Security

1. Payments

Payments are processed by Stripe, which is certified to the highest level of the card industry’s security standard (PCI DSS). Your card details go straight from your browser to Stripe and never reach our servers, so we can’t see or store them. Apple Pay and Google Pay add another layer, because your real card number isn’t shared.

2. Signing in

AUTO373 doesn’t use passwords, so there’s none to guess, reuse or leak. You sign in with a link we email you, which works once and expires shortly after it’s sent, or with Google or Apple.

Because your email is your key, keep your email account secure: use a strong password and two-step verification there.

3. Your reports

We check on our servers that a report belongs to you before showing it. Knowing a registration or an order number isn’t enough to open someone else’s report.

If you bought without signing in, the link in your email is a long, random code for that one report. Links expire after a while for safety; if yours has, enter your email and we’ll send a new one to the same address.

4. How we look after data

• Every connection to auto373.co.uk is encrypted (HTTPS), and our database encrypts stored data.
• Keys for our payment, email and data providers are kept on our servers only, never in the website code your browser downloads.
• We collect only what we need; see our privacy policy.
• We limit how often forms can be used, to stop them being abused, and we block automated scraping.

5. Spotting fake emails

Emails from us:

• always come from an address ending in @auto373.co.uk;
• only link to auto373.co.uk;
• never ask for your card details, bank details or a password.

If you get an email claiming to be from AUTO373 that doesn’t match this, don’t click anything, and forward it to support@auto373.co.uk.

6. Reporting a security problem

If you think you’ve found a security weakness, email support@auto373.co.uk with “Security” in the subject. Tell us what you found and how to see it. We’ll reply within 5 working days and keep you updated while we fix it.

While you look into it, please:

• don’t access, change or delete anyone else’s data;
• don’t run tests that could slow down or disrupt the site for others;
• give us a reasonable time to fix it before telling anyone else.

If you follow these, we won’t take action against you for reporting in good faith.