Personal Data Retention & Sharing Policy
In compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we collect and retain personal data only where it is lawful, necessary, and proportionate for the purposes of issuing and administering notices or related enforcement actions. The retention periods for specific notice types are as follows:
All personal data is stored securely and is deleted or anonymised once the applicable retention period has expired, unless we are legally obliged to retain it for longer.
We will never sell, rent, or share personal data with third parties for marketing or commercial purposes.
Data may only be shared with:
Law enforcement agencies, or
Government bodies where required by law, a court order, or a legitimate legal obligation (e.g. in relation to fraud prevention, crime investigation, or road traffic enforcement), or
Solicitors, upon request, in connection with legal proceedings or the provision of legal advice, or
Insurance companies where the offence forms part of, or may lead to, an insurance claim.
Such sharing will always be in compliance with applicable UK criminal and civil laws, including but not limited to the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), the Police and Criminal Evidence Act 1984, the Crime and Disorder Act 1998, the Proceeds of Crime Act 2002, and the Civil Procedure Rules, where relevant.
Subject Access Request (SAR) Policy
We are committed to upholding individuals’ rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We welcome Subject Access Requests (SARs) from anyone who wishes to know what personal data we hold about them. This may include vehicle registration details, parking enforcement records, photographic evidence, and related correspondence.
How to Make a Request
To make a SAR, please email [email protected] to request a Subject Access Request form. We may need to verify your identity before processing your request to ensure the security of your information.
What to Expect
Once your identity has been confirmed, we will respond within one calendar month, in accordance with legal requirements. If the request is complex or involves a large volume of data, we may extend this timeframe by up to two further months, but we will inform you if this is the case.
Contact
If you have any questions about the process, please contact our Data Protection Officer at [email protected].