1. Who we are
This policy explains how ParkGo (“ParkGo”, “we”, “us”) handles personal data when you use our website and apps across the United Kingdom and Ireland. For data-protection purposes, ParkGo is the data controller for the personal data described here.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, where the Irish service applies, the EU GDPR. We are guided by the standards and codes published by the Information Commissioner’s Office (ICO).
2. The data we collect
We collect only what we need to run the marketplace safely:
- Traveller details (minimal): your name, email, phone number, preferred language and basic vehicle information (make, model, colour, registration and size) so a host and licensed driver can identify the correct car. We do not ask travellers for identity documents.
- Host verification (KYC): identity documents, proof of address and right-to-list declarations. This sensitive material is collected only from hosts, is held in a separate, access-controlled store, and is encrypted. The independent licensed transfer operator manages its own driver and vehicle licensing and insurance.
- Booking and payment data: the bundle you book, dates, price and a payment reference. Card details are processed by our regulated payment provider; we do not store full card numbers.
- Travel-day data: live location during an active transfer and handover confirmations, used to deliver the service and provide a security record.
- Technical data: device, log and cookie data needed to keep the service secure and working.
3. Lawful bases for processing
We rely on the following lawful bases under UK GDPR Article 6:
- Contract: to create your account, take bookings, process payments and provide transfers and handovers.
- Legal obligation: to verify hosts, prevent fraud and meet tax and licensing requirements.
- Legitimate interests: to keep the platform safe, calculate trust scores from genuine reviews, and improve our service — balanced against your rights.
- Consent: for optional marketing emails and non-essential cookies, which you can withdraw at any time.
Verification documents are special-category-adjacent and treated with heightened safeguards: strict access controls, encryption and minimal retention.
4. How we share data
ParkGo is a marketplace, so some data must be shared to deliver a booking. We share the minimum necessary: a host sees the vehicle details and arrival window for a confirmed booking; the independent licensed transfer operator receives, via a secure API, only what its driver needs to complete the transfer and handover. We also use trusted processors — for payments, hosting, identity verification and communications — under written contracts that require them to protect your data and use it only on our instructions.
We never sell your personal data. We may disclose data where required by law, or to protect the safety of our users and the integrity of the platform.
5. International transfers
Where data is transferred outside the UK or EEA, we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, so your data remains protected to an equivalent standard.
6. How long we keep it
We keep personal data only as long as necessary. Booking and payment records are retained for as long as required for tax, accounting and dispute purposes (typically up to six years). KYC documents are retained for the period required by anti-fraud and licensing obligations and then securely deleted. Marketing data is kept until you unsubscribe. Inactive accounts are reviewed and deleted in line with these periods.
7. Your rights
Under data-protection law you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- request erasure of your data where there is no overriding legal reason to keep it;
- restrict or object to certain processing;
- data portability for data you provided to us;
- withdraw consent at any time where processing relies on consent.
To exercise any of these rights, contact our Data Protection Officer using the details below. We will respond within one month. You also have the right to complain to the ICO (in the UK) or the Data Protection Commission (in Ireland), though we hope you will contact us first so we can put things right.
8. Cookies
We use essential cookies to keep you signed in and the service secure, and — only with your consent — analytics cookies that help us understand how the site is used. You can manage non-essential cookies through your browser settings and our cookie controls. Essential cookies cannot be switched off as the service will not function without them.
9. Security
We protect personal data with encryption in transit and at rest, strict role-based access controls, and a clear separation between everyday account data and sensitive KYC documents. Access to verification material is limited to our trust and safety function on a need-to-know basis and is logged.
10. Contact our DPO
For any privacy question or to exercise your rights, contact our Data Protection Officer:
- Email: dpo@parkgo.app
- Post: Data Protection Officer, ParkGo, United Kingdom
We may update this policy from time to time. When we do, we will revise the “last updated” date above and, for significant changes, let you know directly.