Privacy Policy
How we collect, use, and protect your personal data
Introduction
This Privacy Policy explains how Parking Permit Costs ("we", "us", "our") collects, uses, and protects your personal data when you use our website at parkingpermitcosts.co.uk (the "Service").
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: If you have any questions about this Privacy Policy or our data practices, please contact us at chris@Reedo.co.uk.
Last Updated: October 2026
What Data We Collect
Data You Provide
When you use our Service, we may collect the following personal data:
- Postcodes: You may enter your postcode to look up your local council and parking permit costs.
- Vehicle Registration Marks (VRM): You may optionally provide your vehicle registration mark to look up vehicle details (CO₂ emissions, fuel type) via the DVLA API.
- Vehicle Details: If you don't use VRM lookup, you may manually enter your vehicle's CO₂ emissions and fuel type.
Data Collected Automatically
When you visit our website, we automatically collect certain information:
- IP Addresses: Your IP address is processed by our hosting provider (Netlify) when your browser requests a page, and by Awin (Awin Ltd) if you accept the Advertising and affiliate category (banner images) or follow a labelled affiliate link. No Google advertising or consent script runs on our pages.
- Browser Information: Your browser type, version, and device information may be collected.
- Cookies: Our cookie banner is served from our own website and loads nothing from third parties. Strictly necessary storage is always on. YourParkingSpace boxes on council pages do not request Awin banner images until you accept the Advertising and affiliate category. Awin may set advertising cookies if you accept that category or follow the affiliate link. No Google AdSense code runs on our pages.
- Consent Preferences: Your choice is stored in a first-party cookie on this site,
cc_cookie, for 6 months. It records which categories you accepted and when, and it is not shared with anyone. - Usage Data: Information about how you interact with our website, including pages visited, may be collected by Awin if you accept the Advertising and affiliate category or click a labelled partner offer. We do not run analytics on this site.
Data We Do Not Collect
We do not collect:
- Names or contact details (unless you contact us directly)
- Payment information
- Sensitive personal data (special categories of personal data)
How We Use Your Data
Service Provision
We use your data to provide our Service:
- Postcode Lookup: We use your postcode to identify your local council and provide parking permit cost information.
- Vehicle Lookup: If you provide a VRM, your browser sends it to our site (
POST /api/vrm), which forwards it to the DVLA Vehicle Enquiry Service API for that request to retrieve vehicle details (CO₂ emissions, fuel type). We do not store or cache the full VRM. Diagnostic logs, if written, use a masked registration (for example AB***DE). Lookups are rate-limited by IP. - Calculator Functionality: We use your vehicle details and postcode to calculate estimated parking permit costs based on council pricing structures.
Advertising
Google AdSense display advertisements are not live. The site is not approved for AdSense, and no AdSense or Google consent-message script runs on our pages. The only trace is a hidden tag that links the site to our AdSense account; it loads nothing and sends no data. If AdSense is approved later, we will move to Google's own consent message and ask you again before any AdSense script loads.
Separately, some council pages show labelled YourParkingSpace affiliate advertising. We may earn a commission through Awin (Awin Ltd) if you follow a sponsored link. Affiliate links do not change council permit prices or calculator totals. Awin is a third party. Until you accept the Advertising and affiliate category in our cookie banner, the box is text and a labelled link only. Awin banner images are not requested if you reject that category or make no choice. After you accept, the banners appear. Following the link takes you via Awin's tracking URL. Awin may set advertising cookies (affiliate conversion tracking) if you accept the category or click through. You can change that choice from Cookie preferences in the footer. See our advertising and affiliates page and Awin's Privacy Policy.
Consent Management
We use our own cookie banner, built on the open-source CookieConsent library and served from our own website; no third-party consent service is involved. It appears on your first visit, before anything optional loads. Its first screen has Accept all and Reject all buttons of the same size and style, plus Manage preferences for individual choices. This allows you to:
- Accept or reject the Advertising and affiliate category, which covers Awin banner images and Awin's tracking cookies
- Change your consent decision at any time using Cookie preferences in the footer, or the control below
- Withdraw consent: the page reloads so Awin images already loaded are removed. Cookies Awin has already set on its own domain can be removed in your browser settings.
Legal Compliance
We may use your data to comply with legal obligations, including:
- Responding to legal requests or court orders
- Protecting our rights and property
- Preventing fraud or abuse
Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal bases:
- Consent: Awin banner image requests and Awin's advertising cookies are based on consent, which you give or refuse in our cookie banner. Awin banners stay off until you accept the Advertising and affiliate category. You can change that choice from Cookie preferences in the footer or the Manage cookie preferences control on this page, and you can block third-party cookies in your browser. Strictly necessary storage (your consent record and the calculator's sessionStorage) does not need consent.
- Legitimate Interests: We process your data for service provision (postcode lookup, vehicle lookup) based on our legitimate interest in providing the Service to you.
- Legal Obligation: We may process your data to comply with legal obligations, such as responding to legal requests.
