Privacy Policy
Effective Date: 10th September 2025
Last Updated: 10th September 2025
1. Introduction
carblah is committed to protecting your privacy. This notice explains how we collect, use, and safeguard your personal data when you use our website or submit a review.
2. Who We Are
carblah is a UK-based platform that collects structured vehicle reviews from real drivers. We anonymise and aggregate this data to generate insights for manufacturers, retailers, insurers, lenders, and other stakeholders—helping improve transparency and trust in automotive decision-making.
3. What Data We Collect
- Structured review data (e.g. vehicle experience, ratings, comments)
- Basic contact details (if you choose to provide them)
- Technical data (e.g. browser type, IP address, device information)
- Cookie data (see our Cookie Policy for details)
4. How We Use Your Data
- Process and publish reviews
- Generate anonymised, aggregated insights
- Improve our platform and user experience
- Communicate with contributors (if opted in)
5. Lawful Basis for Processing
- Consent: when you submit a review or opt into communications
- Legitimate interest: to operate our platform and improve transparency in the automotive sector
6. Automated Processing
carblah may use automated processing to detect anomalies and generate aggregated insights. This does not involve profiling or decision-making about individuals.
7. Data Sharing
We may share anonymised, aggregated insights with:
- Automotive manufacturers (OEMs)
- Car retailers
- Insurers and lenders
- Industry analysts and partners
We do not share identifiable personal data with third parties.
8. Source of Data
All review data is submitted directly by contributors. We do not collect personal data from third-party sources.
9. Statutory or Contractual Requirement
You are not under any statutory or contractual obligation to provide personal data when using carblah.
10. Data Retention
We retain review data for as long as it remains relevant to our insights. Personal data (if provided) is stored securely and deleted when no longer needed.
11. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction or deletion
- Object to processing
- Withdraw consent at any time
To exercise these rights, contact us at hello@carblah.com.
12. Right to Lodge a Complaint
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk
13. Data Security
We use appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse.
14. Joint Data Controllers
carblah partners with Configur to deliver platform functionality and manage certain aspects of data processing. Configur may act as a data controller for specific technical and operational processes. Both parties are committed to protecting your data and complying with UK GDPR.
15. International Transfers
We store data in the UK. If data is transferred outside the UK, we ensure appropriate safeguards are in place.
16. Changes to This Notice
We may update this Privacy Notice from time to time. Significant changes will be communicated via the website.
17. Contact Us
For questions or concerns about this notice or your data, contact:
Email: hello@carblah.com
Postal Address: Carblah Limited, Windsor House, Bayshill Road, Cheltenham GL50 3AT