Privacy Policy

General

We take care to protect the privacy of users of the CPP website. This Privacy Policy tells you what to expect when We collect personal information from you whilst all using all areas of the CPP website.

This privacy notice has been produced in accordance with the Data Protection Act 1998 (the “Act”) and applies to all personal data, as defined in the Act. We are fully compliant with the Act and any other applicable consumer legislation as required. We are registered with the Information Commissioner’s Office (“ICO”).

Any changes to this Privacy Policy will be posted on this page so that you may be aware of the information that We collect and how it is used at all times. Your continued use of all sections of the CPP Website will be your acknowledgement of your agreement to any changes to this Privacy Policy.

Collection and Processing of Personal Data

By using the CPP Website, including the Driver Portal, and by submitting information, you consent, or confirm that the person on whose behalf you are submitting information consents, to the use, collection and processing of that information (including personal data or sensitive personal data) as set out in this Privacy Policy.

If the personal data (including any sensitive personal data) is provided in relation to a Parking Charge, you further consent to Us sharing it with:

  • the Payment Processor for processing any online payments;
  • the British Parking Association (BPA) for the purpose of audit of our car park management service;
  • the Driver Vehicle Licence Agency (DVLA) for the purpose of audit of our car park management service;
  • the Parking On Private Land Appeals (POPLA) Service for the purpose of assessing your appeal;
  • print and mail service providers for the purpose of responding to you by post;
  • email service providers for the purpose of responding to you by email;
  • credit reference agents for the purpose of ensuring we are writing to you at your most recent correspondence address, if you have not replied to other correspondence;
  • collection agents for the purpose of enforcing a parking contract;
  • solicitors for the purpose of enforcing a parking contract or responding to a legal query; or
  • any other duly authorised sub-contractors,
  • and that they are all duly authorised processors of that data for the purposes intended.

Information supplied to us is subject to confidentiality and will not be disclosed otherwise without your prior consent. We will not ask you for any more information than we need, and we do not keep your information for any longer than we need to. We take reasonable steps to keep your details up to date and accurate.

The Data Protection Act 1998 gives you the right to access information held about you. You can access personal data We have about you by writing to Car Parking Partnership, PO Box 635 Chorley PR6 6NJ. You will need to pay a fee of £10 to meet Our costs in providing you with these details, confirm the details of the request, sign the request and enclose a copy of a form of signed identification (e.g. driving licence, passport etc.).

We look after your personal data by having security that is appropriate for its nature and the harm that might result from a breach of security. Unfortunately, the transmission of information via the internet is not completely secure. Although We will do Our best to protect your personal data, We cannot guarantee the security of your data transmitted to Our site and any transmission is at your own risk. Once We have received your information, We will use strict procedures and security features to try to prevent unauthorised access.

Privacy Statement – Appealing a Parking Charge

This privacy statement has been produced in the light of the Data Protection Act 1998 and applies to all personal data, as defined in the Act, which is provided when you click on the “Appeal a Parking Charge” button on the CPP Website and submit an appeal within the Driver Portal section of the CPP Website. By submitting an appeal, you consent to the processing of the information provided as set out in this Privacy Policy.

We will collect and process information you supply when making an appeal. Such information may include: your name, postal address, email address and telephone number in order for Us to assess and reply to your appeal. Information supplied to Us is subject to confidentiality and will not be disclosed without your prior consent other than in the proper processing of the appeal, whereby it may be necessary for data to be processed by the BPA, POPLA, mail service providers, credit reference agents, collection agents or solicitors for this purpose.

Depending on the nature of your appeal, the information you may give may be classed as sensitive personal data; e.g. if you provide information relating to a medical condition you may have. By submitting an appeal, you accept this information can be processed by Us, but that this information will only be used as part of your appeal and will not be used for any other purpose.

We will not ask you for any more information than We need, and We do not keep your information for any longer than We need to. We take reasonable steps to keep your details up to date and accurate. Please bear in mind that We may hold your records after your appeal has been considered as We are required to have an effective audit trail and to comply with regulatory and legislative requirements.

Privacy Statement – PSP ePayment web page or portal

This privacy statement has been produced in the light of the Data Protection Act 1998 and applies to all personal data, as defined in the Act, which is provided when you click on the “Pay a Parking Charge” or the “Pay Online” buttons within the CPP Website or via the Driver Portal section of the CPP Website.

We look after your personal data by having security that is appropriate for its nature and the harm that might result from a breach of security. Therefore, We use Capita Business Services Limited as a payment service provider (PSP) to process payments. When making a payment you will access a separate ePayment web page or Portal, hosted and administered by the PSP and will leave the CPP Website.

The information you supply whilst making payment of your Parking Charge, including a VRM, a parking charge reference, card number, expiry date and security code is collected and processed by the PSP. The parking charge reference will be used for the purpose of locating the relevant parking charge to enable the Payment Processor to populate the payment screen with the outstanding amount payable and the other details will be used by the Payment Processor to process the transaction. We will be supplied with the status of the parking charge and the parking charge reference to help us allocate the payment made.

The PSP, as service provider to Us, confirms that it has achieved Level 1 PCI-DSS accreditation status and all its procedures adhere to PCI-DSS requirements. The PSP acknowledges that it is responsible for the security of cardholder data which it possesses. The PSP is responsible for the collection, security and integrity of such of any data captured from the ePayment web page or portal collected and processed by the PSP in an encrypted file and means any encrypted data collected and processed by the PSP as part of an authorisation or settlement request originating from the ePayment web Page or portal, including (but not limited to) confidential cardholder information such as credit / debit card numbers, CSC codes, card holder name, address details (where AVS is Used) and authorisation codes (Transaction Data”) collected that is processed by the PSP via the ePayment web page or portal. The PSP assumes responsibility for security and integrity of such transaction data that it may retain in transaction data history files. Where delivery of the transaction data occurs, the PSP assumes responsibility for security, integrity and delivery of such transaction data until such delivery occurs.

The PSP operates and maintains responsibility for keeping in good working order host authorisation and submission of internet transactions including any encrypted data collected and processed by the PSP as part of an authorisation or settlement request originating from the ePayment web site or Portal, including (but not limited to) confidential cardholder information such as credit / debit card numbers, CSC codes, card holder name, address details (where AVS is Used) and authorisation codes approved by the agreed Merchant Services Acquirer (“MSA”) and facilitates upgrades to such systems as agreed between the PSP and the MSA from time to time.

Unfortunately, the transmission of information via the internet is not completely secure. Although We endeavours to ensure the PSP will do its best to protect your personal data, We cannot guarantee the security of your data entered via the ePayment web page or portal; any transmission is at your own risk and you should take the appropriate steps in respect of this risk.

Privacy Statement – New Business Enquiry

This privacy statement has been produced in the light of the Data Protection Act 1998 and applies to all personal data, as defined in the Act, which is provided when you click on the “Contact” link within the CPP Website.

When you make a New Business Enquiry via the capture form, you accept that CPP will collect and process personal data. Such information may include: your name, company name, address, email address, telephone number and the details of your message.

These details will be used to contact you to discuss your enquiry, which could be via phone or post, and to add you to our contact database. These details may be shared with other Capita Parking Services businesses. If you do not wish to be added to our contact database, please email: [email protected].