Parking Services Privacy Notice
Who we are and what we do
We are a data controller under the UK Data Protection law. We collect and process personal information about you. We do this to meet our statutory obligations and provide Parking Services within the borough of Enfield.
Why we collect your data
This Privacy Notice explains when and why we collect personal information about people who engage with us, or contact us. This could be by:
- applying for our services
- receiving our services
- living in the borough
- visiting the borough
- visiting our website
Enfield handles the collection and processing of information required for statutory reasons under the:
- Traffic Management Act 2004 (parking contraventions)
- London Local Authorities Act and Transport for London Act 2003 (moving traffic contraventions)
- London Local Authorities Act 1996 (bus lanes) for collecting (PCNs)
Enfield is also Data Controller for:
- collecting and processing information for the administration of parking permits
- requests for parking suspensions and dispensations
Processing in this context includes (but is not limited to), the collection, organisation, retrieval, consultation, use and deletion or destruction of information and its disclosure to other agencies.
Processing includes the provision of administrative and statutory services for:
- the enforcement of parking, moving traffic and bus lane regulations and restrictions
- the administration of parking permits
- the administration of paid for parking services
- the administration of parking suspensions or dispensations
We may also use your information to contact you to improve our customer services. This may be in the form of sending out surveys and consultations.
What type of information is collected
The information we may collect includes, but is not limited to:
- personal name and addresses
- business name and addresses
- email addresses
- telephone numbers
- vehicle registration number
- proof of vehicle ownership
- proof of residency
- CCTV footage and photographic images of your vehicle
- any other relevant information provided in conjunction with issuing, processing, and appealing a PCN, for example:
- location data/co-ordinates
- vehicle breakdown/repair reports
- police reports
- evidence of deliveries/collections
- any other relevant information provided when applying for a parking permit
- any other relevant information provided when applying for a parking suspension or dispensation
Lawful basis for processing personal data
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we need a "lawful basis" for collecting and information about you.
The lawful basis on which we rely is:
- Article 6 (1)(c) Legal obligation: the processing is necessary for the council to follow the law (not including contractual obligations)
- Article 6(1)(e) the processing is necessary for the council to perform a task in the public interest or for the council’s official functions, and the task or function has a clear basis in law
The basis in law is the Traffic Management Act 2004 (parking contraventions), the London Local Authorities Act and Transport for London Act 2003 (moving traffic contraventions) and London Local Authorities Act 1996 (bus lanes).
When a vehicle is seen in contravention:
- we may contact the DVLA to get the Registered Keeper’s details to issue a PCN/Notice to Owner
- if the vehicle is hired/leased then we may request a copy of the hire/lease agreement and the hirer’s driving licence details from the registered keeper of the vehicle to enable the transfer of liability
- if the registered keeper has sold the vehicle, then we may get details of the new keeper from the registered keeper at the time of contravention
For information about the statutory process, visit London Tribunals.
When applying for a parking permit
We may ask you to give us documentation to help verify your identity, residency at a specific address, confirmation of a business address and/or ownership of a vehicle.
When applying for a parking suspension or dispensation
We may ask you to give us information about the purpose of the suspension or dispensation and details of any applicable highways permits/licences.
Monitoring and recording communications
We may check communications such as emails and telephone calls for the following purposes:
- Quality assurance
- Training
- Fraud prevention
- Compliance
How we collect your information
We collect information in several ways including:
- by letter, application form, email, face-to-face, telephone, online systems/forms
- information provided by external bodies such as the DVLA
- from third parties such as hire and leasing vehicle companies and businesses
- information from enforcement agencies
How long we keep your information
We will only keep your personal information for as long as necessary. This is to fulfil the purposes we collect it for. This includes for the purposes of satisfying any legal, accounting, or reporting requirements.
We may remove some personal data you provide to us to make sure that you cannot be identified. We use this data to allow the council to effectively target and plan the provision of services.
- The record of PCNs and financial information is stored for a period of up to 7 years after the PCN has been closed
- Registered keeper details will be redacted 2 years after a PCN is closed
- Photographs and camera footage will be deleted 2 years after a PCN is closed
- Parking permits, suspensions and dispensation information will be held for as long as is required to provide an effective service to our service users and customers
Who your information may be shared with (internally and externally)
To meet our statutory obligations, we may need to share the information we hold with other professionals such as:
- Law enforcement agencies in connection with any investigation to help prevent unlawful activity – Police, Border Force, immigration services
- London tribunals
- London councils
- The Traffic Enforcement Centre
- Newlyns (Enforcement Agents)
- CDER (Enforcement Agents)
- Marstons (Enforcement Agents)
- NSL Services Group
- Intelliscape
- PayByPhone
- Imperial
- DVLA
- other internal council services
- other local authorities
We will only share your information with internal departments and other service providers, contractors and/or partner bodies when necessary:
- to follow a legal obligation
- where permitted under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
- where the disclosure is necessary for the purposes of the prevention and/or detection of crime
- to allow a third party working for or on behalf of the council to carry out its legitimate duties
Keeping your information secure
We will use technological and organisation measures to keep your information secure. These measures may include the following examples:
- All data is stored on a database on a secure server that is password protected
- All payment processing is done using PCI compliance systems
What rights do you have?
We may not be able to delete your personal data if it is needed for:
- legal reasons
- reasons of public health
- public interest
- medical purposes
You can contact the London Borough of Enfield’s Data controller about your personal data and any other concerns you may have about its processing. You can do so by contacting our Data Protection Officer:
- Email: enfield.data.protection.officer@Enfield.gov.uk
- Address: Data Protection Officer, London Borough of Enfield, Civic Centre, Silver Street, Enfield, EN1 3XA
Please note: these details are NOT to be used to make an enquiry or dispute a PCN. This is handled separately. For more information, see Appeal a penalty charge notice (PCN).
Department responsible for review: Parking Services
Date of last review: October 2025