Privacy Policy

Effective date: July 24, 2026

Florida MVR Services, Inc. (“FLMVR,” “we,” “us,” or “our”) operates flmvr.com and related online services that provide driver history reports (MVRs), vehicle and title records, criminal-history reports, and insurance-verification products to qualified business customers and, through our personal ordering service, to individual Florida license holders requesting their own records.

We furnish records from many states. As an authorized provider of driver and vehicle record information, we handle that information consistent with the federal Driver Privacy Protection Act (DPPA) and related state motor-vehicle privacy laws where they apply. This Privacy Policy describes how we collect, use, retain, and protect personal information in connection with those services.

Legal and regulatory context

Our services involve driving history, motor vehicle, and related records, and depending on how those records are used, laws such as the Driver Privacy Protection Act (DPPA), the Fair Credit Reporting Act (FCRA), the Gramm–Leach–Bliley Act (GLBA), and state privacy laws (including the Florida Digital Bill of Rights) may apply. Business customers can find applicable compliance obligations in their customer agreement and in the compliance resources available after login (Help > Compliance; printable templates under Help > Forms).

Information we collect

Website visitors (no account)

When you browse our public marketing pages, we collect standard web server access logs (such as IP address, browser type, referring page, and timestamps). We also use third-party website and product analytics providers on many public and account pages; you can opt out as described under “How we use information” and on our Your Privacy Choices page, where the specific analytics providers we currently use are listed. You can also control or block cookies through your browser settings.

Registered business customers

When you apply for or maintain a business account, we may collect:

Company and contact information (business name, address, phone, email, tax identifiers where required).
User account credentials (email address and a one-way password hash rather than the plaintext password).
Permissible-purpose certifications, signed agreements, and compliance documentation, including electronically signed PDFs retained in cloud object storage with integrity controls.
Order and billing history, account balances, and payment information (see Payment information below).
Information about the subjects of reports you order (such as name, driver license number, date of birth, and other identifiers required by state motor vehicle agencies or data providers).
Uploaded batch files and signed releases associated with batch orders.
Messages and attachments you send through our Secure Messaging system.

Personal driving-record applicants

If you order your own Florida driving record through our personal service (/personal), we collect the information you enter on the order form, including:

Your name, date of birth, and Florida driver license number.
Your email address and phone number.
The record type you select. Your email address is used to send a time-limited retrieval link under our standard process; see Delivery below.
The payment details needed to process your payment (for example, cardholder name and billing ZIP code).
An electronically signed release/authorization confirming you are the license holder authorizing us to obtain your record. The signed agreement is retained in cloud object storage with integrity controls. For other messages or documents you send to us, use our Secure Messaging service rather than ordinary email.

How we use information

We use personal information to:

Process and fulfill report requests, including determining the requirements that apply to a given request.
Submit orders to FLHSMV and other authorized data providers and deliver completed reports to you.
Process payments, maintain account balances, and provide customer support.
Operate, secure, and improve our website and services, detect fraud, and comply with audit and legal requirements.
Communicate with you about your account, orders, or inquiries.

We do not exchange personal information for monetary payment or use it to place ads for unrelated businesses on other companies’ websites. We do use third-party website and product analytics providers on many public and account pages to understand how the site is used. Those tools may receive device, IP, and usage data. Depending on their configuration, contractual status, and use of the information, disclosures through analytics technologies may be treated as a “sale” of personal information under some state privacy laws. California law may also treat disclosures used for cross-context behavioral advertising as “sharing.” Where applicable, you may opt out of those disclosures as described below and on our Your Privacy Choices page, which also identifies the analytics providers we currently use.

