Privacy policy
What we collect, why we need it, and how long we keep it. No surprises.
Placeholder wording — have this checked
This accurately describes what the website stores and who it shares data with, but it has not been reviewed professionally. You will also need to be registered with the ICO as a data controller before processing customer data commercially.
Last updated 29 July 2026. This policy explains how Airport Parking Service handles your personal information. We are the data controller for it.
What we collect
When you make a booking we collect:
- your name, email address and telephone number
- your vehicle's registration, make, model and colour
- your outbound and return flight numbers and terminal
- your drop-off and pick-up dates and times
- the amount paid and a Stripe payment reference
- the IP address the booking was made from
We do not collect or store your card details. Payment is handled entirely by Stripe on their own checkout page. We receive only a reference to the payment and whether it succeeded.
If you use the contact form we also keep your message, so that we can answer it and refer back to it.
Why we need it
To perform the contract you entered into when booking: to know which car is yours, when to expect you, how to reach you if something changes, and to be able to prove what was agreed if there is ever a dispute.
Flight numbers are used to track delays so that we are ready when you actually land rather than when you were scheduled to.
We keep a record of payments because we are legally required to keep accounting records.
Who we share it with
- Stripe — to take your payment. Stripe is the data controller for your card details, and their privacy policy applies to them.
- Our email provider — to send your booking confirmation.
- Our hosting provider — the servers this website and its database run on.
We do not sell your information, and we do not share it for marketing. If we are ever legally required to disclose information, we will.
How long we keep it
- Booking records: six years, to meet accounting and tax requirements.
- Contact enquiries: up to two years, then deleted.
- Website security logs (login attempts, rate limits): 30 days.
- Payment event records: 180 days.
- CCTV at the compound: in line with the notice displayed on site.
Cookies
This website sets one cookie, which keeps your session working while you complete a booking and protects forms against cross-site request forgery. It is essential to the site functioning and is not used to track you.
The admin panel sets a second cookie for staff sign-in. There is no advertising or analytics tracking on this site.
Your rights
You have the right to:
- ask what we hold about you, and receive a copy
- have inaccurate information corrected
- ask us to delete information we no longer need to keep
- object to how we are using it
- complain to the Information Commissioner's Office at ico.org.uk
To exercise any of these, contact us using the details below. We will respond within one month.
Security
The website is served over HTTPS. Passwords for staff accounts are stored hashed and cannot be read by anyone, including us. Database credentials and payment keys are stored outside the public area of the server. Access to booking data is limited to staff who need it, and every change made in our admin system is logged.
Contact
Airport Parking Service