Cazana – who are we?
We are Cazana Limited (“Cazana”). Where this Privacy Notice refers to “we”, “our” or “us”, it means Cazana Limited.
Cazana Limited, formerly known as Percayso Vehicle Intelligence Limited, is part of the Percayso Group of companies. This Privacy Notice applies specifically to Cazana’s vehicle intelligence services and does not cover services provided by other group companies, which are subject to their own privacy notices.
References to ‘you’ and ‘your’ mean individuals whose data we process in connection with our vehicle intelligence services, including where a Vehicle Registration Number (VRN) relates to an identifiable individual. You may not have a direct relationship with Cazana where we receive vehicle identifiers from our business customers.
It is important that you read this Privacy Notice together with any other privacy notice or fair processing notice we may provide on specific occasions when we collect or process personal data about you, so that you are fully aware of how and why we are using your data. This Privacy Notice supplements those notices and is not intended to override them.
We may update this Privacy Notice if our services change or if we transfer all or part of our business to another organisation.
Company Details – A bit more about us
Cazana Limited is a limited company registered in England and Wales under company number 09671692. Our registered office is 25 Hine House, Regent Street, Nottingham, Nottinghamshire, England, NG1 5BS.
Cazana Limited is registered as a data controller with the Information Commissioner’s Office (ICO) under registration number ZC095021. You can check our registration on the Data Protection Public Register at: https://www.ico.org.uk/esdwebpages/search
We have appointed a Data Protection Officer (DPO), who is responsible for overseeing questions in relation to this Privacy Notice.
If you have any questions about this Privacy Notice, including requests to exercise your data protection rights, please contact the DPO at: privacy@cazana.com
This contact address is used for Cazana Limited as part of the Percayso Group’s shared privacy and data protection function.
Purpose of this privacy notice
This Privacy Notice explains how Cazana Limited collects and processes personal data in connection with the provision of its vehicle intelligence services to business customers.
Our services involve the processing of vehicle-related data, including Vehicle Registration Numbers (VRNs). A VRN is treated as indirect personal data under UK GDPR, as it may be linked to an identifiable individual when combined with other information.
Cazana provides vehicle intelligence and data insights to business customers operating within the automotive and motor sectors. This information is used by our customers for purposes such as vehicle verification, risk assessment relating to vehicles, and the prevention and detection of fraud.
Our customers may use vehicle intelligence data at various stages of their processes, including at the point of insurance quotation, during policy administration, or in connection with claims handling and fraud prevention activities.
This Privacy Notice will be updated if our services change or if we introduce new vehicle intelligence products.
Cazana Services and Third Party Data Controllers
Cazana Limited provides vehicle intelligence services to other businesses and, in most cases, acts as a data processor when processing vehicle-related data on their behalf. Our business customers determine the purposes for which vehicle data is processed and are therefore the data controllers. Cazana processes vehicle data strictly in accordance with our customers’ instructions and applicable data protection law.
Where Cazana is acting as a data processor, individuals wishing to understand how and why their data has been processed, or to exercise certain data protection rights, may need to contact the relevant data controller directly. We will assist where we can, but in some cases we may direct enquiries to our business customer for further information.
In limited circumstances, Cazana may act as a data controller in respect of vehicle intelligence datasets that it creates and maintains. Further details are provided in the relevant sections of this Privacy Notice.
Accessing your data
Individuals may exercise their data protection rights, including the right of access, in accordance with the “Your rights” section of this Privacy Notice.
Vehicle Intelligence – a bit more detail
Where a Vehicle Registration Number (VRN) is presented to Cazana, we search our vehicle-specific databases and combine historic vehicle data with information obtained from sources such as the DVLA, DVSA and MOT records. This enables us to provide our business customers with comprehensive information about a vehicle, including mileage indicators, valuation data, recorded modifications and MOT advisories.
Our vehicle intelligence data helps customers validate the information they already hold and identify any missing or inconsistent vehicle details. The information returned may be used by customers to support vehicle-related risk assessments, asset verification and fraud prevention activities.
Cazana’s vehicle intelligence services focus on vehicles and their history. Where a VRN may be linked to an identifiable individual, it is treated as indirect personal data and processed in accordance with applicable data protection law.
Claims Information – a bit more detail
In some cases, Cazana’s vehicle intelligence services may be used by insurers and claims management companies as part of insurance or claims processes. This typically includes vehicle-related information for example, vehicle specification, valuation data, recorded modifications, mileage indicators and MOT history.
Cazana does not intentionally collect or process direct personal identifiers as part of these services. Where a VRN may be linked to an identifiable individual, it is treated as indirect personal data and processed in accordance with applicable data protection law.
Accessing your data (Subject Access Requests)
View My Data provides you with the ability to view the data Cazana may hold about you. To find out if we process any of your personal data and to access a copy of such personal data we may hold about you, please contact us by clicking on the below link:
Start a Request
You have the right to request access to any personal data that Cazana Limited may process about you. This includes requesting confirmation of whether we process your data and, where applicable, obtaining a copy of that data.
