Legal

Privacy Policy

Last updated: 30 July 2026

This Privacy Policy explains how VERIFY SIA ("we", "us", "MrVIN") collects, uses and protects your personal data when you visit mrvin.com and purchase our digital vehicle history reports. We act as the data controller and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Latvian law.

Who we are and what we do

MrVIN sells digital vehicle history reports to consumers (B2C) worldwide. You enter a Vehicle Identification Number (VIN), pay for a report, and we compile information about that vehicle from a range of third-party data sources and deliver it to you electronically. The report is information about a vehicle, not about you.

What data we collect

Data you provide to us

• The VIN you submit and any registration or vehicle details you enter to obtain a report.
• Your email address and billing details (name and country) used to deliver the report and issue an invoice.
• Payment information. Card and account payments are processed directly by our payment providers (Stripe and PayPal). We do not see or store your full card number.
• Any information you include when you contact our support by email or form.

Data collected automatically

• Technical data such as your IP address, browser and device type, operating system, referring page and the pages you view.
• Approximate location (country level) derived from your IP address by our CDN, Cloudflare, used to show the correct language, currency and pricing.
• Information collected through cookies and similar technologies, including analytics and advertising identifiers. See our Cookie Policy for the full list.

How and why we use your data

We process your personal data for the following purposes and legal bases under Article 6 of the GDPR:

• To provide the report you ordered: query data sources for your VIN, generate the report and deliver it to your email. Legal basis: performance of a contract.
• To take payment and prevent fraud. Legal basis: performance of a contract and our legitimate interest in securing transactions.
• To meet accounting and tax obligations (e.g. keeping invoices). Legal basis: compliance with a legal obligation.
• To measure and improve the site and our advertising using Google Analytics, Google Ads, the Meta (Facebook) Pixel and the Pinterest tag. Legal basis: your consent.
• To send you marketing emails, only where you have opted in. Legal basis: your consent, which you can withdraw at any time.
• To respond to your enquiries and provide support. Legal basis: our legitimate interest in assisting customers.
• To create and manage your account. We use your personal data to manage access to your account, to support your experience throughout this website, to show your past reports and invoices, and to let you update your details. Legal basis: performance of a contract and our legitimate interest in providing the account area.

Cookies, analytics and advertising

We use cookies and tracking pixels to run the site and to understand how it is used. Analytics and advertising tags are managed through a tag-management tool (Pixel Manager for WooCommerce) and include Google Analytics 4, Google Ads, the Meta (Facebook) Pixel and the Pinterest tag. These tools may set cookies and share data with the relevant providers so we can measure conversions and show relevant ads. Full details, including how to control non-essential cookies, are in our Cookie Policy.

Who we share your data with

We share your personal data with service providers ("processors") who help us run the business, and with the data partners described in the next section. We share only what is needed in each case:

• Payment processing: Stripe and PayPal.
• Email delivery: Amazon Web Services (Amazon SES), used to send your report and transactional emails.
• Analytics and advertising: Google, Meta Platforms and Pinterest.
• Hosting and security: DigitalOcean (hosting) and Cloudflare (CDN, security).
• Vehicle data sources: the third-party providers we query to build your report. We send them the VIN, not your contact details.
• Data partners: the companies listed in the next section, and only where you have consented to that sharing.
• Authorities where we are legally required to disclose information.

Our data partnerships

Separately from the service providers listed above, we have data partnerships with the companies below. Each partnership is governed by a written data sharing agreement.

Partner	Registered details
smava GmbH	Palisadenstraße 90, 10243 Berlin, Germany
Kfz-Versicherungen GmbH	80251 München, Germany
KREDORA SIA	Mednieku 4A, Riga, LV-1010, Latvia
72Ventures s.r.o. (operator of LeadGenia)	Slezská 844/96, Vinohrady, 130 00 Praha, Czech Republic IČO 14139936
JARO pojištění s.r.o.	Na hrázi 4551/3, 796 01 Prostějov, Czech Republic IČO 27856461, entered in the commercial register on 11 September 2008 at the Regional Court in Brno, file C 91816
eLizings.lv SIA	Ulbrokas iela 23, Riga, LV-1021, Latvia Reg. no. 40103874151
DOAFF SIA	Mednieku 4A, Riga, LV-1010, Latvia

What we share is limited to what the partnership requires and may include your name, email address, phone number, country, and details of the vehicle you checked. We do not share your payment card details.

Legal basis: your consent (art. 6(1)(a) GDPR). These partners use the data to contact you with their own offers, so we share it only where you have given consent for that purpose. You can withdraw your consent at any time, with effect for the future, by writing to [email protected]. Withdrawing consent does not affect the lawfulness of any sharing that happened before you withdrew it, and it does not affect your ability to buy or use our reports.

Each partner decides for itself how it uses the data it receives, and therefore acts as an independent controller for that data under its own privacy policy. All of these partners are established in the European Union, so this sharing does not involve a transfer of your personal data outside the European Economic Area.

International transfers

Some of our providers (for example Google, Meta, Stripe and Amazon) are based in or process data in the United States or other countries outside the European Economic Area. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep your data

We keep order and invoice records for as long as required by Latvian accounting and tax law (generally at least five years). Reports and the underlying vehicle data are cached for a limited period (up to 90 days) to speed up repeat look-ups. Analytics and advertising data are retained according to each provider's settings. When data is no longer needed, we delete or anonymise it.

Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased, where applicable.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or your local supervisory authority.

Children

Our service is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

Personal data of partner and contractor staff

This section is addressed to people who work for, or represent, a company we do business with, for example an employee, board member, contractor or collaborator of a supplier, data partner or reseller. It explains how we handle your personal data when the entity you work for or represent enters into an agreement with us. We normally receive your data from that entity rather than from you directly.

Why we process your data

Your personal data is processed in order to:

• Conclude and perform the cooperation agreement between the Controller and the entity you work for or represent, including day-to-day communication, settlements and support. Legal basis: the legitimate interest of the Controller and of its contractor (art. 6(1)(f) GDPR), consisting in enabling proper and effective performance of the agreement.
• Fulfil the legal obligations of the Controller, in particular under tax and accounting regulations. Legal basis: art. 6(1)(c) GDPR.
• Establish or pursue possible claims, or defend against them. Legal basis: the legitimate interest of the Controller (art. 6(1)(f) GDPR).

What data we receive

The data transferred to us may include your name and surname, email address, phone number, position, and the name of the employer or entity you represent.

How long we keep it

We process your personal data for the duration of the agreement, and after it ends for the period required by law or until any possible claims become time-barred, whichever is longer.

Who else receives it

Recipients of your personal data may be entities providing services to the Controller, in particular IT, accounting and legal service providers.

Your rights

You have the right to access your data and obtain a copy of it, to request rectification, erasure or restriction of processing, and to object to processing on grounds relating to your particular situation.

You also have the right to lodge a complaint with a supervisory authority if you consider that the processing infringes the GDPR: in Latvia the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv), in Poland the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), in Czechia the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), in Germany the competent state data protection authority, or the authority in the country where you live or work.

Providing your data is voluntary, but it is necessary for the purposes described above. We do not use it for automated decision-making or profiling.

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it was last revised. Significant changes will be reflected on this page.

Contact us

For any privacy question or request, contact VERIFY SIA at [email protected] or by post at Roberta Hirsa 1, Riga, LV-1045, Latvia.