Privacy Policy

Marque is operated by Holted Holdings ("Marque", "we", "us"). We run marque.cars, a data platform that publishes aggregated, public-record price data for collectible cars across the United Kingdom, Australia, and the United States.

For any privacy-related question, contact us at justin@marque.cars.

We collect only the data we need to run the service and answer customer enquiries.

Account data (only if you sign up)

• Email address and display name — required for sign-in, managed by our authentication provider Clerk.
• OAuth identifier if you sign in with Google — we never see your Google password.
• Profile preferences you set inside Marque, such as your default market (UK/AU/US) and any cars saved to your Garage.

Enquiry & lead-magnet data

• If you submit the Concierge form, the Top 50 PDF form, or any other contact form, we capture the email address, name (if supplied), and the free-text note you wrote.
• If you ask the Value My Car tool to email you a valuation, we store that email for follow-up alongside the valuation snapshot.

Usage data (everyone)

• Pages viewed, search queries, and actions taken on the site, used in aggregated form for product analytics.
• IP address, browser type, operating system, and approximate geolocation derived from your IP — used for security, abuse prevention, and to present prices in the right currency.
• Referrer URL — which site sent you to us, used to measure marketing campaigns.

Cookies and similar technologies

• Authentication cookies (set by Clerk) keep you signed in.
• Strictly-necessary preferences (your market, your dismissed banners).
• Analytics and advertising cookies: when we run paid campaigns, the Meta Pixel may be loaded so we can measure ad effectiveness. You can disable this in your browser settings or via the cookie banner where required by law.

• To operate the service — sign-in, alerts, watchlists, valuations.
• To respond to enquiries you send via the Concierge or contact forms.
• To deliver the Top 50 PDF and similar lead-magnet content you requested.
• To understand which models people care about, in aggregated and de-identified form, so we can improve coverage and accuracy.
• To protect against fraud and abuse — rate-limiting, bot detection, login anomalies.
• For marketing, but only with your consent (the lead-magnet sign-up doubles as an opt-in to occasional updates; you can unsubscribe in one click from any email).

• Contract — running your account, delivering subscriptions, responding to your Concierge enquiry.
• Legitimate interest — aggregated analytics, security, fraud prevention. We think these are proportionate; you have the right to object at any time.
• Consent — marketing emails, non-essential cookies. You can withdraw consent at any time.

We do not sell your data. We share it only with the small set of service providers who help us run Marque:

• Vercel (US/EU) — hosts the website.
• Supabase (Tokyo, AP region) — stores account data, the model index, and captured enquiries.
• Clerk (US) — handles authentication. Their privacy policy.
• Resend (US) — sends transactional and marketing emails. Their privacy policy.
• Anthropic (US) — runs the Claude language model that normalises listing text and powers the AI Value-My-Car tool. We do not use your data to train any model. Their privacy policy.
• Bright Data (Israel/US) — runs our public-web scraping infrastructure. We send only public auction URLs, not any of your personal data.
• Inngest (US) — schedules our nightly background jobs.
• Meta / Facebook (US) — if you arrive via a Marque ad on Facebook or Instagram, the Meta Pixel reports back the conversion event (no name or email shared in plaintext).

We will disclose data if compelled by law (subpoena, court order, regulatory request). We will tell you about any such request unless legally prohibited.

Marque is built on a global, multi-region stack. Most personal data lives in our Supabase Postgres database in the Tokyo (ap-northeast-1) region. Your data may transit through the US (Vercel edge, Clerk, Anthropic) and EU (CDN nodes) in the course of normal operation. We rely on the EU Standard Contractual Clauses (SCCs) and UK Addendum where applicable for international transfers.

• Account data: kept while your account is active, then deleted within 12 months of you closing it (or earlier on request).
• Lead-gen and concierge enquiries: kept for up to 24 months from your last interaction, then deleted.
• Aggregated analytics: kept indefinitely in de-identified form.
• Auction data: kept indefinitely. This is public information about cars, not about you.

You have the right to:

• Access the personal data we hold about you.
• Correct anything inaccurate.
• Delete your data ("right to be forgotten").
• Object to processing based on legitimate interest.
• Withdraw consent for marketing at any time.
• Receive a copy of your data in a portable format.
• Lodge a complaint with the UK Information Commissioner's Office, the Australian Office of the Australian Information Commissioner, or your local supervisory authority.

To exercise any of these rights, email justin@marque.cars. We'll respond within 30 days.

Marque is not directed at children under 18 and we do not knowingly collect data from them. If you believe a child has signed up, email us and we will delete the account.

We use HTTPS everywhere, encrypted credentials at rest, principle-of-least-privilege access for our team, and battle-tested authentication via Clerk. No system is perfect; if we ever detect a breach affecting your data we'll notify you and the relevant regulator without undue delay, per our legal obligations.

We update this policy when our practices change. The "Last updated" date at the top tells you when. If we make a material change, we'll surface it on the site or email you before it takes effect.

For any privacy question, data request, or complaint, email justin@marque.cars. We aim to respond within two business days.