Park Pal Pro Privacy Notice

Park Pal Pro (“Park Pal Pro”, “we”, “us” or “our”) provides an app that helps people read parking signs, understand parking restrictions, record parking sessions and prepare draft Penalty Charge Notice (“PCN”) challenge materials.

We are the controller of the personal data described in this notice.

• Controller: Park Pal Pro
• Registered address: [address]
• Privacy contact: support@parkpalpro.co.uk
• In-app contact: Profile > Privacy

If we appoint a Data Protection Officer, their contact details will be published here.

This notice explains how we use personal data when you use the Park Pal Pro app and related services.

You can stop contributing to the public library and withdraw consent for analytics and optional SMS/WhatsApp or marketing communications at any time in your profile or by using the unsubscribe option provided. Withdrawal does not affect processing already carried out before withdrawal; contributions already published remain in the public library (anonymised if you delete your account), as explained in section 4.

You do not have to provide optional information. However, we cannot create an account without the account information, cannot analyse a sign without the relevant photo, and cannot create a letter containing your address unless you provide it.

We use third-party AI providers to analyse parking-sign photos, PCN letters and supporting documents, and to generate plain-English summaries and draft challenge materials at your request.

Our AI providers process this content only on our behalf and only to provide these features. They are contractually prohibited from using your content to train, develop or improve their general AI models.

We configure these services so that submitted content is retained only for the limited period needed to provide the service, maintain security, prevent abuse and meet legal obligations. Where available, we use provider settings that minimise or disable retention of submitted content.

We do not permit AI providers to sell your content, use it for advertising, or disclose it to other customers. Access to submitted content is restricted to authorised personnel and systems where necessary for service delivery, security or legal compliance.

You may delete uploaded photos and documents from your account. We will then delete them from our live systems in accordance with our retention schedule, subject to limited backup, security, fraud-prevention and legal-retention requirements.

The AI output is assistance only. It is not legal advice, may contain errors, and should be reviewed by you before you rely on or submit it. We do not make solely automated decisions that produce legal or similarly significant effects about you.

If you choose to contribute to the public Locations library, we will show the information identified at the point of contribution, which may include a rounded location, a photo, a parking tip and the date it was added.

We round public locations to reduce precision, but a location or image can still reveal information about a place. Do not submit photos that contain people, vehicle registration marks, home addresses, or other personal information unless you have a lawful reason to do so.

Public contributions form part of the shared parking database and the time- and date-stamped evidence record, so they are kept indefinitely. If you delete your account, your contributions are anonymised: your name and account link are removed, but the location, photo, tip and timestamp remain in the public library. If a contribution contains personal information or breaches our rules, contact us and we will review and remove it.

We share personal data only where necessary to operate the service, including with:

• cloud hosting, database, authentication and file-storage providers;
• AI service providers that analyse photos and documents at your request;
• mapping and geolocation providers;
• push-notification, email, SMS and WhatsApp providers, where you choose those reminder channels;
• payment providers for subscriptions and payments;
• professional advisers, insurers, regulators, law-enforcement bodies or other parties where required by law or needed to establish, exercise or defend legal claims.

These providers act under written contracts and may use personal data only for the agreed services, except where they have an independent legal obligation.

We do not sell personal data. We do not use personal data for third-party behavioural advertising. Any sponsor banners are not personalised using your personal data.

Some of our service providers may process personal data outside the UK. Where this happens, we use a lawful transfer mechanism, such as a UK adequacy regulation or the UK International Data Transfer Agreement/Addendum, and apply appropriate safeguards.

You may request further information about relevant transfers and safeguards by contacting us.

We keep personal data only for as long as necessary for the purposes above:

• parking sessions and associated photos: 24 months after the session;
• PCN challenges, letters and supporting evidence: 24 months after creation or last activity;
• usage analytics: 12 months;
• account details: until you delete your account, then for up to 90 days to complete deletion and resolve account issues;
• payment and transaction records: for the period required by applicable tax and accounting law;
• public-library contributions: kept indefinitely as part of the shared parking database and time- and date-stamped evidence record, anonymised if you delete your account;
• security and diagnostic logs: 180 days.

We may retain limited information for longer where necessary for legal claims, fraud prevention, tax or accounting obligations, or compliance with law. Backups are deleted on a rolling basis within 180 days.

Depending on the circumstances, you have the right to:

• access your personal data;
• correct inaccurate or incomplete personal data;
• ask us to erase your personal data;
• ask us to restrict how we use your personal data;
• receive personal data you provided to us in a portable format, where the right applies;
• object to processing based on our legitimate interests;
• withdraw consent at any time where we rely on consent; and
• complain to the UK Information Commissioner’s Office at ico.org.uk.

You can exercise most rights in the app through Profile > Privacy, including downloading your data, correcting your details, managing consent, and requesting deletion. You may also contact us using the details in section 1.

We usually respond within one month. We may need to verify your identity before acting on a request.

We use appropriate technical and organisational measures designed to protect personal data. These include encryption in transit and at rest, access controls that limit access to authorised people and systems, email verification, rate limiting, and short-lived signed links for private files.

No online service can guarantee absolute security. Please keep your account credentials confidential and contact us promptly if you think your account has been accessed without permission.

We may update this notice from time to time. If a change is material, we will notify you in the app, by email, or by another appropriate method before the change takes effect where required.

For privacy questions or requests, contact us at support@parkpalpro.co.uk or in the app through Profile > Privacy.