Privacy Policy

1. Data controller

ClearTicket is the data controller responsible for your personal data. If you have questions about how we handle your data, contact us at privacy@clearticket.co.uk

2. What data we collect

We collect the following information when you use ClearTicket:

• Email address — for account creation and authentication
• Case details — the parking operator, PCN reference number, ticket dates, location, and your description of what happened
• Triage answers — your responses to our assessment questions
• Generated drafts — the appeal letters we create for you

3. How we use your data

• Providing the service: We use your case details to assess your ticket and generate appeal letters.
• Improving triage accuracy: We retain anonymised case data (with all personal information removed) to calibrate and improve our assessment models.
• Service communications: We may send you follow-up emails about your case status (e.g., reminders about appeal deadlines).

4. Legal basis for processing

• Contract performance: Processing your case details to provide the triage and drafting service you requested.
• Legitimate interest: Using anonymised data to improve triage accuracy, which benefits all users without impacting your privacy.

5. Third-party processors

We use the following third-party services to deliver ClearTicket:

• LLM provider — generates appeal letter text. All personally identifiable information is stripped from the data before it is sent to the LLM. The provider does not receive your name, email, or PCN reference.
• Email provider — sends magic link authentication emails and service communications.
• Vercel — hosts the application (EU region).
• PostgreSQL database — stores your account and case data.

6. Data retention

• Active cases: Retained while your account exists.
• Anonymised case data: Retained indefinitely for triage calibration. This data cannot be linked back to you.
• After account deletion: Your personal data and case details are deleted. Anonymised data already derived from your cases remains.

7. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data (right to be forgotten)
• Data portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Restriction — ask us to restrict processing of your data

To exercise any of these rights, email data@clearticket.co.uk. We will respond within 30 days.

8. Data sharing

We do not sell your data to third parties. Parking operators never see user-level data. Your case information is only shared with third-party processors as described in section 5, and only to the extent necessary to provide the service.

9. Cookies

We use only functional cookies required for authentication (your session). We do not use tracking cookies or advertising cookies. Our analytics provider (Plausible) does not use cookies. For more details, see our Cookie Policy.

10. Children

ClearTicket is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

11. International transfers

Your data is processed and stored within the EU/UK (Vercel EU region). We do not transfer your personal data outside of the EU/UK unless required by a processor with appropriate safeguards in place.

12. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will update the date at the top of this page. Your continued use of ClearTicket constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries, contact us at privacy@clearticket.co.uk

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk