Privacy Policy
How we handle and protect your data
Privacy Policy
Effective Date: 2026-08-19
Last Updated: 2026-08-19
Welcome to ParkHappily - Smart Parking. We respect your privacy and are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).
This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you visit our website, use our web application, register an account, book or host a parking space, or interact with our automated access hardware.
1. Data Controller Identity and Contact Details
For the purposes of the UK GDPR and DPA 2018, the Data Controller responsible for your personal data is:
- Entity Name: BerryParking Ltd
- Registered Office Address: 123 Innovation Way, London, EC1A 1BB, United Kingdom
- Data Protection & Privacy Contact:
privacy@berryparking.com - Customer Support Email:
support@parkhappily.com
If you have questions regarding this policy or wish to exercise any of your statutory data protection rights, please contact our Data Protection Team at privacy@berryparking.com.
2. Categories of Personal Data We Collect
Depending on how you use our platform (as a driver, space host, or visitor), we collect and process the following categories of personal data:
- Identity & Contact Data: Full name, email address, telephone number, profile photograph, and account login credentials.
- Vehicle Data: Vehicle Registration Mark (VRM / license plate), vehicle make, model, color, vehicle classification (e.g. standard car, van, SUV), and electric vehicle (EV) charging compatibility.
- Booking & Transaction Data: Space location, reservation start and end timestamps, parking duration, booking reference numbers, cancellation logs, and customer support communications.
- Financial & Payment Data: Payment method details, card expiry dates, and billing postcodes. Payment card details are processed directly and securely by our PCI-DSS Level 1 compliant payment provider (Stripe); we do not store full payment card numbers or CVV/CVC codes on our servers. For space hosts, we collect verified bank account details (sort code and account number or IBAN) to facilitate earnings payouts.
- ANPR & Barrier Telemetry Data: Optical image captures of vehicle number plates, entry/exit timestamp logs, and barrier open/close audit records at hardware-integrated parking locations.
- Location & Technical Data: Device IP address, browser type and version, operating system, approximate geographic location, and real-time GPS coordinates (only when explicitly permitted by you via your browser to locate parking bays near your current position).
3. Specific Disclosures for ANPR (Automatic Number Plate Recognition) & Camera Processing
Certain parking facilities listed on ParkHappily - Smart Parking are equipped with Automatic Number Plate Recognition (ANPR) camera systems or automated barrier controls.
- Purpose of Processing: ANPR cameras are operated strictly to automate vehicle entry and exit, verify active reservations, detect overstays or unauthorised access, and ensure site security for drivers and hosts.
- Camera Operations: ANPR systems may be operated directly by ParkHappily - Smart Parking, by independent space hosts, or by accredited third-party parking operators managing the venue.
- Image Capture & Storage: When your vehicle approaches an ANPR barrier, an optical digital image of your vehicle's license plate is captured and matched against authorized reservations for that time window.
- Retention Period for ANPR Images: Optical camera images and raw license plate captures are held for a maximum of 30 days before permanent automated deletion, unless required for an ongoing payment dispute, damage claim, or formal police/insurance investigation.
- Parking Enforcement & Approved Operators: Where parking locations are governed by approved private parking trade associations (such as the British Parking Association - BPA, or the International Parking Community - IPC), your VRM is synchronized solely to confirm that you hold a valid, paid reservation and prevent unwarranted Parking Charge Notices (PCNs).
4. Lawful Bases for Processing Under UK GDPR
Under Article 6 of the UK GDPR, we must establish a lawful basis for every processing activity. The table below details our processing purposes and corresponding lawful bases:
| Processing Purpose | Categories of Personal Data | Lawful Basis (UK GDPR Article 6) |
|---|---|---|
| Account Creation & Administration | Name, email, phone, password | Article 6(1)(b) - Contract: Necessary to provide you with an account and deliver our platform services. |
| Booking Facilitation & Bay Access | Name, contact details, VRM, booking window | Article 6(1)(b) - Contract: Necessary to execute the reservation contract between driver and host. |
| Payment Processing & Host Payouts | Billing details, card token, bank details | Article 6(1)(b) - Contract & Article 6(1)(c) - Legal Obligation: Fulfilling booking contract and complying with financial regulations. |
| ANPR Camera & Automated Barrier Entry | Vehicle Registration Mark, entry/exit timestamps | Article 6(1)(f) - Legitimate Interests: Operating automated access hardware, site security, and dispute verification. |
| Customer Support & Service Alerts | Contact details, booking history, query logs | Article 6(1)(b) - Contract & Article 6(1)(f) - Legitimate Interests: Resolving issues and notifying you of booking modifications. |
| Statutory Tax & Accounting Compliance | Invoices, payout statements, transaction records | Article 6(1)(c) - Legal Obligation: Compliance with UK tax and financial reporting laws (HMRC). |
| Platform Security & Fraud Prevention | IP addresses, login audit logs, session telemetry | Article 6(1)(f) - Legitimate Interests: Protecting user accounts, preventing fraudulent bookings, and maintaining integrity. |
| Marketing Communications | Name, email address | Article 6(1)(a) - Consent: Only sent where you have opted in; revocable at any time. |
5. Sharing of Personal Information
We do not sell, rent, or trade your personal data. We share your information only in the limited circumstances described below:
- Between Drivers and Space Hosts: When a reservation is confirmed, the host receives the driver's vehicle registration mark (VRM) and booking schedule to verify arrival. Drivers receive the host's parking space location, access instructions, and gate codes.
