Privacy Notice

Controller: [COMPANY NAME] Ltd, [registered office address]. ICO registration: [pending]. Contact: support@pcnappeal.co.uk.

What we collect

Check data: the facts you enter about the parking charge (operator, dates, reason, amount, circumstances) and, if you choose to give them, the notice reference, vehicle registration, your name and address for the letters. Some of this is personal data. A signage photo, if you upload one, is processed in memory to describe the sign and is not stored. Order data: order id, amount, timestamp, Stripe identifiers and the email you give Stripe. Technical data: server logs (IP address, user agent) kept for security. We set no advertising or analytics cookies at present.

Why (lawful basis)

Performing our contract with you (UK GDPR art. 6(1)(b)) to generate and deliver the report; legitimate interests (art. 6(1)(f)) in fraud prevention and service security; legal obligation (art. 6(1)(c)) for tax and accounting records.

Sharing

Stripe (payments, receipts) — see stripe.com/privacy. Our hosting and database providers (processing only, under contract). If AI refinement is enabled, the draft letter text (which contains the facts you entered) is sent to Anthropic's API to be reworded; Anthropic processes it as our processor and does not use it to train models. We do not sell personal data and never share it with parking operators.

Retention

Order and report records: 6 years (HMRC). Server logs: 30 days. Unpaid abandoned orders: 30 days. Uploaded photos: not retained.

Your rights

Access, rectification, erasure (subject to our legal retention duties), restriction, portability and objection. Email support@pcnappeal.co.uk. You can complain to the Information Commissioner's Office (ico.org.uk).

International transfers

Our providers may process data outside the UK under UK-approved safeguards (IDTA / UK Addendum to SCCs).