You can set an analytics opt-out preference on our Your Privacy Choices page. That preference is stored in a cookie and applies to the browser and device where it is set. We also recognize Global Privacy Control (GPC) requests: when a request includes a GPC signal, we treat it as an analytics opt-out for that request. Our page-rendering controls suppress the third-party analytics scripts governed by this choice when either signal is present. We also do not load those analytics scripts on pages where you enter account passwords or payment details. Content you enter or view in our Secure Messaging tray is not sent to those analytics providers. The choices page explains the current scope of this mechanism and lists the providers it covers.

Separately from third-party analytics, when you arrive at our site from a paid advertisement we may retain first-party advertising click parameters (such as a Google click identifier) on our own systems for our advertising cost accounting. That retention does not send those parameters to Google or other analytics providers when you have opted out or your browser sends a GPC signal.

Payment information

Card payments—for both business accounts and personal driving-record orders—are processed through a third-party payment gateway over an encrypted connection. After the gateway authorizes a payment, we do not retain full card numbers or card security codes. We retain limited payment details such as the last four digits of the card number and gateway transaction references, along with amounts and dates, as needed to process the payments you authorize, provide receipts, reconcile transactions, handle refunds, prevent fraud, and meet legal and recordkeeping obligations. Accepted payment methods are displayed during checkout.

Optional ACH / e-check payments

As an alternative to paying by card, you may choose to keep bank account information (your account and routing numbers) on file for electronic check (ACH) payments. ACH is optional; card payment remains available. You may ask us to remove bank account information from your file. We evaluate that request under applicable legal and recordkeeping requirements.

We use bank account information to process and reconcile the ACH payments you authorize, prevent fraud, address payment inquiries, and meet legal and recordkeeping obligations. We retain it as described below.

Storage, security, and online retention

Our production systems are hosted with a cloud infrastructure provider. Information submitted through our website is protected in transit using HTTPS/TLS. We use administrative, technical, and physical measures intended to limit production-system access to authorized personnel. Completed business orders and formatted reports remain available through the customer’s online account subject to the retention practices below.

For messages and file transfers to us, use our Secure Messaging service, accessible through the site’s Contact Us or messaging controls. Secure Messaging is hosted by Florida MVR Services, Inc. Communications are protected in transit using HTTPS/TLS, and the database and cloud object storage used by the service are protected with encryption at rest. Attachments also receive application-layer encryption before storage. We may send ordinary email notifications containing a link and limited message metadata. View and send message content and attachments through Secure Messaging rather than ordinary email.

Order results, signed agreements, and other compliance documents are retained in cloud storage using availability and integrity controls. Their retention is governed by the practices below.

No method of transmission over the Internet, or method of electronic storage, is completely secure. While we use commercially reasonable measures to help protect personal information, we cannot guarantee its absolute security.

Retention periods and purge conditions

The periods below are our retention commitments. The DPPA requires records identifying the recipient and permitted purpose of covered motor-vehicle-record redisclosures to be kept for at least five (5) years. Other laws, payment-network rules, contracts, tax requirements, and limitation periods apply to particular records. We use a seven-year schedule for the transaction and compliance categories identified below to cover those overlapping obligations; this does not mean that every cited law independently requires seven years.

A record subject to a legal hold, active dispute, audit, or specific longer legal requirement may be retained beyond its ordinary period. The exception applies only while that preservation reason remains applicable.

