Legal

Privacy Policy

Last updated: 10 August 2026

This policy explains what personal data ParkFast collects, why we collect it, how long we keep it, and what you can ask us to do with it. It is written to be read, not to be survived — if anything here is unclear, email [email protected] and we will explain it properly.

The short version. If you join the waitlist we keep your name, work email, company, team size and (if you tell us) your phone number and airports — so we can contact you about early access. We keep it until you ask us to delete it, which we will do on a single email, no questions asked. We do not sell it and we do not share it for advertising. Our analytics is We use Google Analytics to see which pages lead operators to sign up — it never receives your name, email or company, and you can block it with any tracking blocker.

1. Who we are

ParkFast provides airport parking management software for UK meet-and-greet and valet parking operators. For the personal data described in this policy, ParkFast is the data controller — we decide what is collected and why.

You can contact us about anything in this policy, including any request about your data, at [email protected].

2. What we collect, why, and for how long

We collect as little as we can get away with. This table is the complete list.

What Why Lawful basis Kept for
Name, work email, company name, team size, and (optionally) your phone number and the airports you operate at
When you join the early-access waitlist
 To contact you about early access, to prioritise which airports and booking channels we build for, and to onboard you at launch Legitimate interests — responding to a business enquiry you initiated, and taking steps prior to entering a contract at your request Until you ask us to delete it. ParkFast has not launched yet and the launch date is open, so we keep waitlist entries until they are no longer needed for that purpose. One email from you removes you permanently.
IP address
When you submit the waitlist form
 Anti-spam only — rate limiting, and checking the submission with Cloudflare Turnstile (see section 4) to tell a person apart from an automated script Legitimate interests — keeping our service secure and available We keep only a one-way scrambled version, for a maximum of 24 hours, then it is automatically deleted. Your real IP address is never stored against your waitlist record.
The domain part of your email address (for example "parkingco.com" — never the address itself)
When you submit the waitlist form
 A single DNS lookup to check the domain can actually receive email, which filters out fake and throwaway addresses Legitimate interests — keeping our waitlist free of automated spam submissions Not stored. The result is cached in memory for a few hours and never written to disk.
Pages visited, referring site, approximate country, device and browser type, and which buttons and forms you interacted with
On every visit, via Google Analytics and our own self-hosted analytics
 To understand which pages and messages actually lead operators to join the waitlist, so we can improve the site Legitimate interests — measuring how our own site performs. You can object at any time (see section 6), and you can block it outright with any standard browser tracking protection or ad blocker. Google Analytics retains event data for up to 14 months. Our self-hosted analytics keeps aggregate statistics only.
Standard web server logs
Every request, automatically
 Security, debugging, and keeping the site running Legitimate interests — network and information security Short-term operational retention by our hosting provider

We do not collect special category data, we do not knowingly collect data about anyone under 18, and we do not use automated decision-making or profiling that produces legal or similarly significant effects.

3. Cookies and similar technologies

We use two analytics tools. One is self-hosted on our own servers and sets nothing on your device at all. The other is Google Analytics, which does set cookies, listed below. Neither is used for advertising, and we do not send Google your name, email address or company.

We have configured Google Analytics to disable advertising features, Google Signals and cross-site ad personalisation, and to anonymise IP addresses. We rely on legitimate interests for this rather than showing you a consent banner. If you would rather not be counted, any standard browser tracking protection, an ad blocker, or Google's own opt-out add-on will block it, and you can also object directly under section 6.

Name Type Purpose Consent needed?
_ga, _ga_* Cookie (set by Google Analytics) Distinguishes one visitor from another and one session from another, so page and funnel reports are meaningful. Expires after 2 years. Not strictly necessary. We run it on legitimate interests rather than a consent banner — see the note below.
wl_done Local storage Remembers that you already joined the waitlist, so the form is not shown to you again. Strictly necessary — it only stores a yes/no flag and contains no personal data.
pf_admin_token Cookie (HttpOnly) Keeps ParkFast staff signed in to the internal admin area. Strictly necessary — only ever set for our own staff, never for site visitors.

We do not use advertising cookies, retargeting pixels, social media trackers, or session recording. Our webfonts are served from our own servers rather than a third-party font CDN, so loading a page does not disclose your IP address to a font provider. If we ever add a tool that does set cookies, we will add a consent banner before it goes live and update this page.

4. Who else processes your data

We do not sell personal data and we do not share it for anyone else's marketing. We do rely on a small number of service providers who process data on our instructions:

  • Our hosting provider — runs the servers this site and its database sit on.
  • Google Analytics (Google Ireland Limited) — receives page-view and interaction events. Never your name, email or company.
  • Our own analytics — self-hosted on our infrastructure, not sent to any third party.
  • Plunk — our email provider. If you join the waitlist, we pass it your name, email, phone number if you gave one, company, team size and the airports you named, so we can reply to you and send early-access updates. It is not used for anyone else's marketing. We never pass it a submission we have flagged as spam.
  • Cloudflare — runs the invisible anti-spam check on the waitlist form (Turnstile). It receives your IP address and technical signals from your browser in order to tell a person apart from an automated script. It does not receive your name, email, phone number or company, and Cloudflare states it does not use this data for advertising or to build a profile of you across sites. If we have not switched this check on for a given deployment, nothing is sent to Cloudflare at all.

Where any provider processes data outside the UK, we rely on the appropriate safeguards permitted under UK data protection law, such as adequacy regulations or standard contractual clauses with the UK Addendum.

5. How we protect it

In plain terms:

  • The whole site is served over HTTPS and requests are upgraded automatically.
  • The waitlist database is not publicly reachable — only the application can read it.
  • The internal admin area is password-protected, sits behind a signed session cookie, and is excluded from search engines.
  • The waitlist form is rate-limited to prevent bulk abuse.
  • We collect the minimum needed, and delete IP addresses within 24 hours.

6. Your rights

Under UK GDPR you have the following rights. Exercising them is free, and we will respond within one month.

Access Ask for a copy of the personal data we hold about you.
Rectification Ask us to correct anything inaccurate or incomplete.
Erasure Ask us to delete your data. For waitlist entries we can always do this, and it removes you from the list.
Restriction Ask us to pause using your data while a concern is resolved.
Portability Ask for your data in a common machine-readable format.
Objection Object to our processing where we rely on legitimate interests — that covers both the waitlist and our analytics. Email us and we will stop; for the waitlist we will always stop on request, no reason needed.

To exercise any of these, email [email protected] with the email address you signed up with. To be removed from the waitlist entirely, the words "please delete my data" are enough — we do not require a form or a reason.

7. Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113.

8. Changes to this policy

If we change what we collect or how we use it, we will update this page and change the "last updated" date at the top. If the change is significant and we hold your email address, we will tell you directly rather than relying on you noticing.

Questions about this policy: [email protected]. See also About ParkFast for who we are and what stage the product is at.