PRIVACY NOTICE

ABANDONDED VEHICLES

Introduction  

Parking Control management (UK) Ltd is a car park management company, who manage parking on behalf of private landowners. When processing your personal information, PCM is defined as the ‘processor” and the Landowner is defined as the “controller,” as per UK data protection laws.

Who we are  

We are Parking Control management (UK) Ltd are registered at Companies House our company registration number is 04395994. Our Registered offices are located at 49 Station Road Polegate BN26 6EA.

We are registered as a Data Controller with the Information Commissioners Office (ICO) and our reference number is Z8900765.

Why do we use your information?

We use personal information to:

• Investigate reports of potentially abandoned vehicles
• Identify the registered keeper or other responsible person
• Determine whether a vehicle meets the relevant definition of an abandoned vehicle
• Contact the registered keeper or other relevant person
• Issue notices and correspondence
• Arrange the removal, storage and disposal of vehicles
• Maintain records of investigations and enforcement activity
• Respond to enquiries and complaints
• Prevent and detect crime, where applicable
• Protect public safety and the local environment
• Exercise our statutory functions and legal powers
• Defend or pursue legal claims where necessary

How personal information is collected

We may obtain information:

• Directly from you
• From a person reporting a potentially abandoned vehicle
• From our own inspections and investigations
• From photographs or other evidence
• From vehicle removal, storage or disposal contractors
• From other public authorities or organisations where there is a lawful basis for sharing the information

The type of personal information collected

Depending on the circumstances of a case, we may collect and process:

• Your name and contact details
• Vehicle registration number
• Vehicle make, model, colour and identifying features
• Vehicle ownership or registered keeper information
• Vehicle location and photographs
• Information relating to reports or complaints about a vehicle
• Correspondence and communications with you
• Information obtained from relevant vehicle, licensing or enforcement databases
• Information about the condition, use or history of the vehicle
• Information relating to the removal, storage or disposal of the vehicle
• Information provided by other organisations or members of the public where relevant to the investigation

We will only collect information that is relevant and necessary for dealing with the abandoned vehicle.

Lawful Basis

The lawful basis relied upon for processing your personal information:

Article 6(1)(e) of the UK GDPR – public task, where the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

Where applicable, we may also rely on other lawful bases, including:

• Article 6(1)(c) – legal obligation
• Article 6(1)(d) – vital interests, where applicable
• Article 6(1)(f) – legitimate interests, where appropriate and legally available

The specific lawful basis will depend on the circumstances and the legal function being carried out.

International transfers

For us to perform the normal functions of our company and in providing you with goods and services, in some instances we may need to send personal data outside the UK. Where this is the case, we either transfer to a country that has been deemed “adequate” for personal data transfers by the UK government (such as one of the countries in the European Economic Area) or we put in place approved international data transfer contract clauses (such as the UK’s International Data Transfer Agreement to the EU Commission Standard Contractual Clauses).

How your personal information is stored

We have robust information security management systems in place to protect your personal data. We take the security of your information seriously and have implemented appropriate technical and organisational security measures to protect it against any unauthorised or unlawful processing and against any accidental loss, destruction, or damage.

Personal Data is held in encrypted 3^rd party ‘Cloud’ Servers.

Access to information is restricted to staff and authorised contractors who need it for their role.

Automatic decision-making and online profiling

Automated decision making is not used in the process.

 Who is data shared with?

Where necessary and lawful, we may share information with:

• The DVLA
• Police forces
• Other local authorities and public bodies
• Vehicle removal and recovery contractors
• Vehicle storage and disposal contractors
• Environmental or regulatory authorities
• Legal advisers and professional advisers
• Parking management software
• Courts, tribunals, or other bodies where required
• Other organisations where sharing is necessary to fulfil a statutory function or legal obligation

We will only share information where there is an appropriate lawful basis, and the disclosure is necessary and proportionate.

International transfers

For us to perform the normal functions of our company and in providing you with goods and services, in some instances we may need to send personal data outside the UK. Where this is the case, we either transfer to a country that has been deemed “adequate” for personal data transfers by the UK government (such as one of the countries in the European Economic Area) or we put in place approved international data transfer contract clauses (such as the UK’s International Data Transfer Agreement to the EU Commission Standard Contractual Clauses).

How your personal information is stored

Your information is securely stored in cloud provision based in the UK.

How long is personal information stored

We will retain information for as long as it is necessary to manage the abandoned vehicle case and meet our legal, regulatory, operational and accountability requirements. Our retention period typically 6 years plus 1 years and will depend on the type of information and the circumstances of the case.

Your rights

Depending on the circumstances and the lawful basis for processing, you may have rights under data protection law, including:

• The right to be informed about how your information is used
• The right to request access to your personal information
• The right to request correction of inaccurate information
• The right to request erasure in certain circumstances
• The right to request restriction of processing in certain circumstances
• The right to object to certain processing
• Rights relating to automated decision-making and profiling, where applicable

Further information about your rights can be obtained from dpo@pcm-uk.co.uk.

How to complain

If you have any concerns about the use of your personal information, you can make a complaint to dpo@pcm-uk.co.uk.

You can also complain to the ICO (Information Commissioners Office) if you are unhappy with how your data has been used.

The ICO’s address is:

Information Commissioner’s Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

Changes to this Privacy Notice

We may update this privacy notice from time to time to reflect changes to legislation, our procedures, or the way we process personal information.

This Privacy Notice was last updated on the 28 August 2026.