Civil parking enforcement privacy notice

Civil Parking Enforcement is part of Cardiff Council who is the Data Controller for the purposes of the data collected. This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website or service.

This privacy policy covers all aspects of the processing of:

Penalty Charge Notices
Permits (including parking and road access)
Disabled Persons Blue Badges
Reporting Problem Parking
Untaxed and Abandoned Vehicles

What data do we collect and why?

Civil Parking Enforcement collects your data so that we can:

Carry out the legal process of issuing a Penalty Charge Notice
Issue you with a Permit for accessing or parking in restricted areas
Issue you with a Disabled Persons Blue Badge
Carry out the enforcement of untaxed or abandoned vehicles
Investigate reported parking problems

Civil Parking Enforcement collects the following data:

Personal identification information ((Name, email address, postal address, phone number, DOB, NI Number)
Vehicle Information (Vehicle Registration Mark)
Photographic or video evidence of the Vehicle Registration Mark and the location of the vehicle parked or travelling in contravention of traffic restrictions
Supporting documentary evidence including blue badge or permit information
Documentary evidence of proof of residency
Documentary proof of being in employment or receipt of certain benefits
Documentary proof of the vehicle being linked to the permit holder
Documentary proof of the permit holder being linked to the permit address
Documentary proof of school admission for entitlement to access restricted parking/access areas
Documentary proof of agreement to undertake building and/or maintenance work on a residential property for entitlement to access restricted parking/access areas
Documentary proof of a Disabled Persons Blue Badge for entitlement to access restricted parking/access areas
Documentary evidence of proof of identification including photos
Medical Information

How do we collect your data?

You directly provide Civil Parking Enforcement with some of the data we collect. We collect data and process data when you:

Register an appeal against a Penalty Charge Notice
Contact Connect 2 Cardiff
Submit an application for a Blue Badge
Submit an application for a Permit
Report an abandoned or untaxed vehicle or parking problem
Obtain a pay and display parking ticket or register a cashless parking stay

Civil Parking Enforcement may also receive your data indirectly from the following sources:

DVLA (Driver Vehicle Licensing Agency)
DWP (Department of Work and Pensions)
MiPermit - Digital permit and cashless parking provider
Solicitors acting on your behalf
Landlords/Letting Agent
Private car sales (previous vehicle owners)
Vehicle rental companies
Traffic Penalty Tribunal
Traffic Enforcement Centre
National Anti-Fraud Network
National Fraud Institute (NFI)
Motability
Siemens/SEA CCTV systems
Metric - Pay and Display system providers
Celtic Recovery - Vehicle removal and storage provider
Department for Transport (DfT)

How will we use your data?

Civil Parking Enforcement collects your data so that we can:

Carry out the legal process of issuing a Penalty Charge Notice, including the appeals process and the recovery of unpaid fines
Issue you with a Permit for accessing or parking in restricted areas, including checking eligibility and contacting you if further information is required
Issue you with a Disabled Persons Blue Badge, including checking eligibility and contacting you if further information is required
Carry out the enforcement of untaxed or abandoned vehicles, including checking vehicle ownership and contacting you regarding an untaxed or abandoned vehicle
Carry out the enforcement of Disabled Persons Blue Badges, including checking badge validity and ownership and contacting you regarding the use of your Disabled Persons Blue Badge
Investigating issues of problem parking based on information reported, including prioritising patrols to tackle problem areas

Who do we share your data with?

From time to time, we will share your personal information with advisers and service providers so that they can help us carry out our duties, rights and discretions in relation to parking and civil parking enforcement. These may include:

Internal Council Services such as:

Council Tax - e.g to confirm residency
Recovery Team - e.g to undertake collection of unpaid fines
Adult Services - e.g to verify mobility information
Licensing - e.g to verify taxi licensing information
C2C - e.g to be able to answer customer queries or take payment
Other Council Services - to validate information and provide better services providing we have a basis set out in law.

Government agencies and organisations such as:

Chipside - parking services software provider, including MiPermit
Metric - pay and display machine provider, for on and off-street parking
Systems Engineering and Assessments (SEA) and Yunex - CCTV camera suppliers for parking and moving traffic enforcement
Aceni - Hybrid postal service providers
Department for Transport - Manage the UK wide process for Disabled Persons Blue Badges
Valtech - Government appointed issuers for Disabled Persons Blue Badges
The Occupational Therapy Service (TOTS) - Government appointed medical professionals to assist with Blue Badge Applications
Celtic Recovery - Vehicle removal and storage provider
We may share your personal data with other organisations for purposes, including the prevention and detection of crime, to comply with a legal obligation, or where legally permitted. These organisations include but are not limited to:
- Other Cardiff Council departments,
- Courts and Tribunals,
- Law Enforcement agencies, including the Police, Ombudsman and regulatory authorities.

How do we store your data?

Data is stored using secure Council servers or cloud-based IT systems.

We will only keep your personal data for as long as we need to in order to fulfil the purpose(s) for which it was collected and for so long afterwards as we consider may be required to deal with any questions or complaints that we may receive, unless we elect to retain your data for a longer period to comply with our legal and regulatory obligations.

What are your data protection rights?

Cardiff Council would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access

You have the right to request that Cardiff Council provide copies of your personal data. The right to rectification

You have the right to request that Cardiff Council correct any information you believe is inaccurate. You also have the right to request Cardiff Council complete information you believe is incomplete.

The right to erasure

You have the right to request that Cardiff Council erase your personal data, under certain conditions.

The right to restrict processing

You have the right to request that Cardiff Council restrict the processing of your personal data, under certain conditions.

The right to object to processing

You have the right to object to Cardiff Council's processing of your personal data, under certain conditions.

The right to data portability

You have the right to request that Cardiff Council transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact the Data Protection Officer at [email protected].

Or write to us:

Data Protection Officer
Information Governance Team
County Hall
Atlantic Wharf
Cardiff
CF10 4UW

Our lawful basis

Cardiff Council holds personal data about you in its capacity as data controller.

The legal basis for our use of your personal data will generally be one or more of the following:

We process your personal data to carry out a task in the public interest or in the exercise of official authority in our capacity as a public body.
We process your data where necessary to protect our legitimate interests as a Local Authority
We process your data where necessary for the performance of a contract
We process your personal data to comply with our legal obligations as a Local Authority to undertake civil parking enforcement and issue disabled persons blue badges supported by the following legislation:
- The Traffic Management Act 2004
- The Civil Enforcement of Road Traffic Contraventions (Representations and Appeals (Wales) Regulations 2013.

Privacy policies of other websites

The Civil Parking Enforcement webpage contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

When registering for a parking permit or virtual parking ticket, your data is processed via MiPermit, a third-party company. This means they act as a Data Processor on our behalf and data is temporarily stored on their servers.

When registering an appeal for a Penalty Charge Notice, your data is processed via Chipside, a third-party company. This means they act as a Data Processor on our behalf and data is temporarily stored on their servers

Cardiff Council has implemented the necessary security measures to ensure compliance with current data protection legislation, including a Data Sharing Agreement and relevant impact assessments.

All information is held and transmitted only in accordance with current data protection legislation and Cardiff Council's data protection policy. For further information on how MiPermit process personal data, view the Digital Permits Privacy Notice and view the MiPermit privacy policy.

Changes to our privacy policy

Civil Parking Enforcement keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 10 October 2025.

How to contact us

If you have any questions about Civil Parking Enforcement's privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at:

[email protected]

Or write to us at: