Privacy policy | 504 CC Register

This policy explains what personal data 504ccregister.com collects, why, and what you can do about it.

Who is responsible

The register is run by Michael R, a private individual in New Zealand, who is responsible for your data. For any question or request about your data, write to admin@504ccregister.com.

What we collect

Your account: your email address and display name. If you choose to add them, your profile details: real name, profile photo, country and region, a short bio and the languages you speak.
Your cars: the details, photos and history you enter, and the fact that you own a car. Location data in photos (EXIF) is always removed.
Ownership checks: photos of the VIN plate and documents you send to show that a car is yours. Only moderators see them; they never appear on the site.
Sign-in and security: the one-time codes we email you, your sign-ins (browser and device, IP address and time) and a log of who changed what in the register.
Feedback: the messages you send us, with the page you were on and your browser.
Invitations: when a member invites someone, we keep that person's email address and first name, the member's message, and whether the invitation was opened (through a small image in the email), clicked and accepted.
Emails we send: a copy of every email the site sends (recipient, time, subject and text), so that the site's admins can check what was sent. Sign-in codes and private links are hidden in the copy.

We use no analytics and no advertising, we do not track you on other sites, and we never sell your data.

Why we use it

To run your account and the register you signed up for (contract, GDPR Art. 6(1)(b)).
To keep the register accurate and secure: checking ownership, preventing abuse and recording who changed what and which emails were sent (legitimate interest, GDPR Art. 6(1)(f)).
To send the emails the site needs: sign-in codes and messages about your cars, claims and transfers. We send no newsletters.
To deliver invitations from members, so that owners can find their cars in the register (legitimate interest). Anyone can refuse further invitations with the link in the email.

What others can see

Owner names are hidden on car pages unless you choose to show them.
Car locations are only shown at region and country level.
Car details, photos and stories are public. Owners can hide the identification numbers (VIN, chassis and engine numbers), except on cars reported stolen.
You decide for each profile detail whether it is public, visible to signed-in members or hidden.
Moderators see what they need to review claims and ownership checks.

Cookies

We use only two essential cookies: one keeps you signed in (for up to a year after your last visit) and one remembers your language. There are no analytics or advertising cookies, and all fonts and images come from this site.

Where your data is stored

The site and its database run on Google Cloud, in data centres in Europe. Photos and documents are stored with Google Cloud Storage. Emails are sent through Resend, in the United States. Texts written by members (car stories and history, photo captions and profile descriptions) are sent to Google's Gemini service to be translated automatically into the site's other languages. The register is managed from New Zealand, which the European Union recognises as giving data an adequate level of protection. Transfers to providers outside the EU are covered by their data processing terms, which include the EU standard contractual clauses.

How long we keep it

Account and profile: until you delete your account.
Sign-in codes: deleted one day after they expire (they are valid for 10 minutes).
Sign-ins: active for up to a year after you last use them, and deleted 30 days after they expire or you sign out.
Counters that prevent abuse, some with an IP address: deleted after one day.
Ownership check photos and documents: kept as the record of the check until you delete your account.
Invitations: until the member who sent them deletes their account. If you refuse further invitations, we keep your address only so that you are not invited again.
Copies of sent emails: kept without a time limit. Copies sent to you or about you are deleted when you delete your account, and copies of invitations when the member who sent them deletes theirs.
Automatic translations: replaced when the original text changes and deleted with it.
Cars, their history and the change log: for as long as the register exists, because they are the record of each car.

Your rights

On your account page you can correct your details, download a copy of all your data and delete your account. Deleting your account removes your personal data. Your cars stay in the register with the ownership shown as "Private owner", and your past edits are credited to "Deleted member". Staff actions keep a staff identifier.

You can also ask us for access to your data, or to correct it, delete it or restrict its use, and you can object to its use, by writing to admin@504ccregister.com. If you are not satisfied with our answer, you can complain to the data protection authority in your country or to the New Zealand Privacy Commissioner.

Changes

If this policy changes, the new version is published here with the date shown above.