How Logbook handles personal data

Placeholder · pending review by counsel

In one paragraph: Logbook is a shared vehicle-history registry for the Cayman Islands. Member organisations — insurers, lenders, dealers, customs brokers, garages and the police — record events against vehicles so that buyers and members can check a vehicle's story before money changes hands. Registry records describe vehicles, not people: public reports never show names, addresses, plate numbers, policy numbers, loan amounts or sale prices, and every lookup is logged with who searched and why.

1. Who we are

Logbook ("the Registry", "we", "us") is operated by DORDLE Ltd and made available to member organisations and, through the public report, to anyone checking a vehicle. For the purposes of the Data Protection Act (2021 Revision) ("the DPA"), the operator of Logbook is the data controller for the personal data described below. Member organisations remain controllers of the records they hold in their own systems.

2. What personal data we hold

2.1 Member user data

For the people who sign in: name, work email, phone number, role, the organisation they act for, sign-in activity and two-factor authentication enrolment.

2.2 Vehicle data

Most registry content — identifiers, makes and models, import records, inspections, odometer readings, write-offs — is information about a vehicle and is not personal data. A small number of fields could identify an owner when combined with other information (for example finance status or claim references); those fields are restricted, encrypted at rest, and never appear on the public report.

2.3 Lookup audit

Every search and report view is recorded before results are returned: the acting user and organisation (or, for public checks, a session identifier and IP address), the identifier searched, the stated purpose, and a verification hash of what was shown. The audit trail exists so that access to the registry is always answerable, and it is retained accordingly.

3. Your rights

Under the DPA you may ask what personal data we hold about you, ask for it to be corrected, or request erasure of your personal data. Identity is verified before anything is removed. Vehicle records are kept for the life of the vehicle and are not personal data subject to erasure.

Contact for data protection matters: privacy@logbook.ky.