1. Introduction
Appeality Ltd (“we”, “our”, “us”) provides administrative support services to help drivers challenge Penalty Charge Notices (“PCNs”) within the United Kingdom. We are committed to protecting your privacy and to complying with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and other applicable UK data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Appeality website, mobile application, and related services.
By using Appeality, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.
2. Data Controller
The data controller responsible for your personal data is:
3. Personal Data We Collect
We may collect the following categories of personal data in the course of providing our services.
A. Information You Provide Directly
- Full name
- Postal address or correspondence address, where included in your PCN or uploaded materials
- Email address
- Vehicle registration number
- PCN details, including PCN number, contravention code, location, date/time, and council name
- Appeal statements, explanations, and supporting comments
- Supporting evidence such as photos, PDFs, screenshots, and videos
- Payment information processed securely by third-party payment providers
B. Automatically Collected Data
- Device and browser information
- IP address
- Session identifiers
- Application and website usage data
- Cookie and tracking data, where applicable
C. OCR and Document Processing Data
When you upload a PCN or related document, our systems may extract relevant data such as:
- PCN number
- Vehicle registration
- Contravention code
- Location
- Date and time
- Council identification
- Address details included on the uploaded document
This may be processed using third-party OCR services. We do not intentionally collect special category personal data unless it is voluntarily included by you within the documents you submit.
4. How We Use Your Personal Data
A. Service Delivery
- Reading and extracting PCN details using OCR tools
- Drafting and preparing your appeal
- Using your address where needed for case identification and representation handling
- Submitting representations to the relevant authority
- Managing your account and service communications
- Providing updates on the status of your case
B. Payment and Account Management
- Processing payments
- Managing subscriptions or billing arrangements
- Fraud prevention and account security
- Responding to billing enquiries
C. Legal and Compliance Purposes
- Maintaining records required by law or regulation
- Responding to lawful requests from authorities or regulators
- Security monitoring, logging, and audit purposes
D. Service Improvement
- Analytics and performance monitoring
- Improving platform usability and functionality
- Troubleshooting technical issues
- Monitoring trends and service quality
E. Communications
- Sending operational updates relevant to your case or account
- Sending optional marketing communications where you have opted in
5. Lawful Basis for Processing
We rely on one or more of the following lawful bases under UK GDPR:
- Contractual necessity - to provide the Appeality service you request
- Legitimate interests - to improve, secure, and operate our platform responsibly
- Consent - for cookies, analytics, and optional communications where required
- Legal obligation - where we must retain or disclose data to comply with applicable law
7. Data Retention
We retain personal data only for as long as reasonably necessary for service delivery, compliance, and legitimate business purposes.
- PCNs, appeal correspondence, and uploaded documents: typically retained for 12 months after case closure
- Address data: retained only as part of appeal documentation and deleted in line with the relevant retention period unless legally required otherwise
- Account information: retained while your account is active and for up to 24 months afterwards
- Payment card details: not stored by Appeality, as payment processing is handled by third-party providers
- Analytics logs: typically retained for up to 26 months, depending on the service configuration
You may request earlier deletion where applicable, subject to legal, regulatory, or contractual requirements.
8. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- HTTPS/TLS encrypted transmission
- Access control and authentication safeguards
- Secure storage practices for uploaded documents
- Firewall and security monitoring measures
- Regular security reviews and data minimisation practices
No online system can be guaranteed to be completely secure. However, we take reasonable steps designed to reduce the risk of unauthorised access, disclosure, alteration, or loss.
9. International Data Transfers
Some third-party providers may process data outside the United Kingdom. Where international transfers occur, we take steps to ensure that appropriate safeguards are in place, including reliance on UK adequacy regulations, standard contractual clauses, or equivalent protections where required.
10. Your Rights
Under UK GDPR, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal data
- Restrict or object to certain processing
- Request portability of data where applicable
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us at privacy@appeality.co.uk.
11. Children’s Data
Appeality is not intended for users under the age of 16. We do not knowingly process personal data belonging to children under 16.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page together with an updated “Last updated” date.
13. Contact Us
For privacy or data protection enquiries, please contact: