Privacy Policy
Last updated: October 2026
1. Introduction
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, and vehicle registration number provided when you create a booking or account.
- Payment Information: Payment card details are processed securely by our third-party payment providers (Stripe, PayPal, Square). We do not store your full card details.
- Usage Data: Information about how you interact with our platform, including IP address, browser type, pages visited, and timestamps.
- Vehicle Data: Number plate information captured via ANPR cameras at venue car parks, or photographed by a car park attendant using our app, for the purpose of check-in verification. Plate photos are sent to our plate recognition provider to read the plate.
- Accessibility Information: If you tell us or the venue that you need accessible parking (for example, that you hold a Blue Badge), we record that on your booking so staff can direct you to a suitable space. Because this can reveal information about a disability, it is special category data under the UK GDPR and we handle it as set out in section 4.
- Communications: Records of correspondence if you contact us for support, including diagnostic reports that venue staff choose to send us from our app when reporting a card reader or payment problem.
- Venue Staff Data (attendant app): If you work at a venue and use our attendant app, we collect your name and role as set up by the venue, a record of your sign-ins, the check-ins, payments and announcements you make, and a random identifier our app creates for your device together with its platform and browser details. Your sign-in PIN is checked by our servers and is not shared with anyone else.
- Diagnostic Data: Error reports and performance measurements (such as how long pages take to load) from our website and apps. We remove email addresses and number plates from these reports before they are sent.
- App & Device Access (mobile apps): Our mobile apps may request access to your device camera (to scan check-in QR codes and capture number plates for verification) and, where you accept in-person card payments, to location, microphone, Bluetooth, and phone state. These payment-related permissions are required by the Square Mobile Payments SDK (our card-payment provider) to connect to card readers and accept contactless Tap to Pay payments; they are not used to track you or to record audio. If you enable biometric sign-in, your fingerprint or facial data is handled solely by your device operating system and is never transmitted to or stored by us.
3. How We Use Your Information
- To process and manage your parking bookings
- To send booking confirmations, digital passes, and reminders via email and SMS
- To facilitate check-in at venue car parks
- To direct guests who need accessible parking to suitable spaces
- To manage venue staff accounts, devices and sign-in, and to keep a record of who checked in each vehicle
- To process payments and issue refunds
- To improve our platform and user experience
- To respond to your enquiries and provide customer support
- To comply with legal obligations
4. Legal Basis for Processing
- Contract: Processing necessary to fulfil your booking
- Legitimate Interest: To improve our services and ensure security
- Consent: For marketing communications, which you can opt out of at any time
- Legal Obligation: To comply with applicable laws and regulations
For accessibility information, which is special category data, we also rely on your explicit consent, given when you ask for accessible parking. You can withdraw that consent at any time by contacting us or the venue; we will then remove the accessibility flag from your booking, although we may no longer be able to reserve an accessible space for you.
5. Data Sharing
- Venue partners: The venue where you have booked parking, for the purpose of managing your visit
- Payment processors: Stripe, PayPal, or Square to process your payments
- Communication providers: To send you emails and SMS notifications
- Service providers: Companies that run parts of our service on our behalf, including Plate Recognizer (reading number plates from photos), Sentry (error and performance reporting), Vercel (website hosting and privacy-friendly analytics without cookies) and Supabase (database hosting). They may only use your data to provide their service to us.
- Law enforcement: Where required by law or to protect our legal rights
We do not sell your personal data to third parties, and we do not use it to track you across other companies' apps or websites.
Some of these providers may process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
6. Data Retention
7. Your Rights
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time
To exercise any of these rights, please contact us at hello@parkmeup.co.uk.
8. Cookies
9. Security
10. Changes to This Policy
11. Contact Us
ParkMeUp (a trading name of Thryve Apps Ltd, Company No. 16962553)
Email: hello@parkmeup.co.uk
Website: www.parkmeup.co.uk
