Privacy policy

Who we are

Appeal It helps UK motorists understand and challenge parking and traffic penalties. We are the data controller for the personal data described here. You can reach us at [email protected].

What we collect

• Your ticket. The photo of your PCN or Parking Charge Notice and the details we read from it. Tickets often include personal data such as your name, address and vehicle registration.
• Your answers. What you tell us about the circumstances of the ticket when we ask case-specific questions.
• Your email address, when you provide it to sign in or pay.
• Payment confirmation. Payments are handled by Stripe; we receive confirmation that you paid but never see or store your card details.
• A session cookie. One essential cookie that keeps your case linked to your browser. We use no advertising or cross-site tracking cookies.

How we use it

We use your data for one purpose: assessing your ticket and preparing your appeal. That means reading the ticket, researching the law and location, asking you the right questions, producing your assessment and, if you pay, drafting your appeal. Your ticket image and case details are processed by our AI provider (Anthropic) to deliver the service; this data is not used to train their models. We email you only about your case — sign-in links, receipts and case updates — unless you separately opt in to anything more.

Legal bases

We process your data to perform our contract with you (assessing your ticket and drafting your appeal) and under our legitimate interests in operating, securing and improving the service. Where consent is required, we ask for it.

Who we share it with

We never sell your data. We share it only with the processors needed to run the service: our hosting and database provider, our file storage provider, Stripe for payments, our email delivery provider, and Anthropic for AI processing — each bound by their own data processing terms. We may also disclose data where the law requires it.

Retention

We keep your case data while your case is active and for as long as you may need it — appeals processes can run for months, and refund claims depend on case records. You can ask us to delete your data at any time; we will remove it unless we are required to keep specific records (for example, payment records for tax purposes).

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable format. Email [email protected] and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

If we change this policy materially, we will update the date above and, where the change affects how we use data you have already given us, tell you by email.