Privacy notice

We collect as little personal data as possible.

Last reviewed: 6 September 2026. Launch requirement: the actual data-controller name and working privacy contact must be inserted before public launch.

The data controller for this deployment is the operator of this Your Parking Rights Unlocked deployment. Privacy enquiries can be sent to the contact route shown on the deployed site.

Who is responsible for the site?

What this notice covers

This notice explains how this website handles information when you use its appeal tools, submit an anonymised community case, or report a problem. The core appeal checkers run in your browser and are designed not to require an account.

Information we process

ActivityDataPurposeTypical retention
Using the checkersAnswers entered into the browserGenerate the result you requestedNot intentionally stored by the server unless a specific submission feature says otherwise
AI document readerThe parking notice image or PDF you choose to upload, plus text extracted from itIdentify the document and extract key details you asked us to checkThe site does not intentionally save the uploaded document in its application database. The document is sent to our AI processing provider. Standard API service data may be retained by that provider for up to 30 days for service and abuse-monitoring purposes unless different account-level data controls apply.
Community case submissionAnonymised operator, route, ground, outcome, summary and optional decision dateModerate and, if approved, publish useful anonymised case informationPending/rejected records: normally up to 12 months. Approved records: retained while useful to the public library, subject to review/removal
Correction/reportCategory, message, optional page/source URLsInvestigate accuracy, accessibility, privacy or link issuesNormally up to 12 months after resolution
Security/anti-spamTechnical data processed by Cloudflare, including Turnstile verification where enabledProtect forms and infrastructure from abuseAccording to Cloudflare configuration and applicable logs

Do not submit identifying case data

Community cases and correction reports are designed to work without names, email addresses, phone numbers, vehicle registrations or PCN/court reference numbers. Automated checks attempt to reject obvious identifiers, but you remain responsible for removing identifying details before submission.

Document reader: parking notices commonly contain identifying information such as a vehicle registration and reference number. Only upload a document if you want those details processed for the reading you requested. Do not upload unrelated sensitive documents.

Legal basis

Where UK data-protection law applies, the site operator expects to rely mainly on legitimate interests for operating, securing and improving the public-interest information service, including moderation and corrections. If a different lawful basis is required for a specific feature, this notice should be updated before that feature is used.

Who receives data

Hosting and database services may be provided by Cloudflare. Turnstile, if enabled, is also provided by Cloudflare. Data is not sold. Approved community-case information may be published publicly, but only after moderation and only in anonymised form.

Cookies and local storage

The site may use strictly necessary browser storage for functionality. It does not require advertising or behavioural-tracking cookies. If non-essential analytics or cookies are added later, the cookie information and consent controls must be updated before they are enabled.

Your rights

Depending on the circumstances, UK data-protection law may give you rights including access, correction, erasure, restriction and objection. You also have the right to complain to the Information Commissioner’s Office ↗. Because community/correction submissions are intentionally anonymous, the operator may not always be able to identify a particular anonymous record as yours without additional information.

Changes

This notice should be reviewed when the service, hosting, analytics, moderation process or applicable data-protection rules change.

Report a privacy concern

Payments

If you choose to buy a personalised appeal, payment is processed by Stripe. We do not need to receive or store your full card number. Stripe receives payment and transaction information needed to process the purchase, prevent fraud and meet its legal obligations. Our site receives transaction identifiers and payment status so it can unlock the paid feature.