Provenance Data Reseller Terms

Provenance Data Reseller Terms

1. Application

1.1 These Provenance Data Reseller Terms ("Reseller Terms") are supplemental to and form part of the API and Webservice Terms and Conditions ("Main Terms") published at vehicledataglobal.com/Terms. In the event of any conflict between these Reseller Terms and the Main Terms, these Reseller Terms shall prevail in relation to Provenance Data.

1.2 These Reseller Terms apply to you if you access any Provenance Data through the VDGL API for the purpose of resale, redistribution, or incorporation into any product or service made available to third parties, including but not limited to consumer-facing vehicle check products, trade platforms, or data aggregation services.

1.3 "Provenance Data" means any data obtained via the VDGL API relating to: vehicle finance records; write-off or insurance total loss records; stolen vehicle / PNC records; MIAFTR records; or keeper / plate change data.

1.4 By accessing Provenance Data, you confirm that you have read, understood, and agree to be bound by these Reseller Terms. If you do not agree, you must not access Provenance Data through the VDGL API.

2. Permitted Use

2.1 You may use Provenance Data only for the purpose of assessing the provenance, history, and status of individual vehicles in connection with legitimate automotive trade activities, including vehicle sales, purchases, insurance, finance, fleet management, aftermarket services, and law enforcement ("Reasonable Causes").

2.2 You must not use Provenance Data for any purpose other than the Reasonable Causes described above, including but not limited to marketing, direct mail, profiling, or any purpose unconnected with the assessment of a specific vehicle's provenance.

2.3 You must ensure that any third party to whom you make Provenance Data available (including your own customers and end users) uses the data only for Reasonable Causes.

3. Data Handling and Caching

3.1 You may cache Provenance Data for a maximum period of 24 hours from the time of the original API request, solely to allow multiple hits against a single record as part of a continuous enquiry (for example, multiple insurance quotes from a website or call centre).

3.2 After the 24-hour period, you must not use cached Provenance Data to fulfil any further enquiries or transactions.

3.3 Any cached Provenance Data must be protected from unauthorised access by encryption in accordance with industry best practice.

3.4 You may retain Provenance Data as part of a memorialised customer record (for example, against a completed vehicle purchase, insurance policy, or finance agreement) in accordance with clause 7.2 of the Main Terms.

3.5 You must not use Provenance Data to create, compile, or contribute to any database, directory, index, or lookup service. Data must not be stored in any form that permits bulk retrieval or systematic searching beyond the scope of individual vehicle enquiries.

4. Vehicle Identification Number (VIN) Restrictions

4.1 You must not display the full VIN to consumers. Where VIN data is included in a consumer-facing product, only the last two or three characters of the VIN may be displayed. The full VIN must not be present in any form accessible to consumers, including hidden in HTML source code, metadata, or API responses made available to the consumer's browser or device.

4.2 Full VIN disclosure is permitted only to verified trade customers operating in the following sectors: franchised and non-franchised motor dealers; auction houses; original equipment manufacturers; finance companies; insurance companies; fleet and leasing companies; aftermarket service providers; automotive systems and integration companies; law enforcement agencies; and salvage companies.

4.3 If you are uncertain whether a customer qualifies for full VIN disclosure, you must not disclose the full VIN until you have obtained confirmation from VDGL.

5. Obligations to Your Customers

5.1 You must maintain written terms and conditions with every customer or end user to whom you make Provenance Data available. Those terms must include, as a minimum, provisions that:

• (a) Restrict the customer's use of Provenance Data to Reasonable Causes only
• (b) Prohibit the customer from redistributing, reselling, or making Provenance Data available to any third party without your prior written consent
• (c) Prohibit the customer from creating, compiling, or contributing to any database, directory, or index using Provenance Data
• (d) Require the customer to comply with VIN disclosure restrictions as set out in Section 4 above
• (e) Require the customer to comply with all applicable data protection legislation
• (f) Restrict caching of Provenance Data in accordance with Section 3 above
• (g) Require the customer to notify you immediately of any suspected data breach, misuse, or unauthorised access to Provenance Data
• (h) Permit you to suspend or terminate access to Provenance Data in the event of a breach

5.2 You are responsible for the acts and omissions of your customers and end users as though they were your own. A breach by your customer of the obligations in clause 5.1 shall be treated as a breach by you of these Reseller Terms.

