Next Gen Parking Limited
Version 1.3 | Updated: 29 September 2026 | Classification: Public
Version note (v1.3): This update clarifies website and business enquiry handling and revises privacy information where operational details have not yet been verified.
Contents
- Introduction
- Policy Statement
- Scope
- Data We Collect
- Lawful Basis for Processing
- How We Use Personal Data
- DVLA KADOE Data
- Data Sharing
- Data Retention
- Data Security
- Your Rights
- Cookies & Website Data
- Changes to This Policy
- Contact & Complaints
- Document Control
1. Introduction
Next Gen Parking Limited is the intended operator of the parking services described in this policy. “We”, “us” and “our” refer to that intended operator. This policy describes how personal data is handled through the website and business enquiry channels, and how it will be handled in connection with the parking services when they are operational. We are committed to protecting the privacy and personal data of individuals whose information we process.
This Privacy Policy explains how personal data is handled through our website and business enquiries, and how it will be handled when we provide parking, bay monitoring, ANPR and site-management services. It applies to website visitors and people who submit business enquiries now, and, when parking services are operational, to motorists, vehicle keepers, site users and others whose data is processed in connection with those services.
Next Gen Parking Limited is the intended data controller for the parking services described. Its role may differ by processing activity and, in some circumstances, it may act as a processor for a client. The applicable role will be confirmed for each service before personal data is processed. The services are subject to:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018 (DPA 2018)
- Privacy and Electronic Communications Regulations 2003, as amended (PECR)
- DVLA Keeper at Date of Event (KADOE) scheme
- Relevant sector code of practice, where applicable
2. Policy Statement
Next Gen Parking processes personal data lawfully, fairly, and transparently. We collect only what is necessary for legitimate parking enforcement and site operation purposes. We do not use personal data for commercial profiling, marketing, or any purpose beyond those defined in this policy.
Our commitment: Technology-first does not mean data-first. We use data precisely, proportionately, and only for the purposes for which it is lawfully collected.
3. Scope
This policy applies to personal data processed in connection with:
- Parking enforcement activity at all sites managed by Next Gen Parking
- Vehicle Registration Mark (VRM) data captured via ANPR cameras and bay monitoring systems
- Registered keeper information that may be requested from the DVLA where lawful and necessary in connection with an alleged parking incident
- Data provided by motorists in connection with PCNs, appeals, and complaints
- Case information handled through parking management systems, including ZatPark where used
- Data shared with landowner clients and authorised third parties
- Data collected through our website, including cookies and similar technologies
- General and commercial enquiries submitted through our website Contact form and related correspondence
4. Data We Collect
4.1 Vehicle & Event Data
| Data Type | Source | Purpose |
|---|---|---|
| Vehicle Registration Mark (VRM) | ANPR / bay cameras | Enforcement identification |
| Entry and exit timestamps | ANPR system | Duration calculation |
| Bay occupancy data | Bay monitoring cameras | Bay-specific enforcement |
| Vehicle fuel type, where used | Vehicle information source, where applicable | EV bay management, where applicable |
| CCTV / camera imagery | Site cameras | Evidence capture |
| Site location and event records, where used | Parking management system | Case management |
4.2 DVLA Keeper Data
- Name and postal address of the registered keeper, where provided by the DVLA
- Requested only where lawful and necessary in connection with an alleged parking incident
- Used to contact the registered keeper and administer the relevant matter
- Subject to applicable DVLA requirements and arrangements (see Section 7)
4.3 Motorist-Provided Data
- Name, address, email, and telephone number (where provided during appeal or complaint)
- Appeal and complaint correspondence
- Supporting documentation submitted by the motorist
- Payment details may be processed by the payment service used; further information will be provided through that service when it is in use
4.4 Technical & System Data
- System audit logs and enforcement workflow records
- Operational or system records used in relevant services, where applicable
- Permit and authorisation data where applicable
4.5 Website & Browsing Data
When you access the website at nextgen-parking.co.uk, the web server and hosting provider may process technical access information needed to deliver and secure the site. This may include an IP address, browser or device information, operating system, requested pages, referral information where provided, and request timestamps. The website review did not establish the hosting log fields, retention period, or whether approximate location is derived from IP addresses.