Cazana’s services primarily involve vehicle-related data. Where a Vehicle Registration Number (VRN) may be linked to an identifiable individual, it is treated as indirect personal data. In some cases, we may not be able to identify an individual from a VRN alone.
In order to protect personal data and ensure it is not disclosed to the wrong person, we may ask for additional information to verify your identity or your connection to the vehicle before responding to a request. Any verification requested will be reasonable and proportionate to the nature of the data involved.
For further information about your rights, please see the “Your rights” section of this Privacy Notice.
What data do we collect and how do we use it?
Cazana Limited processes vehicle-related data in connection with the provision of its vehicle intelligence services to business customers.
The types of data we may collect, use, store and share include:
- Vehicle data, which may include:
- Vehicle Registration Numbers (VRNs)
- Vehicle make, model, specification and trim
- Vehicle Identification Numbers (VINs)
- MOT history and advisories
- Mileage indicators
- Valuation data
- Recorded modifications and vehicle status indicators
A Vehicle Registration Number (VRN) is treated as indirect personal data under UK GDPR, as it may be linked to an identifiable individual when combined with other information.
Cazana does not intentionally collect or process direct personal identifiers, such as names, dates of birth, postal addresses, email addresses or telephone numbers, as part of its vehicle intelligence services.
We may also generate and use aggregated or anonymised vehicle data for analytical and statistical purposes. Where data is aggregated or anonymised so that individuals are no longer identifiable, it is not treated as personal data under data protection law.
Aggregated Data
Cazana may generate and use aggregated or anonymised vehicle data for analytical, statistical and reporting purposes.
Aggregated vehicle data may be derived from vehicle intelligence datasets, including data linked to Vehicle Registration Numbers (VRNs), but is processed in a way that does not identify any individual. Where data has been aggregated or anonymised so that individuals are no longer identifiable, it is not treated as personal data under data protection law.
If aggregated data is combined with other information in a way that could identify an individual, it will be treated as personal data and processed in accordance with this Privacy Notice.
If you fail to provide vehicle data
In some circumstances, Cazana may require certain vehicle-related information in order to provide its vehicle intelligence services to business customers.
Where required vehicle data is incomplete, inaccurate or not provided, this may mean that our services cannot be delivered in full or that certain vehicle intelligence outputs are unavailable.
Cazana does not generally collect personal data directly from individuals as part of its vehicle intelligence services. Any impact arising from missing data will typically be managed between Cazana and its business customer.
How we use your data
Where Cazana processes personal data on behalf of a business customer, we do so as a data processor and only in accordance with that customer’s instructions and applicable data protection law. In these circumstances, Cazana does not use the data for its own purposes.
In limited circumstances, Cazana acts as a data controller, for example in relation to vehicle intelligence datasets it creates and maintains, or in connection with operation of the Cazana website.
| Purpose/Activity | Type of data | Lawful basis for processing including basis of legitimate interest |
|---|---|---|
| Provision of vehicle intelligence services to business customers | ● Vehicle data, including VRNs (indirect personal data) | Legitimate interests (to provide vehicle intelligence services), balanced against the low privacy impact and safeguards applied |
| Vehicle-related fraud prevention support | ● Vehicle data, including VRNs (indirect personal data) | Legitimate interests / legal obligation (where applicable) |
Responding to rights requests (SARs etc.) | ● Vehicle data linked to VRNs | Legal Obligation |
To administer and protect our business and website (including security, logging and system maintenance) | ● Technical data (e.g. IP address, logs | Legitimate interests (to operate and secure our website and systems) |
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | Technical data (e.g. IP address, logs) | Legitimate interests (to operate and secure our website and systems) |
Website analytics and performance measurement (e.g. Google Analytics) | ● Technical and usage data (via cookies) | Consent (via cookie settings) |
Aggregated/anonymised analytics & reporting | ● Aggregated/anonymised vehicle data | Not personal data once anonymised; otherwise legitimate interests |
We will only use personal data where the law allows us to. The lawful bases we rely on depend on the nature of the processing and are set out above
Who do we share your data with?
Cazana Limited may share limited personal data with other members of the Percayso Group where necessary, for internal administrative, governance or operational purposes.
We may also share vehicle-related data with the following categories of recipients:
- Business customers, including insurers, claims management companies and other organisations operating within the motor and automotive sectors, to whom we provide vehicle intelligence services. Our customers may use vehicle intelligence data at various stages of their processes, including at the point of insurance quotation, during policy administration, or as part of claims handling and fraud prevention activities.
- Vehicle data suppliers and partners who support the provision and enrichment of vehicle intelligence data
- Service providers who support our operations, such as cloud hosting, IT support and security providers
- Analytics providers, in connection with operation and improvement of the Cazana website (this data is processed separately from vehicle intelligence services and subject to cookie preferences)
- Professional advisers, such as legal, audit or insurance advisers
- Regulators, law enforcement or public authorities, where we are legally required to do so
- In the event that we sell or buy any business or assets, personal data may be disclosed to prospective sellers or buyers (or their advisers) as part of that transaction. If Cazana or its assets are acquired by a third party, personal data may be transferred as part of that transaction.