Data Sharing
We may share your personal data with the following third parties:
Google AdSense (not live)
The site is not approved for AdSense and no AdSense code runs on our pages, so no data is shared with Google AdSense. If that changes, Google will act as an independent controller of AdSense data; we will update this policy and ask for your consent before any AdSense script loads. See Google's Privacy Policy.
Awin (affiliate network) and YourParkingSpace
Awin Ltd is a third-party affiliate network. Some council pages show a YourParkingSpace partner offer after the tariff table. Those boxes are marked with an Ad label next to the heading and labelled Affiliate link: we may earn a commission underneath. Outbound links are marked as sponsored for search engines. Clicking a link takes you via Awin to YourParkingSpace. Banner images load from Awin only after you accept the Advertising and affiliate category in the cookie banner. Awin may set advertising cookies or collect a click identifier so it can attribute a later purchase if you accept that category or follow the link. Awin acts as an independent controller of that tracking data. Affiliate relationships do not change council permit prices. See our advertising and affiliates page and Awin's Privacy Policy.
Cookie banner (CookieConsent)
Our cookie banner is the open-source CookieConsent library (MIT licence), copied onto and served from our own website. It sends nothing to any third party. Your choice is kept in the cc_cookie cookie in your browser.
DVLA Vehicle Enquiry Service API
If you provide a VRM, your browser sends it to our site (POST /api/vrm), which forwards it to the DVLA Vehicle Enquiry Service API for that request. We do not store or cache the full VRM. Diagnostic logs, if written, use a masked registration (for example AB***DE). Lookups are rate-limited by IP. For more information, see the DVLA API Terms and Conditions.
Netlify (Hosting Provider)
Our website is hosted on Netlify, which may collect your IP address and usage data in server logs. For more information, see Netlify's Privacy Policy.
Our domain name's DNS is managed by Cloudflare. Cloudflare does not handle requests for our pages, and it sets no cookies and adds no scripts.
Data Processors
We may share your data with service providers who act as data processors on our behalf, including:
- Hosting providers (Netlify)
These service providers are contractually obliged to process your data only for the purposes we specify and in accordance with this Privacy Policy.
Independent Controllers
Some third parties decide for themselves how they use the data they collect. They are independent controllers, not our processors, and their own privacy policies apply:
- Awin, for affiliate tracking, if you accept the Advertising and affiliate category or follow a labelled partner offer
Legal Requirements
We may disclose your personal data if required by law or in response to valid legal requests, such as court orders or government investigations.
Data Retention
We retain your personal data for the following periods:
- VRM Data: We do not store or cache the full VRM. Your browser sends it to our site (
POST /api/vrm), which forwards it to DVLA for that request. If our function writes a diagnostic log, the registration is masked (for example AB***DE). - Postcode Data: Postcodes entered in the calculator are stored in your browser's sessionStorage for that session and cleared when the session ends.
- Cookies: Awin may set advertising cookies if you accept the Advertising and affiliate category (banner images) or click a labelled partner offer. No AdSense cookies are set: AdSense is not live.
- Consent Preferences: Your choice is kept in the
cc_cookiecookie for 6 months, after which the banner asks again. You can change or withdraw it at any time using Cookie preferences in the footer or the manage-preferences control on this page. - Server Logs: Server logs containing IP addresses are typically retained for 30-90 days by our hosting provider (Netlify).
We will delete your personal data when it is no longer necessary for the purposes for which it was collected, unless we are required to retain it for legal purposes.
Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights regarding your personal data:
- Right to Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request that we delete your personal data in certain circumstances.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.
- Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw your consent at any time. You can do this by managing your cookie preferences.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have violated your data protection rights.
To exercise any of these rights, please contact us at chris@Reedo.co.uk.
For more information about your rights, please see the ICO's guidance on individual rights.
International Transfers
Some of our service providers, including Netlify and Awin, may transfer your personal data outside the UK and European Economic Area (EEA).
When we transfer your data outside the UK/EEA, we ensure that appropriate safeguards are in place to protect your data, including:
- Standard contractual clauses approved by the UK government
- Adequacy decisions by the UK government
- Other appropriate safeguards as required by UK GDPR
For more information about international transfers, please see Netlify's Privacy Policy and Awin's Privacy Policy.
Data Security
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it, including:
- Encryption: We use HTTPS encryption to protect data in transit.
- Secure Hosting: Our website is hosted on Netlify, which implements industry-standard security measures.
- Access Controls: Access to personal data is restricted to authorized personnel only.
- PII Redaction: We use PII (Personally Identifiable Information) redaction in logs to protect your privacy.
- No full VRM storage: We do not store or cache the full VRM. Your browser sends it to our site (
POST /api/vrm), which forwards it to DVLA for that request. Diagnostic logs, if written, use a masked registration (for example AB***DE). Lookups are rate-limited by IP.
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have collected personal data from a child under 13, please contact us at chris@Reedo.co.uk.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date at the top of this Privacy Policy
- Posting a notice on our website if the changes are material
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: chris@Reedo.co.uk
- Data Controller: Parking Permit Costs
If you wish to exercise your rights under UK GDPR, please contact us at chris@Reedo.co.uk.
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- ICO Website: https://ico.org.uk
- ICO Helpline: 0303 123 1113