPal payments. They also act as independent controllers for fraud checks and financial regulation, under their own privacy notices.
- eBay: if you buy on eBay, eBay is an independent controller of your information under its own privacy notice. We send your key through eBay’s messages.
- Titan (the email service included with our Hostinger hosting): runs our support mailbox (support@autoscansoftware.com).
- Google: Gmail handles our order notifications and some correspondence. Google Drive stores our download files, so Google sees your IP address when you download. Google Analytics and Google Ads are used only if you accept those cookies.
- Mailchimp (Intuit): sends our emails to people who have signed up. Our shop’s Mailchimp connection also passes customer and order details to Mailchimp, so we can send order-related emails; marketing emails go only to people who have agreed to receive them.
- CleanTalk: checks messages sent through our forms for spam. It sees your email address and IP address.
- Link services: the short links in our delivery messages record when they are opened, with your IP address and browser type. We use this to confirm delivery.
- Telegram: we use a private Telegram group to alert us to new orders. Alerts can include your name, order details and, for eBay orders, your phone number.
- FreeAgent: our accounting software. It receives payment records.
- Our accountant, HMRC, professional advisers, and the police or regulators: only where the law requires it, or to establish or defend a legal claim.
5. Information held outside the UK
Some of these services store data in the European Economic Area or the United States. Where they do, we rely on UK adequacy regulations (including the UK–US data bridge for certified US companies) or on the ICO’s approved contract terms.
6. How long we keep it
- Orders, payments and accounts records: 6 years after the end of the tax year they relate to.
- Checkout consent records: 6 years after the order.
- Licence key records (your name, email or eBay user name, edition and key): for as long as we support your edition, so we can re-send a lost key. You can ask us to delete this sooner, but we will then be unable to re-send your key.
- eBay delivery address and phone number: 12 months after the order, unless we need them for a dispute.
- Support emails: 3 years after our last contact.
- Customer accounts: until you ask us to close your account. Order records are then kept as above.
- Mailing list: until you unsubscribe. We then keep your email address on a “do not contact” list, so we do not email you again.
- Analytics data: up to 14 months.
After that, we delete the information or anonymise it.
7. Cookies
Some cookies are needed for the site to work, such as your basket, checkout and login. We set these without asking.
We only set analytics cookies (Google Analytics) and advertising cookies (Google Ads) if you agree in our cookie banner. If you say no, Google’s tags may still send limited data without cookies, such as the fact that a page was viewed. You can change your choice at any time using the cookie settings link at the bottom of every page.
8. Your rights
Under the UK GDPR and the Data Protection Act 2018 you have the right to:
- get a copy of the information we hold about you;
- have wrong information corrected;
- have information deleted, where we have no legal reason to keep it;
- ask us to limit how we use it;
- receive information you gave us in a portable format;
- object to our use of it based on legitimate interests, and to direct marketing at any time;
- withdraw your consent at any time. This does not affect anything we did before.
We do not make decisions about you by automated means alone. Stripe and PayPal may run automated fraud checks.
To use any of these rights, email info@autoscansoftware.com. It is free. We will reply within one month. We may ask you to prove who you are first.
9. Complaining to us
You have a legal right to complain to us directly about how we handle your personal information. Email info@autoscansoftware.com with “Data protection complaint” in the subject line, or write to us at the address above. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
10. Complaining to the ICO
If you are not happy with our answer, you can complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
11. Keeping it safe
Our website uses encrypted connections (HTTPS). We never hold your card details. If a breach puts your rights at risk, we will tell you and the ICO as the law requires.
12. Children
Our shop is not meant for anyone under 18, and we do not knowingly collect children’s information. If you think we have, tell us and we will delete it.
13. Changes to this notice
We will update this notice when what we do changes. The date at the top shows the latest version.
Visitor analytics (AutoScan Pulse)
We use AutoScan Pulse, our own visitor analytics tool running on our own server, to understand which pages people use and where the website is difficult to use. It records page visits, clicks, scrolling, device size, errors and a visual replay of page changes. Form values and keystrokes are not recorded, all input fields are masked, and checkout, account and order text is masked; payment frames are blocked completely. A random session identifier is kept only in your browser’s session storage (no cookies), we do not keep your IP address, and the information is not shared with anyone else or used for advertising. Records are deleted after 30 days. Pulse does not run when Global Privacy Control or Do Not Track is switched on in your browser.
You can turn it off on this browser at any time, free of charge: Turn off visitor analytics on this browser