The plain-English version: when you use campervans.co.uk we collect the bare minimum needed to run the site — your email, listing details, and a few technical bits. We use it to keep the platform working, not to track you around the web. You can ask for a copy of everything we hold, or have it deleted, at any time.
1. Who we are
Moonbolt Ltd is the data controller for the personal data we collect through the site.
- Company number: 14938583 (England & Wales)
- Data Protection Officer: contact@campervans.co.uk
2. The data we collect
We only ask for data we genuinely need to run the service.
| Category | Examples |
|---|---|
| Account data | Name, email, hashed password, phone number (if you provide one), postcode area. |
| Listing data | Photos, vehicle description, price, location and any extras you add to your advert. |
| Messages | Enquiries you send or receive through our messaging tool. |
| Payment metadata | Transaction reference, amount and date for premium upgrades. Card details are handled by our payment provider, not by us. |
| Technical data | IP address, browser type, device type, referring URL and pages viewed. |
| Verification data (dealers) | Companies House number, VAT number, trading address. |
3. Why we use it
- To create and operate your account, and to publish the adverts you place;
- To allow buyers and sellers to contact each other safely through our messaging tool;
- To take payment for premium ads and dealer subscriptions;
- To keep the site secure — detecting fraud, scams and abusive behaviour;
- To improve the service through aggregated, anonymised analytics;
- To send service emails (e.g. password resets, listing expiry notices); and
- To send marketing emails — only if you’ve opted in, and you can opt out at any time.
4. Lawful bases (UK GDPR Art. 6)
- Contract — to provide the platform and any premium services you’ve paid for.
- Legitimate interests — to keep the site secure, prevent fraud and improve the user experience. We’ve documented a balancing test for each use; you can request a summary.
- Legal obligation — to keep accounting records, respond to lawful requests from authorities, and meet our anti-fraud duties.
- Consent — for non-essential cookies and marketing emails; withdrawn at any time without affecting prior processing.
5. Who we share data with
We share personal data only with carefully selected processors who help us run the service:
- Hosting & CDN: AWS (London region) and Cloudflare;
- Email delivery: Postmark (transactional) and Mailchimp (newsletter, opt-in only);
- Payments: Stripe Payments UK Ltd;
- Fraud screening: an industry-standard reputation provider;
- Analytics: a privacy-respecting, cookie-light analytics tool (no cross-site tracking);
- Customer support tooling: HelpScout.
We will also share data where we are legally required to do so — for example, with the police, HMRC or a court of competent jurisdiction.
6. Cookies
We use a small number of cookies to keep you signed in and to understand how the site is used in aggregate.
- Strictly necessary — login session, security tokens and load balancing. These are always on.
- Performance — anonymous metrics such as page-view counts. Off by default; turned on if you accept.
- Marketing — used only if you choose to receive personalised offers; we don’t run third-party ad pixels.
You can change your cookie preferences at any time from the Cookie settings link in the footer.
7. How long we keep your data
- Live listings: kept while published, plus 30 days after expiry so you can republish.
- Account data: kept while your account is open. Deleted within 90 days of closure, except where we must keep records by law (e.g. invoices for 6 tax years).
- Messages: kept for 24 months from the last message in a thread.
- Server logs: 30 days, then deleted.
8. How we keep it safe
We use TLS encryption in transit, encrypt backups at rest, store passwords using bcrypt, and apply principle-of-least-privilege access controls for our staff. Only a small number of engineers can access production data, and every access is logged.
If we ever suffer a personal-data breach that’s likely to result in a risk to you, we’ll let you know — and the ICO — within 72 hours, as required by UK GDPR.
9. Your rights
Under UK GDPR you have the right to:
- request a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted (the “right to be forgotten”) where there’s no overriding legal reason to keep it;
- restrict or object to certain types of processing;
- port your data to another service in a structured, machine-readable format; and
- withdraw consent at any time, where consent is the lawful basis for processing.
To exercise any of these rights, sign in and use Account > Privacy, or email contact@campervans.co.uk. We aim to respond within 30 days.
10. International transfers
Your data is hosted in the United Kingdom. A small number of our processors (for example, our customer-support tool) operate from the United States; in those cases we rely on the UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards such as encryption.
11. Children
campervans.co.uk is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has given us personal data, please email contact@campervans.co.uk and we’ll delete it.
12. Contact & complaints
If you have any questions about this policy, or want to make a complaint, please contact our Data Protection Officer first — we’ll do our best to put things right.
- Post
- Data Protection Officer, campervans.co.uk Ltd
The Old Cutlery Works, 178 Arundel Street, Sheffield, S1 2NT - contact@campervans.co.uk
You also have the right to complain to the UK Information Commissioner’s Office (ICO):
- Website
- ico.org.uk
- Helpline
- 0303 123 1113
- Address
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF