Privacy Policy

We take your privacy seriously and are committed to protecting your personal information. This Privacy Policy explains how we collect, store and use your data when you visit our website, contact us, work with us, or when we process personal data as part of the services we deliver. It also outlines the types of data we collect, why we collect it, how we use it to provide relevant services, and the rights you have over your information.

Our commitments meet, and in some areas exceed, the requirements of the General Data Protection Regulation (GDPR) and the Data Protection Act.

About This Policy

What this policy covers

This policy applies to:

Personal information you share with us through this website.
Personal data we process as part of our own business activities.

What this policy doesn’t cover

There are links on our website to third-party sites that are outside our control. Their privacy practices may differ, so we recommend checking their policies before using their services.

This policy also does not cover situations where we act as a data processor on behalf of a client and process personal data strictly according to their instructions. Therefore, this Privacy Policy applies only to data collected or processed by ACDL Holdings Limited t/a Pure Park.

Your acceptance of this policy

By using this website or providing personal information to us, you confirm that you have read, understood and accepted this Privacy Policy.

If you have any questions or concerns about how we handle your data, please contact us. If you do not agree with any part of this policy, please do not use this website.

Your Personal Data

To provide the services you request, or services we deliver to our clients, we need to collect certain relevant personal data. We only collect what is necessary, and we handle it securely and transparently.

What personal data we collect

Depending on how you interact with us, we may collect:

Contact and identification details such as your name, address and email address when you:

register an appeal
make an enquiry
order products or services from us

Images and vehicle information, including photographs of you and/or your vehicle when you visit sites where we operate.

How we use your information

We will only use your personal data for the purpose it was collected for. We will not use it for any other reason unless you have given clear consent, or it is required for legitimate business interests.

We use your personal data to:

Enter into or perform a contract or arrangement
Comply with a legal obligation
Pursue our legitimate interests, provided these do not override your rights.

These legitimate interests may include:

marketing
internal record keeping
market research
improving our products, services and website
providing retailer-related news or reports
sharing information about new products or services
notifying you of changes or improvements to our services or website
profiling and internal research

Details specific to your situation will always be included in the privacy notice provided to you.

Data Controllers and Data Processors

In many situations, we process personal data on behalf of another organisation. When this happens, we act as a data processor – meaning we only handle your information according to the instructions given by the data controller (usually one of our clients). In these cases, we do not decide how your data is used.

This distinction matters because your data protection rights work differently depending on who controls the data.

When we act as a data controller

When we are responsible for deciding how your data is used, we will give you a privacy notice explaining:

what data we collect
why we collect it
how it may be used
your rights in relation to that data

If we collect your information directly, you will receive this notice at the time of collection.
If we receive your information indirectly, we will provide the notice either when we first contact you or within one month, whichever comes first.

When we act as a data processor

If we are acting only as a data processor, we cannot make decisions about how your data is used. This also means that some of your rights, such as accessing the personal data held about you, or asking for your data to be erased or anonymised (the “right to be forgotten”), can only be exercised with the data controller, not with us directly.

Where possible, we will tell you who the data controller is so that you can contact them with any requests or questions about your rights.

Privacy notices

Only a data controller is responsible for providing you with a privacy notice explaining how your personal data will be used.

If we process your data on behalf of a third party, their privacy notice should explain:

the types of personal data collected
how it is used
your rights
and the processing we may carry out on their behalf

You will receive the privacy notice once, usually at the beginning of your relationship with us. If we update that notice in the future, we will make sure you are informed and have access to the revised version.

Your Personal Data Rights

Right of access

You have the right to request access to the personal data we hold about you.

Requests should be sent to:

Data Protection Officer
Pure Park
A1 Optimum Business Park
Optimum Way
Swadlincote
DE11 0WT

Or emailed to dpo@purepark.co.uk

We will:

confirm whether your data is being processed
provide a description of the data, why it is processed and who it may be shared with
provide a copy of your personal data and, where available, the source

We aim to respond within 1 month. Complex cases may take longer, but we will inform you.

Right to erasure (also known as “right to be forgotten”)

Send requests to the same address above.

We will:

assess whether your data qualifies for erasure or anonymisation
explain if any data cannot be erased (for example, where required by law)

Other rights

Rights such as rectification, restriction, portability, objection to processing or automated decision-making can only be exercised against the data controller. If we are acting solely as a data processor, these requests must be directed to the data controller.

Transfer Of Personal Data

If personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards and require any third-party processors to comply with data protection law. Currently, all our data storage is within the EEA.

We do not sell, trade or rent your personal data to third parties.

Who we disclose your data to

When we collect your data directly, we may share it with relevant third parties in order to:

process your requests
deliver our services
manage parking charges
handle enquiries, challenges or disputes

We also share data with third parties where legally required, such as reporting incidents.

Where we act as a data processor, your personal data may be transferred to the data controller (e.g. our client).

Categories of third parties

Below is a summary of the types of third parties we may share your data with, including examples and the data they may receive:

Repayment Policy

Please note, refunds will not be issued, unless there has been a proven overpayment or duplicate payment made to us.

