Privacy notice
We collect as little personal data as possible.
Who is responsible for the site?
The data controller for Your Parking Rights Unlocked is the site operator. Privacy enquiries can be sent to the privacy contact shown for this site. Business/contact address: see the contact details in our Terms.
What this notice covers
This notice explains how information is handled when you use the parking-ticket checker, AI document reader, buy a personalised first-stage appeal, submit an anonymised community case or report a problem. The core checker does not require an account.
Information we process
| Activity | Data | Purpose | Typical retention |
|---|---|---|---|
| Using the checker | Answers entered into your browser | Generate the free assessment you requested | Not intentionally stored in our application database unless a submission or paid feature says otherwise |
| AI document reader | The parking notice image/PDF you choose to upload and extracted text, which may include a vehicle registration, reference number, dates and issuer | Read the document and route you to the relevant checker | We do not intentionally save the uploaded document in our application database. It is sent to OpenAI for the reading you requested. Standard API service data may be retained by that provider for a limited period under its applicable API data controls. |
| Paid appeal preparation | Checker results and the issuer, reference, vehicle registration, notice date and additional facts you choose to provide; Stripe transaction/session identifiers and payment status | Bind your payment to the appeal requested, verify payment and prepare the personalised first-stage appeal | Appeal details are transmitted to our server to prepare the paid output. Stripe retains payment records under its own legal and service requirements. We do not receive your full card number. |
| Community case submission | Anonymised operator, route, ground, outcome, summary and optional decision date | Moderate and, if approved, publish useful anonymised case information | Pending/rejected records: normally up to 12 months. Approved records: while useful to the public library, subject to review/removal |
| Correction/report | Category, message and optional page/source URLs | Investigate accuracy, accessibility, privacy or link issues | Normally up to 12 months after resolution |
| Security/anti-spam | Technical data used for Cloudflare Turnstile verification | Protect forms and the AI reader from automated abuse | According to Cloudflare's applicable service configuration and retention practices |
Do not submit unnecessary personal data
Community cases and correction reports are designed to work without names, email addresses, phone numbers, vehicle registrations or parking/court reference numbers. Remove identifying details before submitting those forms.
Document reader and paid appeal: parking notices commonly contain identifying information. Only upload or enter information that is needed for the parking-ticket check or appeal you are asking us to perform. Do not upload unrelated sensitive documents.
Why we process information
Where UK data-protection law applies, we rely on the lawful basis appropriate to the activity. This includes legitimate interests in operating, securing and improving the service and handling corrections, and processing necessary to provide a paid personalised appeal that you request. Where another lawful basis is required by law for a particular activity, that basis applies.
Service providers and recipients
IONOS provides the website hosting and MariaDB database used by this deployment. OpenAI processes documents submitted to the AI reader. Cloudflare provides Turnstile anti-bot verification. Stripe processes payments for the £2.49 personalised appeal. These providers process relevant technical or personal data in connection with the services they provide. We do not sell personal data. Approved community-case information is published only after moderation and is intended to be anonymised.
International transfers
Some service providers may process personal data outside the United Kingdom. Where UK personal data is transferred internationally, we use the transfer mechanism applicable to the provider and destination, such as UK adequacy regulations or contractual safeguards including the UK International Data Transfer Addendum / approved contractual clauses. For example, OpenAI’s current Data Processing Addendum provides for UK data to be protected using the UK Addendum to the Standard Contractual Clauses. You can contact us for further information about the safeguards relevant to your data.
Email enquiries
Customer and privacy email is hosted through IONOS. Messages sent to our support address may also be forwarded to a Microsoft Outlook mailbox used to manage customer enquiries. Please avoid including unnecessary special-category or unrelated personal information in email.
Cookies and browser storage
The site uses browser/session storage where needed for functionality, including preserving a checker state while a user is sent to Stripe Checkout and returned to the site. We do not intentionally use advertising or behavioural-tracking cookies. If non-essential analytics or cookies are introduced, this notice and any required consent controls must be updated before they are enabled.
Your rights
Depending on the circumstances, UK data-protection law may give you rights including access, correction, erasure, restriction and objection. You can raise a privacy request using the contact above. You also have the right to complain to the Information Commissioner’s Office ↗. Because community/correction submissions are intentionally anonymous, we may not always be able to identify a particular anonymous record as yours without additional information.
Changes
We review this notice when the service, providers, retention arrangements or applicable data-protection requirements materially change.