Last updated 16 October 2026. nctalerts.ie is run by Avlas Digital, a sole trader in Ireland (registered business name No. 793798). Contact: hello@nctalerts.ie.
The free check
When you enter a registration we look it up on ncts.ie and on the public vehicle register (vehicleservices.gov.ie) and show you what those public pages show: make, model, year, colour, the NCT due date and whether a certificate is valid. Each result is kept for up to a day so a page refresh does not repeat the lookup, then deleted. We do not tie it to you unless you go on to buy alerts or ask for a heads-up.
Heads-up emails
If you ask to hear when a centre's wait drops (the free heads-up), we store your email address, the registration and the centres you named until the email goes, and for 30 days after it so you are not emailed twice; a request that never fires is deleted after 90 days. Legal basis: your request. Every heads-up has a link that deletes the request.
Alerts
If you buy alerts we store your email address, the registration, the vehicle details above, the centres, dates, times and quiet hours you chose, a booking date if you give us one, when you paid and until when alerts run, and a record of each alert sent (centre, date, time). Legal basis: performance of the contract you enter when you pay. While your plan runs we use the registration to read appointment calendars on ncts.ie for your centres and, every few hours, to check the car's own standing on ncts.ie and the public vehicle register (a new certificate, a re-test, a booking), so alerts can stop or switch when they should. Nothing else. The registration, email and vehicle details are deleted 60 days after your alerts end, alert records after 90 days; the payment record below stays.
Emails are sent through Amazon Web Services (Amazon SES, EU region, Ireland). Every email has a link to stop alerts; using it stops them immediately.
Your account and push notifications
Opening your alerts page from an email, or signing in with a code sent to your email, sets one cookie on your device so the account page opens without a code next time. It holds a random session id, nothing about you; it expires after 180 days of not being used, and signing out deletes it. If you turn on push notifications we store the delivery address your browser gives us, tied to your email, until you turn them off on the account page or the browser withdraws it. Sign-in codes expire after a few minutes and are then deleted.
Payments
Payment is handled by Stripe Payments Europe Ltd (Dublin). Stripe receives your card details and email address; we never see the card number. We keep the Stripe payment reference, amount and date for six years as tax law requires.
Hosting and analytics
The site is served by Cloudflare, which processes IP addresses to deliver pages and block abuse. Lookups and purchases are rate-limited per connection using a hashed IP that is discarded after a few hours. We use Cloudflare Web Analytics, which sets no cookies and does not track you across sites. If Google Analytics is switched on it runs with IP anonymisation and you can block its cookies without affecting the site. When we advertise the site on Google, the Google tag runs in consent-denied mode unless you accept cookies: it stores nothing on your device and only sends Google an anonymous signal that an ad click led to a visit or a purchase. If you arrive from one of our ads, we keep the click reference in your browser for that tab only, so a purchase can be matched to the ad; it is discarded after the purchase or when you close the tab.
Usage analytics
We use PostHog (EU servers) to see how the site is used: which buttons get clicked, how far pages are scrolled, where something breaks, and replays of visits with every typed character hidden. Until you click OK in the cookie banner this runs without storing anything on your device, so two visits are not linked together. After OK, a first-party cookie links your visits for up to a year.
Your rights
Under GDPR you can access, correct, export or delete your data at any time by emailing us. You can complain to the Data Protection Commission (dataprotection.ie).