Skip to content

Excar / Legal information

Privacy policy

Your data, clearly explained. Find out what Excar collects, why it is used and how you can exercise your rights.

Last updated

The essentials

We use your car details and contact information to review your request and help with a sale to professional buyers. Sending a request does not automatically publish a listing or complete a sale.

Document in preparation

This version is not final. The legal identity and contact details of the organisation responsible for Excar still need to be confirmed.

Who is responsible

Excar is the brand of this car-selling support service. The organisation providing the service and responsible for processing personal data must be identified below.

The organisation’s full identity and privacy contact are awaiting confirmation. They will be included before the final version is published.

The information you share

You can use the form without creating an account. We collect the information you enter and the files you choose to send:

  • Contact information: your name, email and phone number, to respond to and follow up on your request.
  • Vehicle details: registration or VIN, specifications, mileage, condition, history, outstanding finance, selling timeline and other information you provide.
  • Files: vehicle photographs, videos and documents, depending on the selected method. Guided capture requires photographs and both videos; documents are optional. Self-service needs one photograph and its video is optional. The details-only method requires no files.
  • Technical information: IP address, browser, pages visited, referral source, interactions, and security and performance logs.

When information is sent

When you look up a vehicle, we send the registration or VIN and country to an external vehicle identification service to retrieve vehicle details. Contact fields are not part of that lookup.

The information you enter and files you select stay in the page’s draft until you start the final submission. Submission uploads the files and records the request for the team. Closing the form keeps the draft while the page stays open; reloading clears that local draft.

Avoid sending identity documents, banking details or unnecessary information about other people. Before sending photographs, videos or documents, check for faces, addresses or other personal details you can hide.

Why we use the information

Each use must have a purpose and a legal basis:

  • Responding to your request, understanding the car and supporting the steps you request towards a possible sale: steps taken at your request before entering into a contract.
  • Protecting the service, preventing abuse, resolving problems and measuring basic website operation: legitimate interests, balanced against your rights.
  • Storing optional analytics identifiers and collecting additional interactions: consent, which you can give or withdraw in the cookie controls.
  • Meeting applicable obligations or responding to valid requests from authorities: a legal obligation, where one exists.
  • Submitting the form allows follow-up on your request; it does not automatically subscribe you to marketing communications.

Who may receive information

The team handling enquiries receives your request. Technical providers may process information needed for hosting, private file storage, vehicle lookup, communications, security and service measurement.

Any sharing with professionals to assess or purchase the car must be limited to what is needed for the sale you requested. The form does not publish your contact details or automatically send the request to every dealership.

Disclosure may be legally required to authorities or necessary to defend legal rights. You can request information about recipients and, where relevant, transfers outside the European Economic Area and their safeguards. The provider list and transfer arrangements must be confirmed before this policy is finalised.

Retention and security

The retention criterion is the time needed to respond to the request, support a possible sale and resolve related matters. Further retention must be limited to applicable legal obligations and the need to establish or defend legal claims. Specific periods for each category must be confirmed with the responsible organisation.

Uploaded files use private storage and access to requests is controlled. Technical logs support security and operation. No system removes every risk; avoid including information that is unnecessary for assessing your car.

Your rights and choices

You can request access, correction, erasure or restriction of your data and, where applicable, portability and object to processing. You can withdraw consent without affecting the lawfulness of earlier processing. Some requests are subject to GDPR conditions, including legal retention obligations.

Use the responsible organisation’s contact shown on this page and explain your request. Only information needed to confirm your identity should be requested. A response is normally due within one month; any legally permitted extension must be communicated and explained.

You can complain to Portugal’s data protection authority, the Comissão Nacional de Proteção de Dados (CNPD). The form does not automatically accept a sale or set a binding price on your behalf.

Read about your rights at the CNPD

Cookies and browser storage

We store your cookie choice and selected language in your browser. The form also uses technical session and security controls. The car draft is not stored permanently in your browser.

With analytics permission, we store a visitor identifier across sessions and a current-session identifier, and measure additional interactions. You can refuse that analytics or change your choice using the button below. Refusing does not prevent you from submitting a request.

Even without optional analytics, the service records basic page and click events without those persistent browser identifiers. The server may derive a daily identifier from your IP and browser to measure visits. Security and performance logs also exist. This technical information should not be confused with fully anonymous data.

Changes to this policy

This page must reflect how Excar actually operates. The date at the top identifies the version. Material changes to purposes or consent must be communicated appropriately before they take effect.

Terms of use
Privacy policy | Excar