We require all third parties to respect the security of personal data and to process it in accordance with applicable data protection law. Third-party service providers are only permitted to process personal data for specified purposes and in accordance with our instructions.
This list may change from time to time as we introduce new suppliers to support and enhance Cazana’s vehicle intelligence services.
Direct marketing and how you can change your preferences
Cazana Limited may send limited marketing or informational communications to business contacts, business email addresses where this is relevant to our vehicle intelligence services. Such communications are typically sent in a business-to-business context and relate to our products, services or industry developments.
Where required by law, we will obtain appropriate consent before sending marketing communications. You may opt out of receiving marketing communications from us at any time.
Marketing emails will include an unsubscribe option. You can also request to stop receiving marketing communications by contacting us at:
This contact address is managed as part of the Percayso Group’s shared privacy and data protection function.
How long do we retain your data for?
Cazana Limited will retain personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected and processed, including to meet any legal, regulatory, tax, accounting or reporting requirements.
In some circumstances, we may retain personal data for longer periods, for example where it is relevant to a complaint, investigation or where we reasonably believe there is a prospect of litigation.
When determining appropriate retention periods for personal data (including vehicle-related data and Vehicle Registration Numbers (VRNs) treated as indirect personal data), we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which the data is processed, whether those purposes can be achieved by other means, and applicable legal or regulatory requirements.
Where Cazana processes personal data on behalf of a business customer, retention will also be governed by contractual requirements and the instructions of the relevant data controller.
Your rights in relation to your data
Under UK data protection law, you have a number of rights in relation to personal data that Cazana Limited processes about you. These rights may apply differently depending on whether Cazana is acting as a data controller or data processor.
- You have the right to request confirmation of whether Cazana processes personal data about you and, where applicable, to receive a copy of that data.
- Requests can be made using the “View my data” link on this website or by contacting us using the details set out in this Privacy Notice.
- Where Cazana is acting as a data processor, we may need to refer your request to the relevant data controller (for example, one of our business customers) for a response.
Object to Processing
- You have the right to object to the processing of your personal data where that processing is based on legitimate interests. We may continue processing where we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
Data Correction
- You have the right to request correction of inaccurate or incomplete personal data.
- Where vehicle-related data has been supplied to Cazana by a third party, we may not be able to amend the data directly but will provide information about the source of the data where appropriate.
Data Deletion – under GDPR this is also known as Data Erasure or Right to be Forgotten
- You may request deletion of your personal data where there is no lawful reason for us to continue processing it.
- Please note that erasure rights are not absolute. We may need to retain certain data where required by law, for regulatory reasons, or to establish, exercise or defend legal claims.
Data Portability
- This right applies only in limited circumstances where personal data has been provided directly by you and is processed by automated means based on consent or contract. In practice, this right will not usually apply to Cazana’s vehicle intelligence services.
Restrict the use of your data
- You have the right to request restriction of processing in certain circumstances, for example while the accuracy of data is being verified. Where processing is restricted, we may continue to store the data but not otherwise use it.
Right to withdraw consent
- Where we rely on consent to process personal data (for example, in relation to marketing communications or website cookies), you have the right to withdraw that consent at any time.
Exercising your rights
You can exercise your rights by contacting Cazana using the contact details provided in this Privacy Notice. You will not normally be required to pay a fee. However, we may charge a reasonable fee or refuse a request where it is manifestly unfounded, repetitive or excessive, in accordance with applicable law.
We may ask for additional information to verify your identity or your connection to the data before responding to a request. This is to ensure that personal data is not disclosed to someone who is not entitled to receive it.
We aim to respond to all valid requests within one month. Where requests are complex or numerous, this period may be extended in accordance with data protection law, and we will keep you informed.
You can find out more about your rights under the GDPR here:
https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/
Web server logs and security
Cazana Limited has put in place appropriate technical and organisational security measures appropriate to the risk, to protect personal data against accidental loss, unauthorised access, use, alteration or disclosure.
Access to personal data is limited to employees, contractors and agents who have a legitimate business need to know and who are subject to confidentiality obligations. Personal data is processed only in accordance with our instructions and applicable data protection law.
We also collect limited technical information when users access our website, such as web server logs and security-related data. This information is used to maintain the security and integrity of the website and is processed separately from Cazana’s vehicle intelligence services.
We have procedures in place to detect, investigate and respond to suspected personal data breaches. Where legally required, we will notify affected individuals and relevant regulators of a personal data breach.
Personal data is stored using cloud-based infrastructure provided by Amazon Web Services (AWS). Our servers are currently located in the UK and the European Economic Area (EEA). We do not currently transfer personal data outside these locations.
If our arrangements change in the future and personal data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place as required by data protection law and will update this Privacy Notice accordingly.
Changes to this Privacy Notice
We may update this Privacy Notice from time to time. Any changes will be posted on this page and will take effect when the updated Privacy Notice is published.
Where appropriate, we may also notify relevant business contacts of material changes by email. Please check this page periodically to see any updates.
Complaints
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
This Privacy Policy was last updated on 16th December 2025