Privacy Policy

1. Who we are

ParkingPack is provided by ParkingPack Ltd.

ParkingPack is a digital document preparation service for UK parking charge appeals. We help users organise charge details, evidence and appeal grounds into a structured appeal pack.

For privacy questions, deletion requests or data access requests, contact us at:

Registered office: 1-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Company number: 17328113. Incorporated on 8 July 2026.

2. Information we collect

We collect information you provide when you create and use a ParkingPack case. This may include:

• Your name.
• Your vehicle registration and contact details.
• The parking location and charge notice details.
• Charge amount, dates, and operator or authority details.
• Details of the charges or grounds you want to challenge.
• Your explanation of what happened and why you disagree.
• Files and evidence you upload.
• Generated appeal pack content.
• Payment status and Stripe payment references.
• Technical information such as timestamps, case IDs and logs.

3. Evidence and uploaded files

You may upload evidence such as photos, reports, invoices, emails, messages or documents. These files may contain personal information about you, the parking operator, or other people.

Please only upload files that are relevant to your parking charge appeal. Avoid uploading documents containing unnecessary sensitive information, such as medical details, identity documents, financial records or information about children, unless they are directly relevant to your case.

Some types of sensitive personal information require extra protection under UK data protection law. If you choose to upload sensitive information, we will only use it to provide the ParkingPack service and handle your case. The ICO explains that special category data needs additional protection and must have both a lawful basis and a separate special category condition. :contentReference[oaicite:1]

4. How we use your information

We use your information to:

• Create and save your appeal pack case.
• Organise your charges, grounds and evidence.
• Generate your appeal pack and supporting documents.
• Process payments and confirm whether a pack has been paid for.
• Provide support if you contact us.
• Improve the reliability, security and performance of the service.
• Prevent misuse, fraud or unauthorised access.
• Meet legal, tax, accounting or regulatory obligations.

5. Our lawful basis

Under UK GDPR, we need a lawful basis to use personal information. The main lawful bases we rely on are:

6. Payments

Payments are processed by Stripe. We do not store your full card number or card security code. Stripe may process payment details, billing information and transaction identifiers according to its own privacy and security practices.

We may store payment status, payment timestamps, checkout session references or payment intent references so we can unlock paid packs, provide support and keep records.

7. AI and automated processing

ParkingPack may use automated systems to help review your case, organise evidence, highlight possible gaps and generate draft appeal pack content.

The output is intended to help you prepare and organise your appeal. You are responsible for checking the final pack before sending it to a parking operator, appeals service, or other recipient.

8. Who we share information with

We only share information where needed to operate, secure and provide the service. This may include:

• Hosting and infrastructure providers.
• Database and file storage providers.
• Payment processors such as Stripe.
• Email or support providers if you contact us.
• Analytics, logging or security providers.
• Authorities or professional advisers where legally required.

We do not sell your personal information.

9. How long we keep information

We keep personal information only for as long as reasonably needed for the purposes described in this policy.

• Unpaid draft cases may be deleted or anonymised after 30 days.
• Paid cases and generated packs may be retained for up to 12 months so you can access your pack and receive support.
• Evidence files are generally retained for the same period as the related case.
• Payment, tax, accounting and fraud-prevention records may be kept for longer where required by law or legitimate business needs.

Make sure your database cleanup later matches these retention promises.

10. How we protect your information

We use technical and organisational measures designed to protect your information. These may include hashed access tokens, restricted admin access, private storage, server-side access controls, HTTPS, protected environment variables and limited access to admin tools.

No online service can guarantee absolute security, but we work to reduce the risk of unauthorised access, loss or misuse.

11. Your rights

Depending on the circumstances, you may have rights under UK data protection law, including the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Ask us to delete your information.
• Ask us to restrict how we use your information.
• Object to certain uses of your information.
• Request a copy of your information in a portable format.
• Withdraw consent where we rely on consent.

The ICO says privacy information should explain people’s rights and how they can complain if they have concerns about how their information is used. :contentReference[oaicite:2]

To make a request, contact us at [email protected].

12. Deleting your data

You can contact us to request deletion of your case data and uploaded evidence. We may need to keep limited records where required for legal, tax, accounting, fraud-prevention or dispute-resolution reasons.

If you have a Pack ID, please include it when contacting us so we can find your case quickly.

13. Cookies and similar technologies

We may use cookies or similar technologies to keep the site working, maintain security, support admin login sessions and understand basic service usage.

If we add non-essential analytics or marketing cookies, we will update this policy and add appropriate cookie controls where needed.

14. International transfers

Some service providers may process information outside the UK. Where this happens, we will rely on appropriate safeguards where required by law.

15. Complaints

Please contact us first if you have concerns about how we handle your information.

You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator:

16. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date.