Privacy Policy

Who we are

Airport Parking Exchange (“we”, “us”, “our”) operates airportparkingexchange.co.uk, a marketplace that lets travelers compare and book airport parking with independent parking operators.

For any question about this policy or your personal data, contact us at ops@airportparkingexchange.com.

What data we collect

• Booking details — when you book parking: your name, email address, phone number, vehicle make/model and registration plate, and your chosen drop-off and pick-up times.
• Payment data — payments are taken and processed directly by Stripe. We never see or store your full card number; we keep only the resulting booking reference and payment status.
• Check-in / check-out photos — parking operators photograph your vehicle at drop-off and pick-up as proof of its condition. These photos are stored and emailed to you as a record; they are not published or shown to anyone other than you and the operator handling your booking.
• Account data — if you sign in to the operator or admin console: your email, name and a securely hashed password (we never store passwords in plain text).
• Operator applications — if you apply to list a parking lot: your company name, contact email, and the other details you submit on the application form.
• Session cookie — a single strictly-necessary cookie that keeps you signed in to the operator/admin console. See “Cookies” below.
• Technical data — standard web server logs (IP address, browser user-agent, request timestamps) kept briefly for security and abuse prevention.

How we use your data

We use personal data only for the following purposes:

• To create and manage your parking booking, and to pass the booking details the operator needs to the operator fulfilling it (this is necessary to perform our contract with you).
• To send booking confirmations, check-in/check-out photo emails, and operator-application correspondence (contractual necessity).
• To process payment via Stripe (contractual necessity).
• To secure the operator/admin console, prevent fraud, and investigate abuse (legitimate interest).
• To respond to support enquiries you send us.

We do not sell personal data, and we do not use it for advertising or profiling. We do not currently run marketing or analytics cookies.

Who we share it with

• The parking operator you book with — enough booking and vehicle detail for them to provide the parking service.
• Stripe — payment processing. See Stripe’s privacy policy.
• Resend — sends the transactional emails described above (booking confirmations, check-in/out photos, application receipts) on our behalf.
• Our hosting/database provider — stores booking and account data on our behalf under contract; they do not use it for their own purposes.

Some of these providers may process data outside the UK/EEA; where they do, they provide appropriate safeguards (such as Standard Contractual Clauses).

Cookies

We use one strictly-necessary cookie (aex_session) to keep operator/admin console users signed in. It is not used for tracking or advertising, and under UK PECR rules strictly-necessary cookies like this don’t require consent. We don’t currently set any analytics, marketing or third-party tracking cookies.

How long we keep data

Booking records (including check-in/check-out photos) are kept for as long as needed to resolve disputes and meet our accounting/tax obligations, then deleted. Account sessions expire after 30 days of inactivity. Server logs are kept briefly and rotated. If you’d like data deleted sooner, contact us and we’ll do so unless we’re required to keep it (e.g. for tax records).

Security

Passwords are hashed (never stored in plain text), traffic to the site is encrypted (HTTPS/HSTS), and access to booking/operator data in the operator and admin consoles is restricted to authenticated staff whose access is re-checked on every request. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you and get a copy of it (access).
• Ask us to correct inaccurate data (rectification).
• Ask us to delete your data, subject to legal retention requirements (erasure).
• Ask us to restrict or object to certain processing.
• Receive your data in a portable format.
• Complain to the Information Commissioner’s Office (ICO) if you think we’ve mishandled your data.

To exercise any of these rights, email ops@airportparkingexchange.com.

Children

This site is not directed at children, and we don’t knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time; the “last updated” date at the top of this page will always reflect the latest version.