Privacy.

Updated 15 September 2026. This policy covers the ParkWelly website and mobile apps, including the iPhone and Android apps.

Who is responsible for your data

ParkWelly Ltd is the operator of this parking service and the controller responsible for your personal data. Our company number is 17427431 and our registered office is 15 Aylesford Street, London, SW1V 3RY, United Kingdom.

For privacy questions or requests, email hello@parkwelly.com or write to us at that address. WellyVentures Ltd is our parent company and the publisher of our Android app on Google Play.

To request account and associated data deletion, visit parkwelly.com/delete-account. You do not need to install the app or sign in to send a request.

Information we collect

• Your account: name, email address, phone number, a protected password record, account identifiers, sign in sessions and communication preferences.
• Parking and payments: listing addresses, map locations, descriptions, photos, availability and prices; booking dates, times, vehicle registrations and notes; payment, refund, receipt and host payout records. We also store payment provider references and account verification status.
• Messages and support: conversations between drivers and hosts, reviews, reports, blocking preferences, support requests and correspondence with our team. We keep relevant follow up notes and records of emails sent, received and delivered.
• Searches and location: destinations and search criteria you enter, and your device location when you allow location access and use a nearby parking feature. Search and technical records may include this information.
• Technical information: IP address, browser or device information, request times and pages, app activity, error reports, session identifiers and notification delivery tokens. Our app service providers also receive the information needed to deliver maps, payments, notifications and app updates.
• Enquiries and waitlists: your email, destination, whether you are interested as a driver, host or business, and the details you provide when asking us to follow up.

Most information comes from you or your use of the service. We also receive information from the other party to a booking, payment and communication providers, and vehicle lookup services. Where we use publicly available parking listings or business contact information to invite a host to join, we keep the source and relevant correspondence.

Why we use it

We use account, listing, booking, payment and communication information to provide the service you request, arrange parking, manage your account, issue receipts and help resolve problems. This processing is necessary to enter into or perform our contract with you. You can browse without an account, but we need the required account and booking details to arrange a booking or host a space.

We use relevant records to meet legal obligations, including accounting and responding to lawful requests. We also rely on our legitimate interests in keeping the marketplace secure, preventing fraud and abuse, handling disputes, understanding demand and improving the service. We consider your rights when doing so.

Where consent is required, including for marketing or optional device permissions, we ask for it. You can withdraw consent, change your device permissions or use the unsubscribe link in marketing emails. Service messages about bookings, payments or account security may still be necessary. We do not sell your personal data.

Who receives information

Drivers and hosts. Public listing descriptions, photos, parking information and published review text can be seen by other visitors. We share the exact parking address with the driver once the booking is confirmed. We then email the driver and host each other's name, email address and phone number so they can arrange access. Booking details, including the vehicle registration and relevant notes, are available to the host. Messages go to the other party. Avoid putting private information in public descriptions, photos or reviews.

Stripe. Card and billing details entered into Stripe's payment forms go to Stripe. We do not store full card numbers or security codes. Stripe processes payments, refunds and host payouts and may collect identity and bank details during host onboarding. It also processes device, transaction and usage information for security, fraud prevention and its other stated purposes. See Stripe's privacy policy.

Google Wallet in Android payments. The Android payment SDK checks payment availability through Google Wallet. Google documents collection of installed-app information, account and device identifiers, phone information and location information for payment functionality, analytics, security and fraud prevention. Collection can occur during payment setup even when a Google Pay button is not shown. See Google Wallet data information and Google's privacy policy. Google provides data controls through your Google Account.

Mapbox. Map and place search features send map requests, search text or coordinates to Mapbox. Mapbox also receives technical information such as IP addresses and app or session identifiers, and may process location and usage telemetry under its product privacy policy. See Mapbox's privacy information.

Expo, Apple and Google. Our mobile apps use Expo services for updates and push notifications. Update requests include the operating system, app project information and an installation request token. If you enable notifications, delivery tokens and notification contents pass through Expo and the relevant Apple or Google delivery service. Notifications can include booking or message previews. See Expo's privacy explanation, Apple's privacy policy and Google's privacy policy.

Other providers and authorities. We use hosting and backup providers and Resend for email delivery. Postcodes.io receives postcodes for location lookup. Vehicle checks send the registration to the DVSA MOT service, or TotalCarCheck as a fallback, and returned vehicle details may be stored. Authorised staff and advisers can access information needed for support, accounting and legal matters. We may disclose relevant information when legally required or necessary to address fraud, safety incidents or legal claims. See Resend's privacy policy.

Your device and browsing choices

Location access is optional. You can type a destination instead and change location access in your device settings. The app requests foreground location for nearby parking; it does not request background location tracking. Photo access is used when you choose images to upload for a listing. Uploaded listing photos can be public. You can turn off push notifications in your device settings and choose whether previews appear on your lock screen.

To stop optional Mapbox usage telemetry, open the information icon on the map, choose Mapbox Telemetry and select Stop Participating. This choice persists when you restart the app. Map requests and information needed to operate and bill for the map service still reach Mapbox.

The website uses a session cookie for sign in and security. The app stores sign in tokens and cached account details securely on your device and keeps local preferences and caches. Blocking essential storage may prevent sign in or other features from working. Our own activity and search records help us understand use of the service and investigate faults.

Storage and security

Our main application database is hosted on our infrastructure in the EU. Providers such as Stripe, Mapbox, Expo and Resend may process data in the United States or other countries. Their privacy information explains their processing locations and transfer arrangements. Contact us for information about the safeguards applicable to your data.

We use encrypted connections, protected password records and access controls. Access to customer information is limited to people and services that need it for the purposes described here. No online service can guarantee absolute security.

Retention and account deletion

You can delete your account from Account in the app or website, or email hello@parkwelly.com to request deletion of your account and associated data. Instructions and a direct email link are at parkwelly.com/delete-account. You can also ask us to delete particular data without closing your account.

The account deletion control removes the name, email address and phone number from your account profile, disables sign in, ends sessions, removes notification delivery tokens and pauses your listings. Open booking requests, accepted or active bookings, and bookings with unresolved payments must be cancelled, ended or resolved before automatic account deletion can complete. You can still contact us to begin a deletion request or get help with these bookings.

Deleting the profile does not immediately erase every linked record. Listing addresses and photos, booking details and vehicle registrations, messages, reviews, support records, correspondence and payment provider references can still contain personal data. We review these records when handling deletion, remove data that is no longer needed and arrange deletion with providers where applicable.

We retain information only for as long as it is needed for its purpose. The criteria depend on whether an account or booking remains active, payments or refunds are outstanding, a complaint or dispute is unresolved, or records are needed for accounting, fraud prevention or a legal claim. A retention exception applies to the information needed for that reason, rather than the whole account. We explain any information we must retain and the applicable reason and retention period when responding to your request.

Security logs and backup copies can outlast a change to the live account. Backups are kept separately for recovery and are not a substitute for an active account. We include backup copies in deletion reviews and take account of completed deletion requests if data is restored. Payment providers and the other party to a booking may also retain their own records for their legal obligations.

Your rights and how to contact us

Depending on the circumstances, you can ask to access or correct your personal data, have it erased, restrict its use, receive a portable copy, or object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent where we rely on it, without affecting earlier lawful processing.

Email hello@parkwelly.com. We may need proportionate information to verify your identity, but never ask you to send your password. We normally respond within one month. If identity checks or a permitted extension are needed, we will explain. You can also complain to the UK Information Commissioner's Office through ico.org.uk/make-a-complaint.

We update this policy when our service or data practices change and show the revision date above. Where required, we will also notify you of material changes.