Privacy Policy

Effective date: January 2026

Who we are

Carbi is a trading name of Bright 7 Digital Limited. We're the data controller for your personal information, which means we decide how and why your data is used.

• Company number: SC681225
• Registered address: c/o McElhinney & Co, 126 Drymen Road, Bearsden, Glasgow, G61 3RB
• Data protection contact: [email protected]
• Contact address: Carbi, Easterlea, Main Street, Pencaitland, EH34 5DN

What information we collect

Information you give us

When you use our car matching form, you provide:

• Contact details (name, email address, phone number)
• Location (postcode and search radius)
• Car preferences (budget, brands, colours, features, mileage)
• Insurance requirements (who will be the main driver, transmission preference)
• Any additional notes you add

Information we collect automatically

When you visit our website, we collect:

• How you found us (which ad or link you clicked)
• Pages you visit and how long you spend on them
• Device information (browser type, screen size)
• Approximate location based on your IP address

This helps us understand how people use the site and improve it.

Why we collect your information

We only collect information we actually need. Here's what we use it for:

To provide the car matching service

• Finding cars that match your criteria
• Sending you car recommendations
• Introducing you to dealers

Legal basis: Contract (we need this information to provide the service you've signed up for)

To send you helpful content

• Weekly car buying tips and guidance
• Updates about our service

Legal basis: Consent (you opt in when you sign up, and can unsubscribe any time)

To process payments

If you sign up for a paid tier, we use your email to send payment confirmations and handle refunds.

Legal basis: Contract

To improve the website

We use analytics to understand how people use our site so we can make it better.

Legal basis: Legitimate interests (improving our service)

Who we share your information with

Car dealers

When we send you a car match, we don't automatically share your details with dealers. We only share your information with a dealer when you tell us you're interested in a specific car and want an introduction.

When you request an introduction, we share your name, contact details, and car preferences with that dealer so they can get in touch with you. We only work with dealers we've vetted (4.6+ star ratings). Once we've made an introduction, the dealer becomes responsible for how they use your information.

Service providers

We use third-party services to run our website and business:

• Supabase (database hosting): Stores your form responses securely
• Vercel (website hosting): Hosts our website
• Resend (email): Sends our emails to you
• Stripe (payments): Processes payments for paid tiers
• Google Analytics (analytics): Helps us understand website usage
• Meta (Facebook/Instagram) (advertising): Tracks which ads led you to us

These companies only process your data on our behalf and according to our instructions.

We don't sell your data

We never sell your personal information to third parties for their marketing purposes.

Cookies

Cookies are small files stored on your device when you visit websites. We use them for:

Essential cookies

These make the website work properly. We don't need your consent for these.

Analytics cookies (Google Analytics)

These help us understand how people use our website. They collect anonymous information like which pages you visit and how long you stay.

Advertising cookies (Meta Pixel)

These track whether you came to us from a Facebook or Instagram ad, and help us measure ad effectiveness.

When you first visit our site, we ask for your consent before setting analytics and advertising cookies. You can change your preferences at any time by clearing your cookies and revisiting the site.

Most browsers let you block cookies entirely, but this might affect how the site works.

How long we keep your information

We don't keep your data forever. Here's how long we hold onto different types:

• Active subscribers: We keep your data while you're using the service
• After you unsubscribe: We delete your data within 6 months (to cover any ongoing car purchase or refund queries)
• Payment records: We keep these for 6 years (UK tax and legal requirements)
• Consent records: We keep proof that you consented to emails for as long as we sent emails to you

Your rights

Under UK data protection law, you have the right to:

• Access your data: Ask for a copy of the information we hold about you
• Correct your data: Ask us to fix any mistakes
• Delete your data: Ask us to erase your information
• Restrict processing: Ask us to stop using your data in certain ways
• Data portability: Get your data in a format you can take elsewhere
• Object: Object to processing based on legitimate interests
• Withdraw consent: Unsubscribe from marketing emails at any time

To exercise any of these rights, email us at [email protected]. We'll respond within 30 days.

If you're not happy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

How we protect your information

We take security seriously:

• Our website uses HTTPS encryption
• Payment details are handled by Stripe (we never see your card number)
• Your data is stored in secure cloud infrastructure
• Access to your information is limited to those who need it

No system is 100% secure, but we do our best to protect your information.

Children's privacy

Our service is aimed at people aged 16 and over. We don't knowingly collect information from children under 16. If you're a parent and believe your child has given us information, please contact us and we'll delete it.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we'll let you know by email. The date at the top shows when it was last updated.

Contact us

Questions about your data or this policy? Get in touch:

• Email: