Privacy policy

Who we are

TVAR is operated by Buxleys LTD, a company registered in England and Wales, trading as “TVAR” (Trade Van Asset Register). Buxleys LTD is the data controller for the personal data described in this notice and is responsible for deciding how and why it is processed. We follow the UK GDPR and the Data Protection Act 2018.

TVAR holds sensitive information about your tools, vehicles and security measures. We treat it accordingly.

What we collect, why, and our legal basis

• Account data — name, email address, login credentials (passwords are stored hashed), phone number, business name and trade. Used to create and secure your account and to provide the service. Legal basis: performance of a contract.
• Evidence records — tool records, van and security records, photographs, receipts, insurance documents and theft reports you create. Used to store, organise and generate the evidence packs you ask for. Legal basis: performance of a contract.
• Support messages — what you send us when you ask for help. Used to answer you. Legal basis: performance of a contract and legitimate interests.
• Usage, device and log data — IP address, device/browser identifiers, error logs and feature usage. Used for security, fraud and abuse prevention, troubleshooting and improving the product. Legal basis: legitimate interests in running a secure, reliable service.
• Subscription status — your plan, renewal and payment state received from our payment provider. Used to grant the right level of access. Legal basis: performance of a contract.
• Marketing emails — only if you opt in. Legal basis: consent, withdrawable at any time.
• Records we must keep — e.g. tax and accounting records. Legal basis: legal obligation.

We do not sell your data and we do not use your evidence records for advertising.

Payments and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns.

When you buy a TVAR subscription, Paddle collects and processes your payment and billing information (such as name, billing address, country, tax identifiers and card or payment details) as its own controller for that transaction. We never see or store your full card details. Paddle shares with us the limited information we need to manage your subscription — customer identifier, plan, order and renewal status. See Paddle's privacy notice.

Who we share data with

• Service providers / subprocessors — hosting, database and file storage, email delivery, error monitoring and AI-assisted scanning used to read model and serial details from photographs you submit. They act on our instructions under contract.
• Merchant of Record (Paddle) — for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal, accounting and insurance advisers where necessary.
• Authorities — where required by law, or where you choose to share an evidence pack with police or your insurer (that sharing is your decision, not ours).

International transfers

Our infrastructure is hosted in the UK/EEA where possible. Some providers may process data outside the UK/EEA. Where that happens we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards.

How long we keep it

• Account and evidence records: for as long as your account is open.
• After you delete your account: your profile, tools, vans, receipts, insurance records, theft reports and uploaded files are permanently deleted immediately, with residual backup copies removed within 30 days.
• Inactive accounts: we may delete accounts after 24 months of inactivity, with notice first.
• Security and error logs: up to 12 months.
• Billing, tax and accounting records: retained by Paddle and by us for 6 years as UK law requires.

Data is deleted or anonymised once it is no longer needed for these purposes.

How your data is protected

All records are locked to your account by row-level database security. Files are stored in a private store and served only through short-lived protected links — your inventory, van storage details and security measures are never publicly accessible. Data is encrypted in transit and at rest, access is restricted to the minimum number of people needed, and passwords are checked against known-breach databases.

Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. You can export your data, delete individual documents, and permanently delete your account from the Account screen at any time.

To exercise any other right, contact Buxleys LTD through the support channel in your account. We respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use strictly necessary cookies and local storage to keep you signed in, secure the session and remember basic preferences — these are required for the app to work. Our payment provider sets cookies needed to run checkout securely. We do not use advertising cookies. You can clear or block cookies in your browser, but sign-in will stop working.

Insurance

TVAR does not determine insurance coverage or claim eligibility. Always check your policy or contact your insurer.

Changes and contact

We may update this notice; material changes will be notified in the app or by email. See also our terms of use and refund policy.