Completed business orders and reports: Retained in the customer’s online account while the account remains active and for up to seven (7) years afterward. Records identifying recipients and permissible purposes are retained for no less than the five-year DPPA period where that law applies.
Signed releases and batch upload files: Retained for up to seven (7) years after the related order activity.
Electronically signed agreements: Retained in cloud object storage with integrity controls for seven (7) years after signing.
Secure Messaging conversations and attachments: Retained for up to seven (7) years after the conversation’s last activity. Storage protections are described under Storage, security, and online retention.
Pending / incomplete business account signups: If a prospective business customer does not verify a provisional account, that account is scheduled for cleanup after seven (7) days. If the applicant advances to an in-progress or returned application but does not complete signup, uploaded attachments and other sensitive application data are scheduled for purge after approximately fourteen (14) days without applicant activity. We may retain the applicant’s email address and company name for application administration, fraud prevention, and legal or recordkeeping purposes.
Personal order requests: Order and identity information is retained for up to seven (7) years for audit, dispute-resolution, tax, and legal purposes. Payment information is retained under the schedules described under Payment information and Optional ACH / e-check payments.
Optional ACH records: ACH authorization and transaction evidence is retained while the authorization remains active and for at least two (2) years after its termination or revocation. Related financial and reconciliation records may be retained for up to seven (7) years. Full bank account and routing numbers are removed or de-identified when they are no longer needed to originate or reconcile authorized payments.
Web server and security logs: Retained on a rolling basis for up to thirteen (13) months, unless associated with an active security investigation or legal hold.
Website/product analytics data: Provider retention settings are configured for up to twenty-six (26) months. Provider-specific details and the opt-out mechanism are described on Your Privacy Choices.

Personal microsite: what happens to the data you enter

This section applies specifically if you order your own Florida driving record at /personal/order.

Collection. You enter your driver information, contact details, and payment card on our website using an HTTPS connection.
Authorization. You electronically sign a release/authorization in the order flow confirming you are the license holder authorizing us to obtain your record. The signed agreement is retained with integrity controls as described under Retention periods. For other messages or documents you send to us, use Secure Messaging rather than ordinary email.
Processing. We use your information to verify your identity as the license holder, process your payment through our payment gateway, and request your record from the Florida Department of Highway Safety and Motor Vehicles (FLHSMV).
Delivery. Under our standard electronic-delivery process, we email a time-limited link for retrieving the report rather than attaching the report file to the email. The link is configured to expire after seven (7) days. Expiration disables that retrieval link; it does not delete the underlying report or change the retention periods described above.
Retention. Your order details are kept as described in Retention periods above. We retain payment information as needed to process and reconcile your payment, prevent fraud, and meet legal and recordkeeping obligations, as described under Payment information. Disclosures of your personal-order information are made under “Disclosure to third parties” below. The primary third parties involved in a personal order are FLHSMV (to obtain your record), our payment gateway (to process your payment), and the cloud and service providers that host and support those systems. The third-party website analytics tools covered by our opt-out mechanism are not included in personal order pages. We do not disclose personal-order information to unaffiliated third parties for their own marketing.
Your rights. To request access to, correction of, or deletion of personal information associated with a personal order, contact us using the information below or visit our Your Privacy Choices page. We cannot alter the contents of a driving record itself; record corrections must be requested from FLHSMV. We may need to retain certain records where required by law or to defend legal claims.

Disclosure to third parties

We disclose personal information to third parties when needed to operate our services and as described in this policy, including:

To state motor vehicle agencies and authorized data providers as necessary to fulfill your order.
To our third-party payment gateway and, for ACH (e-check) payments, our originating bank, to authorize and settle transactions.
To cloud infrastructure providers that host our systems under contractual security obligations.
To service providers that assist us under contractual confidentiality and use restrictions.
To third-party website and product analytics providers that help us measure site usage, except when you have opted out or your browser sends a GPC signal, as described under “How we use information” and on Your Privacy Choices (where the specific providers we currently use are listed).
When required by law, regulation, subpoena, court order, or governmental request.

We do not disclose motor vehicle records or customer account information to unaffiliated third parties for their marketing purposes. Business customers certify a permissible purpose for the records they request and are contractually responsible for their use of those records. Applicable law and their customer agreement limit when they may redisclose record information.

Source of records, accuracy, and disputes

Florida MVR Services, Inc. acts as an authorized intermediary (a “reseller”) that requests records from source agencies and data providers and delivers them to you. We do not own, create, or maintain the underlying records, and we cannot change the information a source’s record contains. Driving records, vehicle and title records, criminal-history records, and related information originate from, and are maintained by, the issuing agency or data source—in Florida, the Florida Department of Highway Safety and Motor Vehicles (“FLHSMV”) for driving and vehicle records and the Florida Department of Law Enforcement (“FDLE”) for criminal history—and, for records from other states, that state’s agency (which we may reach through another authorized provider).

