PRIVACY.

Preview notice. The operating business, contact details and retention periods need confirming before public checkout opens.

Your account

We store your email address encrypted, with a separate keyed index for sign-in. Passwords are stored as salted, slow password hashes. Email codes expire after ten minutes and may be used once. Session tokens and API keys are stored as keyed hashes, not readable credentials. Your saved lookup history is private to your account and can be exported. Activity extends your session; thirty inactive days require sign-in and email verification again. Password entry is required again after ninety days.

What a lookup uses

We process the registration you enter, associated vehicle details and the technical information needed to deliver and protect the service. We don’t ask you to enter a registered keeper’s name or address.

Sign-in and service records

A secure sign-in cookie keeps an authorised session open. Lookup results can be saved to make repeat searches faster. Technical logs help identify errors and misuse.

Payments and your rights

Stripe processes payments and stores card details. PaintReg stores payment references and usage records, not full card numbers. Resend sends verification, password-recovery and paid-result emails; Cloudflare hosts the application and private account databases. Contact hello@paintcodebyreg.com for privacy questions. The operating-business identity and statutory retention schedule still require confirmation.