Website analytics technologies may be used to understand how visitors use the site and to help improve its performance and accessibility. Analytics may involve cookies or similar technologies. The specific provider and technologies depend on the website configuration and are not named here. Where consent is required, non-essential analytics cookies or similar technologies are used only after the visitor has made that choice. See Section 12 for how choices are managed.
Website browsing data is not used to identify individual motorists for enforcement purposes and is kept separate from enforcement case data.
4.6 Website & Business Enquiries
When you use the Contact form for a general or commercial enquiry, we require your name, email address, enquiry type, message about your site or requirement, and acknowledgement that you have read this Privacy Policy. Company / Organisation and telephone number are optional. Enquiry types include parking management, landowner enquiries, technology, partnership, general business enquiries and other enquiries.
You may include additional information in your message. Please do not include sensitive personal information unless it is necessary to explain your enquiry. The general enquiry form is not intended to collect special-category information.
The Contact form is not for Parking Charge Notice appeals or complaints. Those are separate processes. Motorists can find the relevant routes through Motorist Services, including appeals, Motorist Help and the Complaints Policy.
Contact-form submissions are stored within the website form system in WordPress. An email notification containing the submitted fields is sent to hello@nextgen-parking.co.uk. Information may also be held in authorised business email correspondence and related business records arising from the enquiry. Submitting the form does not sign you up to marketing.
5. Lawful Basis for Processing
| Processing Activity | Lawful Basis (UK GDPR Art. 6) |
|---|---|
| Issuing Parking Charge Notices | Legitimate Interests (Art. 6(1)(f)) |
| Requesting DVLA keeper data, where applicable | Legitimate Interests; subject to applicable DVLA requirements |
| Processing PCN appeals | Legitimate Interests; Legal Obligation |
| Handling complaints | Legitimate Interests; Legal Obligation |
| Compliance reporting under applicable sector requirements, where required | Legal obligation where applicable |
| Client site performance reporting | Contract (Art. 6(1)(b)) |
| CCTV and ANPR monitoring | Legitimate Interests |
| EV bay type validation | Legitimate Interests |
| General website and business enquiries | Legitimate interests (Art. 6(1)(f)) to receive and respond to enquiries and maintain appropriate correspondence; Art. 6(1)(b) where an individual asks us to take steps before a contract or processing is necessary for a contract with them; Art. 6(1)(c) only where processing is necessary to meet a legal obligation |
| Non-essential website cookies or similar technologies (including analytics, where used) | Consent where required by PECR; UK GDPR Art. 6(1)(a) where applicable |
| Strictly necessary website cookies, if used | Not consent-based where necessary for a service requested (PECR reg. 6(4) exemption) |
Legitimate interests: Where we rely on this basis, we consider the purpose of the processing, its impact on individuals, their reasonable expectations and their rights. We will provide further information about the relevant interests where required.
For general and commercial enquiries, our legitimate interests are receiving and responding to relevant enquiries, discussing potential services or working relationships, and maintaining appropriate business correspondence. We use information relevant to those purposes and take account of people’s rights and reasonable expectations.
6. How We Use Personal Data
We use personal data only for the following purposes:
- Managing parking on behalf of landowners and site operators
- Identifying vehicles in contravention of parking terms and conditions
- Issuing and administering Parking Charge Notices (PCNs)
- Requesting registered keeper information from the DVLA where lawful and necessary in connection with an alleged parking incident
- Processing appeals against PCNs fairly and transparently
- Handling complaints relating to our services
- Providing performance reporting to our clients
- Meeting applicable sector code-of-practice requirements, where applicable
- Maintaining full audit trails for regulatory purposes
- Using website analytics technologies, where implemented, to understand and improve site performance and accessibility; non-essential technologies are used only with consent where required
- Receiving and responding to general and commercial enquiries from prospective customers, landowners, partners and other business contacts
- Understanding the enquiry, discussing parking-management requirements, technology or potential partnerships, and communicating with the person or organisation making it
- Using AI-assisted analysis in Smart Route Mapping to support operational planning and patrol prioritisation; it does not autonomously decide whether to issue a Parking Charge Notice
- Taking steps requested by an individual before entering into a contract, where applicable, and maintaining appropriate business correspondence and records
- Establishing, exercising or defending legal rights where necessary
We do not use personal data for:
- Marketing or promotional communications to motorists
- Profiling beyond what is strictly necessary for enforcement
- Any purpose not directly related to legitimate parking management
- Sale or transfer to third parties for commercial purposes
7. DVLA Keeper Data
Where lawful and necessary in connection with an alleged parking incident, we may request registered keeper information from the DVLA in accordance with applicable requirements and arrangements, including the KADOE scheme where applicable.