Payment Processors

Natwest Bank plc
Purpose: To allow the processing of payments by BACS, credit and debit card, or cheques. Fraud checking.

Data Disclosed: Name, date of transaction, amount, currency and payer’s bank account or credit/debit card information. Some address information is used for verification purposes in the case of card payments.

Elavon Merchant Solutions
Purpose: To allow the processing of payment by credit or debit card. Fraud checking.

Data Disclosed: Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes.

GoCardless Ltd
Purpose: To allow the processing of payment by credit or debit card. Fraud checking.

Data Disclosed: Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes.

EComm6
Purpose: To allow the process of payment by credit or debit card. Fraud checking

Data Disclosed: Name, date of transaction, amount, currency and payer’s card details/account information. Some address information is used for verification purposes.

Operational Services

ZatPark
Purpose: To store records of charges issued and payment history. Retain whitelist of vehicles.

Data Disclosed: Vehicle Details, Name, address, (of vehicle driver and/or registered keeper) telephone number, payment history.

Gladstones Solicitors
Purpose: Pre-court actions and litigation.

Data Disclosed: Vehicle Details, Name, address, (of vehicle driver and/or registered keeper) telephone number, payment history.

Various debt collection agencies
Purpose: To pursue unpaid debt. To trace debtors prior to litigation.

Data Disclosed: Vehicle details, Name, address (of vehicle driver and/or registered keeper), telephone number or email address.

International Parking Community (IPC)
Purpose: To comply with our accreditation requirements and respond to complaints.

Data Disclosed: Vehicle details, Name, address, email and/or phone number.

Agencies

Driver Vehicle Licensing Agency
Purpose: To request current keeper’s details.

Data Disclosed: Vehicle registration, vehicle description (make, model, colour), time, date and location of charge notification.

Clients

Our Clients
Purpose: To validate Parking Permit Applications. To discuss and respond to parking challenges. To add self-ticketing operatives.

Data Disclosed: Name, Address, contact details (telephone numbers, email addresses) employee, resident or other form of personnel identification in order to validate eligibility for permit issue and to communicate application and any relevant or connected payment status to Our Clients.

Privacy Notice for Visitors to ANPR/CCTV Car Parks

Entering or remaining in a car park monitored by ANPR or CCTV means your personal data may be captured, stored and processed. This may include:

vehicle registration number
arrival, exit and movement times
images of your vehicle and, where applicable, you

Why we process this data

To manage the parking contract you enter into when using the car park, including identifying and pursuing the driver or any party liable for fees.

To deter and detect criminal activity and support investigations.

Lawful bases

Contract – processing is necessary to manage the parking contract.

Legitimate interests, including:

pursuing unpaid parking tariffs
pursuing unpaid parking charges
ensuring safety, security and crime prevention/detection

We may request registered keeper details from the DVLA or, where relevant, third parties such as hire companies.

Data retention

Where no unpaid fee exists, data is stored for up to 30 days.

Where an unpaid fee exists, data is retained long enough to settle the fee and resolve any dispute, usually no longer than 6 years.

Data may be held beyond 6 years in limited circumstances, for example:

ongoing disputes
court orders permitting extended recovery periods

Your data may be shared with third parties as described in Transfer Of Personal Data above.

For information on your rights, see Your Personal Data Rights above.

Privacy Notice for Notice to Keeper

If you have received a Notice to Keeper, we have obtained the name and address of the registered keeper of the vehicle from the DVLA so we can pursue unpaid parking charges. If you are not the registered keeper, we may have obtained your details from the person who identified you as the keeper at the time of the parking event.

Purpose of processing

To manage compliance with the parking contract entered into when the vehicle was parked and to pursue any party liable for payment.

Lawful bases

Contract – processing is necessary to pursue the unpaid charge.

Legitimate interest:

pursuing unpaid parking charges

Data retention

Data will be kept as long as is necessary to settle the fee and resolve any dispute, normally no longer than 6 years, though data may be held longer where:

a dispute is ongoing
a court order allows recovery after 6 years

Data may be shared with third parties as described below.

Email Communication

If you sign up to receive email updates about news or offers, you can opt in or out at any time by emailing enquiries@purepark.co.uk

Security

We are committed to maintaining strong security standards. Measures include:

firewalls and data encryption
physical access controls
restricted access to authorised staff and agents only
password protection policies
logged system access
reporting of suspicious or criminal activity to the Police and/or relevant providers

Cookies

Our website uses cookies to give you the best experience. Most are functional “session” cookies that help the site operate, such as keeping you logged in or pre-populating forms.

You may choose to reject cookies in your browser settings, though doing so may affect website functionality.

For more information about cookies and how to manage them, visit:

www.aboutcookies.org

www.allaboutcookies.org

Copyright

Contact regarding this Privacy Policy

For all communications related to Information Security, Data Protection or Subject Access Requests, please contact:

Data Protection Officer
Pure Park
A1 Optimum Business Park
Optimum Way
Swadlincote
DE11 0WT

Or email dpo@purepark.co.uk