Last updated 25 July 2026
Draft notice:This is a working draft prepared ahead of MGtrust's launch. It has not yet been reviewed by a qualified solicitor and should not be relied on as final, legally-vetted copy. Placeholders such as company registration details are marked below and must be completed before this policy is published live.
MGtrust ("MGtrust", "we", "us") operates the website at mgtrusted.co.uk (the "Platform"), a marketplace for buying and selling vehicles in the United Kingdom. This policy explains what personal data we collect, why we collect it, and the rights you have over it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
MGtrust is the data controller for the personal data described in this policy.
Name, email address, password (stored as a salted hash, never in plain text), and account role (buyer, private seller, or trade partner).
Vehicle details, listing photos, messages exchanged with other users, and records of payments made through the Platform (listing fees, featured upgrades, trade partner subscriptions, and vehicle history check purchases).
If you list a vehicle as a private seller or trade partner, we require a copy of a government-issued photo ID (such as a passport or driving licence) to confirm your identity before your first listing goes live. These documents are stored securely, access-restricted to you and our moderation team, and are not shared with other users or sold to third parties.
Payments are processed by Stripe. MGtrust does not store your full card number, CVC, or other sensitive payment card details — these are handled directly by Stripe under its own privacy policy and PCI-DSS compliant infrastructure.
Log data such as IP address, browser type, and pages visited, collected automatically to keep the Platform secure and functioning correctly.
We share personal data with the following categories of service providers, each acting under their own data processing terms:
We do not sell your personal data. We only disclose it to other users of the Platform where necessary for a transaction (for example, a buyer and seller can see each other's messages and a seller's public profile), or where required by law.
Some of our service providers may process data outside the UK. Where this happens, we rely on adequacy regulations or standard contractual clauses to ensure your data remains protected to a UK standard.
We retain account and transaction data for as long as your account is active, and for a further period afterwards as required to meet our legal, accounting, and tax obligations. Identity verification documents are retained only for as long as needed to support your verified status and are deleted or securely archived once no longer required.
Under UK GDPR, you have the right to:
To exercise any of these rights, contact us at admin@mgtrusted.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
The Platform uses essential cookies required for you to stay logged in and to keep checkout sessions secure. A full cookie policy detailing any analytics or marketing cookies will be published separately before launch.
The Platform is intended for users aged 18 and over. We do not knowingly collect personal data from children.
We may update this policy from time to time. Material changes will be notified to registered users by email or via a notice on the Platform.
Questions about this policy or how your data is handled can be sent to admin@mgtrusted.co.uk.