Keeper information may be used to contact the registered keeper about the alleged incident and administer parking management or enforcement. A DVLA keeper-data request does not by itself establish who was driving or that keeper liability applies. Any liability depends on the circumstances, the notices issued and the applicable law.
Keeper information is not used for marketing. It is handled only for the relevant parking-management or enforcement purpose and retained in accordance with Section 9.
8. Data Sharing
8.1 Authorised Recipients
| Recipient | Purpose | Basis |
|---|---|---|
| DVLA | Keeper data requests, where lawful and applicable | Applicable DVLA requirements and arrangements |
| Independent Appeals Service, where applicable | Independent appeal consideration | Applicable code and appeal arrangements |
| Debt recovery agents | Recovery of unpaid PCNs where applicable | Legitimate Interests |
| Legal advisors | Defence of claims; compliance advice | Legal Obligation / Legitimate Interests |
| ZatPark, where used | Case management and PCN administration | As applicable to the service and processing arrangement |
| Vehicle information service providers, where used | EV bay management, where applicable | As applicable to the service and processing arrangement |
| Landowner clients | Site management reporting | Contract |
| Website, hosting, form, email and IT/security service providers, where needed | Operating and securing the website, processing and storing enquiry submissions, and delivering enquiry notifications and related correspondence | Legitimate interests (as applicable); processor acting on our instructions |
| Analytics provider, if implemented | Website usage statistics to help assess and improve site performance and accessibility | Consent where required (PECR / UK GDPR) |
8.2 Data Processor Agreements
Where a service provider processes personal data on our behalf, we use appropriate contractual terms and require the provider to handle the information in line with our instructions and applicable data protection requirements. Website, form, email and IT/security providers may support enquiry handling as described in Section 4.6.
8.3 What We Do Not Do
- We do not sell personal data to any third party
- We do not share personal data for marketing purposes
- Where personal data is transferred internationally, we will use a transfer mechanism and safeguards required by applicable data protection law
- We do not share KADOE data with any party other than as required for enforcement
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this policy, taking account of the nature of the information, the relevant matter, applicable legal and regulatory requirements, and the need to establish, exercise or defend legal claims. The applicable retention period depends on the service and records involved.
| Data Type | Retention Approach |
|---|---|
| PCN, payment, appeal, complaint and dispute records | For as long as reasonably necessary to manage the charge, payment, appeal, complaint, dispute or legal claim, taking account of applicable limitation, regulatory, accounting and record-keeping requirements. |
| DVLA keeper information | For as long as reasonably necessary for the relevant alleged incident and related parking management or enforcement, subject to applicable DVLA requirements. |
| ANPR and camera imagery | For as long as reasonably necessary to review parking activity or support a case, then deleted or overwritten in accordance with the applicable process. |
| Website and browsing data | For as long as reasonably necessary to operate, secure and assess the website. |
| General website and business enquiries and related correspondence | For as long as reasonably necessary to respond to the enquiry and maintain related business records, taking account of applicable legal, accounting or reporting requirements. |
| System and audit logs | For as long as reasonably necessary for service operation, compliance and security. |
| Cookie and privacy preferences | For as long as needed to record and respect your choices, subject to applicable requirements. |
When information is no longer required, it will be securely deleted, anonymised or overwritten as appropriate.
10. Data Security
We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure. Measures are selected for the systems and services used and may include access controls, staff guidance and secure handling practices. If a personal data breach occurs, we will assess and respond in accordance with applicable legal requirements, including notifying the ICO and affected people where required.
