The DoneDeal API is provided exclusively to support a single dealer’s official digital presence and tooling.
Access is granted solely for implementations that:
Are owned, controlled, or operated on behalf of the specific authorised dealer
Display only that dealer’s stock
Form part of the dealer’s primary online retail experience
The API is not intended for aggregation, redistribution, comparison platforms, marketplaces, or any multi-dealer environment unless explicitly approved in writing.
Authorised Use
Approved API consumers may:
Retrieve and display vehicle data only for the dealer(s) explicitly authorised for access
Use this data exclusively on:
The dealer’s own website
An OEM-approved website
Dealer tooling
A site built specifically for and dedicated solely to that dealer
Implement the API in a way where:
The dealer is the sole beneficiary
The dealer is the sole source of displayed inventory
Use the API only on the domain(s) and implementation submitted and approved during the access request
API usage must remain entirely within the dealer’s authorised digital properties.
The API may not be:
Extended to additional domains without approval
Embedded in third-party systems
Scraped
Accessed through unauthorised services
Used to support aggregation or resale of data
Dealer Authorisation & Consent
Mandatory Consent
No API key will be provisioned for a dealer’s data without explicit, documented consent from an authorised representative of that dealer.
Request Origin
A third-party provider may initiate a technical request. However, access will only be granted once the dealer has confirmed and verified the relationship.
Verification Rights
DoneDeal reserves the right to contact the dealer directly to:
Confirm the authority of the requesting third party
Validate the scope of access
Confirm intended implementation details
Access will not be activated or updated without verification.
Revocation of Consent
If a dealer informs DoneDeal that a third party is no longer authorised to manage their digital presence:
API access for that implementation will be terminated immediately
No notice period will apply
Data Handling & Responsibilities
API consumers must:
Handle all dealer data securely
Use data solely for the approved implementation
Display vehicle information accurately and without unauthorised alteration
Remove all dealer data promptly when:
Access ends
The implementation changes
Consent is withdrawn
Data must not be stored, redistributed, repurposed, or monetised outside the authorised scope.
Changes & Oversight
Any material change to:
The implementation
Destination domain(s)
Service provider
Hosting environment
Nature of the digital experience
must be submitted for review and reapproved before deployment.
DoneDeal reserves the right to:
Monitor API usage
Audit implementations
Adjust, suspend, or revoke access at its discretion
Non-compliance with this policy may result in immediate termination of API access.