Privacy Policy

What We Collect

When you place an order, we collect:

• Your name, email address, phone number and delivery address
• Your vehicle registration, make and model
• A photo or scan of your V5C vehicle registration document (front and back), which you upload as part of the application
• Payment confirmation details from our payment processor, Stripe (we do not see or store your card details — Stripe handles this directly)

Why We Collect It

We collect this data for one purpose: to complete and submit your Crit'Air vignette application to the French government on your behalf, and to deliver the resulting digital certificate and physical sticker to you. We also use your email to send you order updates and, occasionally, to ask whether you'd be willing to leave a review of our service.

Our lawful basis for processing this data is contract — we need it to provide the service you've paid for.

Who We Share It With

To complete your application, we share your details and V5C document with the French government's official Crit'Air system, since they are the body who issues the certificate and sticker — this step is unavoidable and is the actual purpose of our service.

We use the following service providers to run our business, each of whom may process your data on our behalf:

• Stripe — to process your payment securely
• Google (Gmail, Google Drive, Google Analytics) — for order communication, secure file storage, and understanding how visitors use our site

We do not sell your personal data to anyone, and we do not share it for marketing purposes with third parties.

Where Your Data Is Stored

Your order details and uploaded documents are stored in a restricted, access-controlled Google Drive folder and are only accessible to us. Where data is processed outside the UK (for example, by the French Crit'Air system, or by our service providers), this is necessary to provide the service you've requested.

How Long We Keep It

We keep your order details and V5C documents for 90 days after your sticker has been dispatched, after which they are deleted. We may keep basic order records (name, order reference, date, amount paid) for longer where we have a legal obligation to do so, such as for accounting and tax purposes.

Your Rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data (unless we have a legal reason to keep it, such as tax records)
• Ask us to provide your data in a portable format
• Object to how we use your data

To exercise any of these rights, email support@europermits.co.uk. We'll respond within one month.

You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.

Security

We take reasonable steps to protect your data, including restricted access to our file storage and two-factor authentication on the accounts where your data is held. No method of storing or transmitting data is 100% secure, but we work to keep your information as safe as possible.

Changes to This Policy

We may update this policy from time to time. The date at the top shows when it was last changed.