6. Compliance and Auditing

6.1 You must carry out reasonable due diligence on each customer to whom you make Provenance Data available, including verifying their identity and the nature of their business, before granting access.

6.2 You must monitor your customers' use of Provenance Data and take reasonable steps to identify any misuse, including reviewing usage patterns for anomalies.

6.3 You must notify VDGL immediately, and in any event within 24 hours, of any breach or suspected breach of these Reseller Terms by you or any of your customers.

6.4 VDGL reserves the right, on reasonable notice, to audit your compliance with these Reseller Terms, including your customer contracts, data handling practices, and access controls. You agree to cooperate fully with any such audit and to provide access to relevant records, systems, and personnel.

6.5 VDGL's data suppliers (including their agents) reserve the right to audit your compliance with these Reseller Terms. You agree to cooperate with any such audit as you would with a VDGL audit under clause 6.4.

7. Staff and Security

7.1 You must ensure that each person who has access to Provenance Data holds individual, unique login credentials. Shared accounts are prohibited.

7.2 You must maintain procedures for vetting staff who have access to Provenance Data, including verification of identity. Staff must be made aware of their obligations regarding proper use of data and the consequences of misuse.

7.3 Your disciplinary procedures must state that misuse of Provenance Data by any person constitutes gross misconduct.

7.4 You must maintain appropriate technical and organisational measures to protect Provenance Data from unauthorised access, loss, or disclosure, including encryption of data in transit and at rest.

7.5 You must be registered with the Information Commissioner's Office (ICO) as a data controller.

8. Data Retention and Destruction

8.1 You must retain Provenance Data only for as long as is necessary with reference to the Reasonable Cause for which it was obtained.

8.2 You must arrange for the secure destruction or deletion of Provenance Data as soon as it is no longer necessary to retain it, in accordance with applicable data protection legislation.

8.3 You must retain evidence of your compliance with these Reseller Terms for a minimum of two years after processing the data, to allow inspection by VDGL or its data suppliers.

9. International Transfers

9.1 You must not transfer Provenance Data outside the United Kingdom without the prior written approval of VDGL.

9.2 This restriction applies to all forms of transfer, including backup, disaster recovery, cloud hosting, and access by overseas personnel.

10. Data Source Attribution

10.1 Provenance Data is sourced under licence from third-party data providers, including Experian Limited and the Driver and Vehicle Licensing Agency (DVLA). The data remains subject to the terms of the original data providers at all times.

10.2 You must not use the name, logo, or trademarks of any third-party data provider without their prior written consent.

10.3 You must not represent or imply that you have a direct contractual relationship with any third-party data provider unless this is the case.

11. Incidents and Breach

11.1 You must notify VDGL immediately, and in any event within 24 hours, of any loss, compromise, or misuse of Provenance Data or any personal data breach relating to Provenance Data.

11.2 You must cooperate fully with VDGL in investigating and resolving any such incident, including providing access to relevant records and personnel.

11.3 A breach of these Reseller Terms may result in immediate suspension or termination of your access to Provenance Data, without prejudice to any other rights or remedies available to VDGL.

12. Termination

12.1 Upon termination of your access to Provenance Data (whether under these Reseller Terms or the Main Terms), you must immediately cease using all Provenance Data and arrange for the secure destruction of all copies, except where retention is required by law or under clause 8.3.

12.2 The obligations in Sections 3, 4, 5, 7, 8, 9, and 11 shall survive termination.

13. General

13.1 These Reseller Terms are governed by the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction in relation to any dispute arising under these Reseller Terms.

13.2 VDGL may amend these Reseller Terms at any time by publishing an updated version on its website. Continued use of Provenance Data after publication of amended terms constitutes acceptance of the amended terms.

13.3 If any provision of these Reseller Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

13.4 These Reseller Terms, together with the Main Terms, constitute the entire agreement between you and VDGL in relation to Provenance Data.

Document version 1.0
Vehicle Data Global Ltd | Princess House, Princess Way, Swansea, SA1 3LW