Privacy Policy — i-Pace Owners Advocacy Group

This notice explains how the I-PACE Owners' Advocacy Group handles personal data on this website. We will update it when our services or data use materially change.

Who is responsible for your data

The I-PACE Owners' Advocacy Group is an informal, UK-led owners' initiative and is the controller for personal data submitted through this website.

For privacy questions or requests, email contact@ipace-owners.org.

Data we collect

Depending on what you choose to provide, we may collect:

Your name, email address, country or region, relationship to an I-PACE, volunteering interests, and consent choices.
Vehicle registration, country, model year, mileage, ownership dates, and the final six characters of a VIN.
Battery State of Health readings, measurement dates, mileage, and source.
Service, fault, repair, recall, and inspection records, including notes, campaigns, status, service-provider name and postcode, fix duration, courtesy vehicle information, parts delays, miles driven whilst faulty, goodwill support, warranty cover, and dispute status.
Authentication, security, and technical information needed to operate the service, including Firebase account identifiers and standard hosting logs such as IP address, browser information, request time, and error details.

Full VINs are not stored. If you provide a VIN, the server converts it to a keyed hash for deduplication and retains only the final six characters for your reference. We do not currently accept evidence-document uploads.

Why we use it and our lawful bases

We use personal data only for the purposes described below:

Purpose	Lawful basis
Create and secure your member account; show you your private records; prevent duplicate or abusive submissions; and operate, troubleshoot, and protect the service.	Our legitimate interests in running a safe, reliable owners' group and maintaining an accurate evidence base.
Send group updates or campaign messages.	Your consent. You can withdraw it at any time by contacting us.
Include eligible records in anonymised aggregate analysis, reports, and public statistics.	Your consent.
Respond to privacy requests and meet applicable legal or regulatory duties.	Legal obligation where one applies; otherwise our legitimate interests in administering the group responsibly.

Joining and providing vehicle or evidence data is voluntary. The Join form needs your name, email address, contact choice, and participation acknowledgement to create and administer membership. Optional information can be left blank, although some member features may then contain less detail.

How records are stored and used

Join, vehicle, battery, and service/fault records are stored by server-side Cloud Functions in private Google Cloud/Firebase data stores. Member snapshots are private and are returned only after server-side Firebase Authentication checks.

If you consent to anonymised analysis, counts, averages, changes, and distributions may be published on the evidence dashboard or used in reports and constructive engagement with JLR, consumer bodies, or the media. We do not publish your name, email address, registration, retained VIN characters, free-text notes, or documents without specific permission.

We do not use your information for solely automated decisions or profiling that produces legal or similarly significant effects.

Who processes or receives data

We use service providers to operate the site:

Google Cloud and Firebase provide hosting, authentication, Cloud Functions, structured storage, logs, and security services.
Resend processes email addresses and delivery information when it sends sign-in links or consented group emails.

These providers process data under their own data-protection and security terms. Their services may involve processing outside the UK. Where UK data-protection law restricts a transfer, we rely on the provider's applicable transfer safeguards.

We may disclose information if required by law or when necessary to establish, exercise, or defend legal rights. We do not sell personal data.

Cookies and browser storage

We do not use analytics or advertising cookies. Essential services may use cookies or browser storage:

Firebase Authentication stores information needed to complete and remember sign-in.
The cookie/privacy notice stores whether you dismissed it.
Hosting infrastructure keeps technical logs needed to provide and protect the site.

If non-essential cookies are added later, we will update the site and request consent before setting them.

How long we keep data

We keep membership and submitted vehicle records while the group operates and the records remain needed for membership administration or the evidence purposes you selected. We delete or anonymise them when they are no longer needed, when a valid deletion request applies, or when consent is withdrawn and no other lawful basis requires retention.

Security and hosting logs are kept for the operational periods set by our service providers. Deleted data may remain temporarily in restricted backups until those backups expire through their normal retention cycle.

Exporting your data

Signed-in members can use Export your data on the My Data account page:

The CSV option creates a ZIP with separate membership, vehicle, SoH-reading, and service/fault-history files.
The Excel option creates a formatted workbook containing the same categories plus summary charts where enough data exists.

Exports are generated on demand from your authenticated member snapshot, sent with private no-store headers, and not retained as public files. Internal account identifiers, email/VIN hashes, and full VINs are excluded. Your downloaded copy may still contain personal and vehicle information, so store it securely and take care before sharing it.

The sample Excel report contains fictional data only.

Your rights

Depending on the circumstances and lawful basis, you may have rights to:

Ask for a copy of your personal data.
Correct inaccurate or incomplete data.
Ask us to erase or restrict processing of data.
Object to processing based on legitimate interests.
Withdraw consent at any time, without affecting earlier lawful use.
Receive eligible data you provided in a structured, commonly used, machine-readable format.

These rights are not absolute in every situation. Contact us at contact@ipace-owners.org and we will respond in line with applicable data-protection law. We may need to verify your identity before acting.

If you are unhappy with our response, you can complain to the Information Commissioner's Office.

Changes to this policy

We will post material changes on this website and, where appropriate, notify members who have consented to contact.

Last updated: 28 July 2026.