Privacy Policy

This Privacy Policy explains how PARKAPP ONLINE LTD (“ParkApp”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit www.parkapp.agency, use our website, or use our parking technology and related services (together, the “Services”).

We are the data controller for personal data described in this policy. We process personal data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (“PECR”), and other applicable UK data protection law.

1. Who we are

If you have questions about this policy or how we handle your data, contact us using the details above. You may also contact us to exercise your data protection rights (see Section 11).

2. Scope

This policy applies to:

• Visitors to our website;
• Individuals who contact us (for example by email);
• Users who create an account or use our mobile or web applications, when available;
• Drivers who search for, reserve, or pay for parking through our platform;
• Parking operators, partners, and business contacts who work with us.

Our Services may link to third-party websites or services (for example payment providers). Those third parties have their own privacy policies. We are not responsible for their practices.

3. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Data you provide

• Identity and contact data: name, email address, phone number, postal address, company name, and job title;
• Account data: username, password (stored in hashed form), account preferences, and communication settings;
• Vehicle and parking data: vehicle registration number (VRN), parking location, booking times, session duration, and related parking session information;
• Payment-related data: billing details and transaction references. We do not store full payment card numbers. Card payments are processed by our payment provider (see Section 6);
• Communications: content of emails, support requests, and other messages you send us;
• Marketing preferences: whether you wish to receive updates from us.

3.2 Data collected automatically

• Technical and usage data: IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, time spent, and interaction data;
• Log and security data: access logs, error reports, and information used to protect our systems;
• Location data: approximate or precise location where you enable location services in our app or browser, to show nearby parking and support bookings (only with your permission where required).

3.3 Data from third parties

• Parking operators and partners (for example availability, pricing, and session confirmation);
• Payment providers (for example payment status and fraud-prevention signals);
• Identity or verification providers, where we use them for business or regulatory purposes;
• Public sources and regulators, where permitted by law.

4. How and why we use your data

We use personal data for the purposes below. Where UK GDPR requires a lawful basis, we rely on the bases indicated.

Where we rely on legitimate interests, we balance our interests against your rights and expectations. You may contact us for more information about this balancing test.

5. Cookies and similar technologies

We use cookies and similar technologies on our website to make it work, remember preferences, understand usage, and improve security. Some cookies are strictly necessary for the site to function. Others (for example analytics or marketing) may require your consent under PECR.

Types of cookies we may use include:

• Essential cookies: required for security, load balancing, and core functionality;
• Functional cookies: remember choices you make;
• Analytics cookies: help us understand how visitors use the site (only where enabled and, where required, with consent);
• Payment cookies: set by our payment provider when you use checkout or payment features.

You can control cookies through your browser settings. Blocking essential cookies may affect how the website works. Where we use non-essential cookies, we will request consent where required.

6. Payments (Stripe)

We use Stripe Payments UK Ltd and its affiliates (“Stripe”) to process card and other electronic payments. When you pay through our Services, your payment information is provided directly to Stripe. We receive limited information from Stripe (such as payment status, last four digits of card, and transaction identifiers) to complete your booking and maintain records.

Stripe processes personal data as an independent controller or processor (as applicable) under its own terms and privacy policy. We recommend you read Stripe’s privacy documentation at stripe.com/gb/privacy.

We do not store full card numbers, CVV codes, or magnetic stripe data on our servers.

7. Sharing your personal data

We may share personal data with:

• Service providers and processors who support our operations (hosting, email, analytics, customer support, security, and payment processing), under contracts that require them to protect your data and use it only on our instructions;
• Parking operators and partners to fulfil bookings and manage parking sessions;
• Professional advisers (lawyers, accountants, insurers) where necessary;
• Authorities and regulators when required by law or to protect rights, safety, and security;
• Successors in connection with a merger, acquisition, or sale of assets, subject to appropriate safeguards.

We do not sell your personal data.

7.1 Key subprocessors

Our key providers may include:

• Stripe — payment processing;
• Vercel Inc. — website hosting and content delivery;
• Email and productivity providers — business communications.

We may update providers from time to time. A current list is available on request at bnawel248@gmail.com.

8. International transfers

Some of our service providers may process data outside the United Kingdom. Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, UK Addendum to EU Standard Contractual Clauses, or transfers to countries covered by UK adequacy regulations, as applicable.

9. How long we keep data

We keep personal data only for as long as necessary for the purposes described in this policy, including:

• Account and parking records: for the life of your account and for a reasonable period afterwards;
• Payment and accounting records: typically up to 6 years after the end of the financial year to which they relate, unless a longer period is required by law;
• Marketing data: until you unsubscribe or withdraw consent;
• Website logs: for a limited period for security and troubleshooting, then deleted or anonymised.

We may retain data longer where required to resolve disputes, enforce agreements, or comply with legal obligations.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, encryption in transit (HTTPS), secure development practices, and contractual protections with suppliers.

No method of transmission or storage is completely secure. If you believe your account or data has been compromised, contact us immediately at bnawel248@gmail.com.

11. Your rights

Under UK data protection law, you may have the following rights (subject to conditions and exemptions):

• Access — request a copy of your personal data;
• Rectification — correct inaccurate or incomplete data;
• Erasure — request deletion in certain circumstances;
• Restriction — limit how we use your data in certain cases;
• Portability — receive certain data in a structured, machine-readable format;
• Objection — object to processing based on legitimate interests or for direct marketing;
• Withdraw consent — where processing is based on consent, without affecting prior lawful processing.

To exercise your rights, email bnawel248@gmail.com. We may need to verify your identity before responding. We aim to respond within one month, as required by law.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (“ICO”):

12. Children

Our Services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, contact us and we will take appropriate steps to delete it.

13. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects about you, unless we inform you and provide a meaningful way to challenge the decision where required by law.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last revised. Material changes will be posted on this page. Where required, we will notify you by email or through the Services.

15. Contact

For privacy questions or requests relating to this policy: