Plain-English summary of how The Fast Lane handles security, payments and your personal information. This page is maintained by us — it is not an independent certification.
Sign-in uses email + password or Google. Passwords are hashed by our auth provider — we never see or store them in plain text.
New and changed passwords are checked against the public Have I Been Pwned breach database; passwords known to be leaked are rejected.
Each account is limited to a single active device at a time. Signing in on a new device automatically signs the previous one out.
Trade memberships are billed by Stripe. Card numbers, CVCs and bank details are entered directly into Stripe's hosted checkout — they never reach our servers and we never store them.
To cancel your membership, message admin from the Trade page. We'll cancel at the end of your current billing period so you keep access until then.
We collect the minimum needed to run the marketplace: your contact details, the vehicles you list, and basic activity logs used to prevent abuse.
Seller contact details and full registration plates are only revealed to traders with an active paid membership. Public listings show a coarsened location and a masked plate.
You can request deletion of your account and personal data at any time by emailing us from the address on your account.
Every database table enforces row-level security so users can only read and write their own records. Privileged operations (such as finalising auctions or sending emails) run through audited server functions, never directly from the browser.
Found a vulnerability or something that looks wrong? Please email us and we'll respond as quickly as we can. Please don't publicly disclose issues before we've had a chance to fix them.
Questions? See how it works or get in touch from your dashboard.