- Trusted Service Providers: We work with vetted third-party vendors who process data on our behalf under strict Data Processing Agreements (DPAs):
- Payment Processing: Stripe Payments Europe, Ltd.
- Cloud Hosting & Infrastructure: Amazon Web Services (AWS) EMEA SARL.
- Mapping & Geocoding: Mapbox, Inc. and Google Maps Platform.
- Email & Communications: Transactional email and notification dispatch providers.
- Law Enforcement and Legal Authorities: We may disclose personal data if required to do so by UK law, a court order, or a lawful request from law enforcement agencies to investigate theft, fraud, or serious criminal incidents.
6. International Data Transfers
Our primary servers and databases are located within the United Kingdom and the European Economic Area (EEA).
Where personal data is transferred outside the UK to third-party sub-processors, we ensure an equivalent level of protection is maintained through:
- Transfers to countries deemed to provide an adequate level of protection by the UK Secretary of State; or
- Standard contractual clauses approved by the UK Information Commissioner, including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs).
7. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting requirements:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Active User Account Data | Maintained while account is active | Required to manage your ongoing profile and preferences. |
| Financial & Booking Records | 7 years following transaction completion | Statutory requirement under UK tax and company law (HMRC). |
| ANPR Camera Images & OCR Logs | Up to 30 days | Automated purge cycle; retained longer only for open investigations or disputes. |
| Vehicle Registration Marks (VRMs) | Until deleted by the user or account erasure | Retained for booking convenience; removable at any time. |
| Technical & Security Audit Logs | 90 days | Security monitoring and debugging purposes. |
| Marketing Preferences | Until consent is withdrawn / unsubscribed | Honoring your opt-out choices. |
8. Your Statutory Rights Under UK GDPR
Under the Data Protection Act 2018 and UK GDPR, you have the following rights regarding your personal information:
- Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you (a Subject Access Request / DSAR).
- Right to Rectification (Article 16): You have the right to correct inaccurate or incomplete personal information at any time directly through your dashboard settings.
- Right to Erasure / Right to be Forgotten (Article 17): You have the right to request the permanent deletion of your personal data where there is no compelling legal reason for its continued processing.
- Right to Restriction of Processing (Article 18): You have the right to ask us to suspend processing your data in certain circumstances (e.g. while verifying accuracy).
- Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Object (Article 21): You have the right to object to the processing of your data based on legitimate interests or direct marketing.
- Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing that produces legal or significant effects.
9. How to Exercise Your Rights & Account Deletion
Self-Service Account Erasure
You can permanently delete your account and erase your personal data at any time directly within your dashboard:
- Drivers: Go to Dashboard → Account Settings → Danger Zone → Delete Account.
- Hosts: Go to Host Dashboard → Settings → Danger Zone → Delete Account.
Upon confirmation, your profile data, vehicle registrations, and payment tokens will be immediately anonymised and removed in accordance with UK GDPR Article 17.
Contacting Our Privacy Team
To submit a Subject Access Request (DSAR) or exercise any other data rights, email our Data Protection Team at:
- Email:
privacy@berryparking.com - Response Time: We will acknowledge your request immediately and provide a full response within one calendar month, free of charge, as required by law.
10. Cookies and Tracking Technologies
We use cookies and similar technologies solely for essential platform operations:
- Strictly Necessary Cookies: Required for user authentication, session security, CSRF protection, and maintaining your login status.
- Functional Cookies: Remember your search filters, map preferences, and view settings.
We do not use third-party behavioral advertising cookies or sell tracking profiles to data brokers.
11. Right to Lodge a Complaint with the ICO
If you are not satisfied with how we handle your personal data or your privacy requests, you have the statutory right to lodge a complaint with the UK supervisory authority:
- Authority: Information Commissioner's Office (ICO)
- Website: https://ico.org.uk
- Helpline: 0303 123 1113
- Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
We would appreciate the opportunity to address any concerns you may have before you approach the ICO, so please contact us in the first instance at privacy@berryparking.com.