Ghost Park
privacy notice.
Who we are
Ghost Park Ltd, company number 17425932, is a private limited company registered in England and Wales. Ghost Park Ltd is the controller responsible for the personal information described in this notice.
How to contact us
Email hello@ghostpark.app, use our contact form, or write to: Ghost Park Ltd, 195–197 Wood Street, Suite RA01, London, United Kingdom, E17 3NU. This is our registered office and is not advertised as a customer-service or visitor location.
Personal information we collect and how we collect it
We collect information you provide directly through website forms and correspondence. Depending on your request, this can include your name, email address, organisation, enquiry type and content, beta-request details, vehicle registration mark, parking or session information, notice/reference numbers, location, dates and times, and payment-related information needed to investigate an enquiry. We also receive limited technical information when you use the website, such as IP address, timestamps, security events, server logs and browser/device details where our infrastructure records them.
Do not provide full payment-card numbers, card security codes, unnecessary information about another person, or special-category information unless it is genuinely necessary and we have specifically asked for it.
Why we use personal information, lawful bases and retention
| Purpose and data | Why we use it | Lawful basis and legitimate interest | Recipients and transfers | Retention |
|---|---|---|---|---|
| Contact enquiries Name, email, organisation, enquiry content and necessary technical metadata. | Respond to enquiries and manage prospective customer, partner and business communications. | Steps requested before a possible contract; and legitimate interests in communicating about and developing our business. | Website hosting, email and authorised support providers. International transfers may apply as described below. | Up to 24 months after the last meaningful interaction, unless an active matter or legal obligation requires longer. |
| Beta and early access Name, email, request details and related communications. | Manage expressions of interest and contact you about the beta or early-access programme you requested. | Your requested steps and our legitimate interests in organising and improving testing. A beta request is not blanket consent for unrelated marketing. | Hosting, email and approved programme/support providers. | Until withdrawal or 24 months after the last meaningful interaction, whichever occurs first, unless you join an active programme. |
| Parking, payment, notice or session support Contact details, vehicle registration, reference numbers, session, location, date/time, necessary payment-related details and information you submit. | Investigate and respond to the support matter, maintain an audit trail and establish, exercise or defend legal claims where necessary. | Steps requested by you; legitimate interests in resolving support and protecting legal rights; and legal obligation where applicable. | Hosting, email, support, parking/payment partners, professional advisers, insurers and public bodies where necessary and lawful. | Normally 24 months after closure. Relevant records may be retained longer where reasonably necessary for an active dispute, legal claim or statutory requirement. |
| Website and service security IP address, timestamps, security events, server logs and browser/device details where collected. | Protect the service, prevent abuse, investigate incidents and maintain availability. | Legitimate interests in operating a secure and reliable service and protecting users and Ghost Park Ltd. | Hosting, security and infrastructure providers; law-enforcement bodies where required. | Operational security and server logs: normally 90 days. Incident evidence may be retained for the life of the incident and related legal requirements. |
| Cookie and consent records Consent choices, consent version and timestamp. | Remember and manage your choices and demonstrate consent where required. | Compliance with PECR/data-protection obligations and legitimate interests in maintaining an auditable consent system. | Ghost Park Ltd and the website hosting provider. | Approximately 180 days, after which a new choice is requested. A material consent-version change can cause an earlier request. |
| Analytics readiness Data depends on any future configured provider. | Optional analytics may help us understand and improve visits. | Consent where required. No analytics technology is currently active. | Any provider will be identified in the Cookie Policy and assessed before activation. | Provider-specific and documented before activation. |
| Marketing technology readiness Data depends on any future configured provider. | Optional campaign, conversion or advertising measurement. | Consent where required. No marketing or advertising technology is currently active. | Any provider will be identified in the Cookie Policy and assessed before activation. | Provider-specific and documented before activation. |
Legitimate interests
Where we rely on legitimate interests, those interests are responding to people who contact us, developing genuine customer and partner relationships, improving the planned Ghost Park service, protecting the website and business from misuse, resolving support matters, and protecting legal rights. We consider whether those interests are necessary and balanced against your rights and reasonable expectations.
Recipients and service providers
We use carefully selected providers for website hosting, infrastructure, email delivery and, where adopted, customer support. They may process information only for agreed services and under appropriate contractual and security requirements. We may also share information with parking or payment partners where needed to resolve your request, professional advisers, insurers, regulators, courts or law-enforcement bodies where lawful. We do not sell website enquiry information.
International transfers
Some approved providers may process information outside the UK. Before using such a provider, we assess the location and transfer mechanism. Depending on the arrangement, safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another legally recognised safeguard. We will not claim a particular safeguard applies until the relevant provider arrangement has been verified. Contact us for information about safeguards relevant to your data.
Cookies and similar technologies
Our current implemented storage technology is the first-party ghost_park_cookie_consent cookie, which remembers privacy choices for approximately 180 days. Optional preference, analytics and marketing technologies remain blocked unless the required choice exists. No analytics, advertising or marketing tracker is currently configured. See our Cookie Policy and use to change your choices.
Marketing communications
We contact people about a beta programme they have specifically requested. We do not treat that request as permission for unrelated marketing. Where we ask to send Ghost Park news, product updates or launch information, we use a separate optional choice, record the wording and version shown, and provide an unsubscribe route. Withdrawing marketing permission does not affect earlier lawful processing.
Security
We use proportionate technical and organisational safeguards, including HTTPS, restrictive browser security policies, signed form tokens, input validation, rate limiting and access controls. No internet service can guarantee absolute security. We review controls as the service and risks change.
Individual rights
Depending on the circumstances and lawful basis, you may have rights of access, rectification, erasure, restriction, objection and data portability. Where processing relies on consent, you may withdraw it at any time. To exercise a right, email hello@ghostpark.app or use the contact form. We may need information to verify your identity.
Right to object
You have the right to object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is needed for legal claims. You may object to direct marketing at any time, and we will stop using your information for that purpose.
Withdrawal of consent
You can withdraw cookie consent using the permanent Cookie settings control in the footer. Marketing messages will provide an unsubscribe option, or you can contact us. Withdrawal is as easy as giving consent and does not affect processing that was lawful before withdrawal.
Complaints to the ICO
Please contact us first so we can try to resolve your concern. You may also complain to the Information Commissioner's Office through the ICO complaint service, telephone 0303 123 1113, or write to the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Changes to this Privacy Notice
We review this notice when our processing, providers or legal obligations change. We will publish material changes here and bring significant new uses to affected people’s attention where required. Last updated: 1 September 2026.