Privacy notice

Draft, 9 October 2026. To be checked before launch. Items in [square brackets] need filling in. Spartan Tech Solutions must register with the ICO before collecting personal data from the public.

Who is responsible

Spartan Tech Solutions [Ltd] ([address], [email address]) is the data controller. ICO registration number: [number].

What we collect and why

Searches: the place you search for, or your location if you tap "Use my location", is sent to our server as a map position to find nearby forecourts. We don't store it.

Car settings: if you're not signed in, your type of car, mpg and litres are saved only in your own browser.

Account: if you sign in, we keep your email address so you can sign in and use Plus (needed to provide the service you asked for).

Saved cars: if you save a car, we keep its make, model, year, fuel and mpg with your account so we can work out your savings. You can edit or remove it at any time in Your account.

Passwords and passkeys: passwords are stored scrambled (hashed) by our sign-in provider, never in plain text. Passkeys stay on your device; we only keep the public part needed to recognise them.

Payments: Stripe takes your card details; we never see them. We keep your Stripe customer reference, plan and renewal date (needed to provide Plus, and to keep accounting records for 6 years as the law requires).

Security and abuse limits: we keep a scrambled (hashed) version of your internet address for up to a day, to stop people overloading the site (our legitimate interest).

Partner offers: if you tap a partner offer, we count the click (not who made it) and send you to the partner's site, which has its own privacy policy and may use cookies to record that you came from us.

Settings: your fuel, litres, mpg and last search are saved only in your browser.

Who else handles data for us

Supabase (database and sign-in, London), Netlify (website hosting), Stripe (payments), Google (maps and road distances; your search position is sent to Google when you use the map or Plus), postcodes.io (turning postcodes into positions) and Resend (sending sign-in emails, EU region).

How long we keep it

Account details until you ask us to delete your account; payment records for 6 years; hashed internet addresses for a day.

Your rights

You can ask to see, correct or delete your data, or object to how we use it, by emailing [email address]. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.