Substantive corrections to a source record must be pursued with the agency that owns and maintains it. For Florida records, contact FLHSMV (driving and vehicle records) or FDLE (criminal history) directly; for records from other states, contact that state’s agency. A later report based on a corrected source record should reflect the source’s updated information. This source-record process is separate from any dispute duties that apply to what FLMVR reported.

Where a report we provide is used as a “consumer report” under the Fair Credit Reporting Act (FCRA), you may dispute the accuracy or completeness of what we reported, free of charge, on our Dispute a report page or by contacting dispute@flmvr.com. Where and to the extent we act as a consumer reporting agency or reseller under the FCRA, we process covered disputes under the procedures and timeframes required by the FCRA. That process concerns the accuracy or completeness of what we reported; it is distinct from correcting the underlying source record, which the source agency maintains. We provide dispute results and corrected disclosures when required by the FCRA.

Consumer reports and the FCRA

Some reports we provide are used to make decisions about people—most often decisions by employers screening driver applicants. When a report is used for employment, insurance, or another purpose covered by the FCRA, it may be a “consumer report,” and both we and the business that ordered it have responsibilities under the law. Business customers must satisfy the permissible-purpose, authorization, certification, and adverse-action requirements that apply to their use of a report. Detailed guidance and printable forms are available to business customers after login (Help > Compliance and Help > Forms).

If you are the subject of a report and believe information we reported is inaccurate or incomplete, you can dispute it free of charge on our Dispute a report page, as described under “Source of records, accuracy, and disputes” above.

Your privacy rights

Some state privacy laws give you the right to ask us to access, correct, or delete personal information FLMVR holds about you, or to opt out of certain sharing. Whether a given right applies depends on the law that covers you and your relationship with us. Legal exceptions may limit the information or action available in response.

Website analytics opt-out (including Global Privacy Control) is available on our Your Privacy Choices page and is described under “How we use information.”

To make a privacy request about personal information we hold about you, use Secure Messaging (preferred), email privacy@flmvr.com, or visit Your Privacy Choices. We take verification steps appropriate to the request and provide confirmation, responses, and appeal instructions as required by applicable law.

When you ask us to delete personal information we hold, we evaluate the request under applicable law. We may decline or limit a request when retention is required or permitted under the FCRA, DPPA, GLBA, tax or recordkeeping rules, our customer agreements, an active account’s order-history needs, a dispute, or a legal hold. We delete or de-identify information when required, and explain a full or partial denial when applicable law requires an explanation.

Limits that often apply to our services:

FLMVR cannot change the contents of a motor vehicle or criminal-history source record maintained by a source agency. Corrections to the record itself must be requested from that agency (for Florida driving/vehicle records, FLHSMV; for Florida criminal history, FDLE), as described under “Source of records, accuracy, and disputes.”
If your concern is the accuracy or completeness of a consumer report we provided under the FCRA, use our Dispute a report process. That is separate from a general privacy deletion request.
If a business customer ordered a report about you, we may hold order identifiers they submitted (for example, name, driver license number, and date of birth) to fulfill the order and meet legal and compliance obligations. A privacy request about that information is handled under the process and limits above; it does not replace an FCRA dispute or a source-agency correction.

Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top identifies the version currently posted on this page. We provide additional notice of material changes when required by law.

Contact us

For privacy questions, requests, document return, or concerns, prefer Secure Messaging. Secondary contacts:

Preferred: Secure Messaging (hosted by Florida MVR Services, Inc.; supports attachments)
Email: privacy@flmvr.com
Phone: 850-894-8201

Florida MVR Services, Inc.