Privacy notice

NCT-Bot.ie is operated by Studio 88, Tubber, Boston, Co. Clare, Ireland. Studio 88, trading as NCT-Bot.ie, is the controller of the personal data described here. For privacy questions or requests, email touch@nct-bot.ie.

NCT-Bot is an independent notification service. It is not affiliated with, authorised by or endorsed by NCTS, the RSA or any Irish government body.

Account and contact data includes your name, email address, account and authentication identifiers, and any support enquiry you submit. Passwords are handled by Supabase Auth and are not stored in readable form by NCT-Bot.

Service data includes your selected NCT centres, order and pass status, activation records, WhatsApp-linked phone number, provider identifiers, and messaging or delivery records required to activate, provide, troubleshoot and stop alerts. We do not require a vehicle registration to provide alerts; information voluntarily included in a support message is handled as part of that enquiry.

Payment data includes the customer contact details requested by Stripe, transaction identifiers, amount, currency, payment status and refund records. NCT-Bot does not receive or store your full card number or security code.

Technical and usage data may include IP address, browser and device details, visited pages, referral information, performance and interaction events, cookie choices, security logs and checkout-recovery identifiers. With analytics consent, PostHog may also process an account identifier and masked session or interaction data.

We rely on performance of a contract to administer your order, account, activation, selected centres and WhatsApp alerts. We rely on legitimate interests to secure and operate the service, prevent fraud, recover incomplete paid checkouts, respond to support, improve performance, measure aggregate site usage with cookie-free Ahrefs Web Analytics and establish or defend legal claims.

We process records where necessary to comply with accounting, tax, regulatory or other legal obligations. We rely on consent for optional PostHog analytics and for messaging where consent is required. You may withdraw consent without affecting earlier lawful processing and may object to processing based on legitimate interests.

We use Supabase for authentication and database infrastructure; Stripe for checkout, payment and refunds; Meta and our WhatsApp Business arrangements for activation and alert delivery; PostHog for optional analytics; and Ahrefs Web Analytics for cookie-free aggregate site statistics. Their processing is also subject to their applicable privacy information.

Order or support details may be sent to an access-controlled Telegram administrator channel so authorised Studio 88 personnel can support customers and confirm operational events. We may also use hosting, security, email and professional advisers where necessary.

We do not sell personal data. We disclose it only to service providers, providers acting as independent controllers where needed to complete a requested transaction or communication, where you ask us to, during a lawful business reorganisation, or where disclosure is required by law.

Strictly necessary cookies and local-storage entries support authentication, security, theme and cookie preferences, and paid-checkout recovery. The checkout-recovery identifier expires within 48 hours. Optional PostHog analytics helps us understand visits, navigation, performance and feature use and may include autocaptured interactions and session recordings with form inputs masked. Ahrefs Web Analytics measures visits, navigation, outbound link clicks and form submissions without cookies or persistent identifiers. It derives daily visitor counts from a temporary hash of IP address and browser data; raw IP addresses are discarded.

PostHog analytics is not required to purchase or receive alerts. You can accept, reject or change PostHog analytics at any time through Cookie Preferences in the footer. Ahrefs does not use cookies and is not controlled by that preference.

We select European processing regions where available. If a provider processes data outside the European Economic Area, we use an adequacy decision, approved contractual safeguards such as the European Commission Standard Contractual Clauses, or another lawful transfer mechanism. Contact us for information about an applicable safeguard.

A pass runs for seven days from WhatsApp activation and the checkout-recovery identifier lasts no more than 48 hours. Messaging and delivery data is kept while needed to provide the pass, retry delivery, provide support and protect the service. Account data is normally kept while the account is open. Support, order, payment, refund and audit records are kept only for the period reasonably required for their purpose, Irish accounting and tax obligations, or applicable legal claims, then deleted or anonymised.

Retention may be extended for an active complaint, fraud investigation, legal claim or binding legal request. Protected backups are removed on their normal rotation.

Subject to data-protection law, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent. We do not use personal data for solely automated decisions producing legal or similarly significant effects.

Email touch@nct-bot.ie to exercise a right. We may verify your identity and will normally respond within one month. You may complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, at dataprotection.ie.

Use the in-chat stop instruction or email us to stop WhatsApp alerts. Email us to request account closure. Stopping alerts, closing an account or requesting deletion does not require erasure of records that must lawfully be retained and is separate from consumer cancellation under the Terms.

We use proportionate access controls, authentication and restricted database permissions, but no internet service can guarantee absolute security. We may update this notice when the service, providers or law changes. The current version and update date will remain on this page, with additional notice where a material change requires it.