11. Your Rights
Under UK GDPR, you have the following rights:
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of personal data we hold about you | Written request to our Data Contact |
| Rectification | Request correction of inaccurate or incomplete data | Written request |
| Erasure | Request deletion where data is no longer necessary | Written request (subject to legal obligations) |
| Restrict Processing | Request we limit how your data is used | Written request |
| Object | Object to processing based on legitimate interests | Written request |
| Data Portability | Receive data in a structured, machine-readable format | Written request |
| Withdraw Cookie Consent | Withdraw consent to non-essential cookies at any time | Cookie preference centre, when available |
| Complain | Lodge a complaint with the ICO | ico.org.uk |
We will respond to rights requests within one calendar month of receipt.
12. Cookies & Website Data
This section explains how the website at nextgen-parking.co.uk may use cookies and similar technologies. It is governed by the Privacy and Electronic Communications Regulations 2003, as amended (PECR), alongside UK GDPR, and applies to all visitors regardless of whether they are a motorist, landowner, or general visitor.
12.1 What Are Cookies
Cookies are small text files placed on your device when you visit a website. They allow a website to recognise your device, remember information about your visit, and improve your experience. Similar technologies can include local storage, pixels, and tags.
12.2 Our Approach to Consent
Standard website analytics may use cookies or similar technologies to measure site usage and help improve our services. Where consent is required, non-essential analytics cookies or similar technologies are used only after you choose to allow them. Before such cookies are used, a consent mechanism will be provided so visitors can reject optional categories, choose among them, and change their choices later. Access to general site content is not conditional on accepting optional cookies.
12.3 Cookie Categories
- Strictly necessary: required for core website functionality, such as security or remembering a cookie choice. Whether and which such cookies are used on this site has not been fully verified.
- Performance & analytics: standard analytics cookies or similar technologies may help us understand website use and improve performance and accessibility. Where consent is required, these non-essential technologies are used only after consent. The specific provider, cookies and durations depend on the configuration in use and are reflected in the cookie information.
- Functionality: may remember choices, such as regional or accessibility settings. No such cookie was verified in this review.
- Targeting / marketing: no advertising or retargeting cookie was identified in the website scripts reviewed.
12.4 Cookie Inventory
The exact names, providers, purposes and durations of cookies and similar storage depend on the website configuration in use. The cookie information and preference controls identify the optional technologies currently in use and are updated when that configuration changes. No particular analytics vendor or cookie name is specified by this policy.
12.5 Third-Party Cookies
Where an analytics or other third-party service is used, its cookies and data practices are assessed and described in the website cookie information. Any non-essential cookies or similar technologies are used only after consent where required. This policy does not name an analytics provider. We do not use advertising or cross-site tracking cookies.
12.6 Managing Cookies
Where consent is required for non-essential cookies or similar technologies, a consent mechanism will be provided so you can make and later change your choices. You can also control or delete cookies through your browser settings; instructions vary by browser and are available from your browser’s help documentation. Blocking strictly necessary cookies may affect website functionality.
12.7 Relationship to This Policy
This section forms our Cookie Policy in full. If the website separately displays a standalone Cookie Policy page for ease of reference, that page will mirror this section and will not introduce different terms. Website data is not used to identify individual motorists for parking enforcement purposes and is held separately from enforcement case records.
13. Changes to This Policy
This Privacy Policy will be reviewed when there are material changes to our data processing activities or website cookie configuration, or when applicable legislation changes. The current version is available on our website and upon request.
14. Contact & Complaints
Data Protection Enquiries
Next Gen Parking Limited (intended controller for the parking services described)
privacy@nextgen-parking.co.uk
General Enquiries
hello@nextgen-parking.co.uk
General enquiries may also be sent through the Contact form. This is not the channel for Parking Charge Notice appeals or complaints. For those matters, use Motorist Services and its relevant appeal, Motorist Help and complaints routes.
ICO (Information Commissioner’s Office)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | ico.org.uk | 0303 123 1113
15. Document Control
| Field | Detail |
|---|---|
| Document Title | Privacy Policy |
| Version | 1.3 |
| Supersedes | Version 1.2 |
| Review Frequency | When material changes to data processing or applicable requirements make a review necessary |
| Regulatory Reference | UK GDPR; DPA 2018; PECR 2003 (as amended); applicable DVLA requirements; relevant sector code of practice, where applicable |
Next Gen Parking Solutions — Technology-first. Compliance-led. Fair by design.