Legal

Privacy Policy

Last updated 4 August 2026

This policy explains what personal data Recaller Book collects, why, and what you can do about it. It applies to recallerbook.com.

Who is responsible

The data controller is Alan Gomes, trading as a sole trader (persona natural) established in Chile. Contact: [email protected].

What we collect

Your email address

Needed to create an account and to send you the single-use sign-in link. We do not store passwords, because we do not use any.

Vehicles you choose to watch

Make, and optionally model and year. This is what we match new recall campaigns against so we can alert you. It is vehicle data, not a person — we do not ask for registration plates, and a VIN is only used transiently for a lookup if you enter one.

Your language and email preferences

So the app and the alerts arrive in the right language, and so we honour an unsubscribe.

Search queries

Recorded as anonymous analytics events to see which vehicles people look for. Not tied to your account.

Technical logs

IP address and request metadata, kept briefly by our hosting provider for security and abuse prevention (for example, rate-limiting sign-in attempts).

Why we are allowed to use it

Where the GDPR or UK GDPR applies, our legal bases are:

• Performance of a contract — your email and subscription status, to give you the service you signed up for.
• Consent — recall alerts for vehicles you have chosen to watch, and the weekly bulletin. Withdrawable at any time.
• Legitimate interests — security logging, abuse prevention and aggregate analytics, balanced against your rights.

Who we share it with

We do not sell personal data and we do not share it for advertising. We use these processors:

• Cloudflare — hosting, database and outbound email delivery.
• Paddle — payment processing and billing support, as Merchant of Record.
• Google Analytics — aggregate usage statistics.

We may also disclose data where we are legally required to.

International transfers

We operate from Chile and our providers process data in the EU, UK and US. Where data leaves the EEA or UK, transfers rely on the providers' Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account data is kept while your account exists, and deleted within 30 days of you closing it, except where we must retain billing records for tax purposes. Technical logs are kept for a short period, typically days. Analytics data is aggregated and not linked to you.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, or export it, and you can object to or restrict certain processing. Email [email protected] and we will respond within 30 days. Most of it you can also do yourself: watched vehicles can be removed in the app, alerts can be switched off, and closing your account deletes both.

If you are in the EEA or UK you can also complain to your local data protection authority.

Cookies

We set one essential cookie to keep you signed in. It is httpOnly and expires when your session does; the site cannot function without it. Google Analytics sets its own analytics cookies. We do not use advertising or cross-site tracking cookies on this site.

Children

The Service is aimed at motor trade professionals and vehicle owners. It is not intended for children, and we do not knowingly collect their data.

Changes

If we change this policy materially we will email account holders before it takes effect.