Privacy Policy.

1. Our Role & How Your Booking Works

AeroPark Direct Ltd acts as a booking agent. We do not operate parking compounds or carry out the physical Meet & Greet or Park & Ride service ourselves. Those services are performed by independent, vetted third-party parking operators (“Operators”).

For our premium AeroPark Exclusiveservice you do not need to choose an operator yourself — we select and assign the most suitable Operator on your behalf and include the listed benefits with your booking. In all cases, to deliver your booking we share the details you give us with the assigned Operator, who will also process your data under their own privacy notice.

2. Information We Collect

To arrange and fulfil your parking booking we collect:

• Personal details: name, email address and mobile phone number, used to confirm your booking and for driver/operator communication.
• Vehicle information: make, model, colour and Vehicle Registration Mark (VRM), used to identify your car at the terminal and for barrier access.
• Travel itinerary: airport, terminal, drop-off/return dates and times, and outbound/return flight numbers, used to schedule your handover and allow for flight delays.
• Payment information: payments are handled by our payment processor, Stripe. We do not see or store your full card number — we only receive confirmation of payment and limited transaction details.
• Communications: messages you send us by email, phone or web form, and our replies.
• Technical & usage data: IP address, device and browser type, and pages visited, collected via cookies and similar technologies (see section 6).

3. How We Use Your Data & Our Lawful Basis

Under UK GDPR we must have a lawful basis for processing your personal data. Our purposes and bases are:

4. Who We Share Your Data With

We never sell your personal data. We share it only with the following parties, and only as needed to run our service:

• Parking Operators — the operator assigned to your booking, so they can deliver the service.
• Stripe — secure payment processing.
• Supabase — secure database hosting for your booking records.
• Resend — sending transactional emails (confirmations, receipts).
• Twilio — sending SMS booking notifications, where used.
• Google — website analytics and advertising conversion measurement (only with your cookie consent).
• Vercel — hosting for this website.
• Airport authorities — we may share your VRM with London Luton Airport Operations Limited (LLAOL) or Heathrow Airport Limited (HAL) for Automatic Number Plate Recognition (ANPR) barrier access.
• Authorities & advisers — law enforcement, regulators or our professional advisers where we are legally required or permitted to do so.

These providers act as our processors and are only permitted to use your data on our instructions.

5. CCTV & Vehicle Inspection by Operators

The Operators we book on your behalf may, as part of their service, photograph your vehicle at handover to record its condition, and may operate CCTV at their parking compounds for security. As these activities are carried out by the Operator, they are responsible for that data and their own privacy notice applies. Where such images are passed to us in connection with a query or claim, we handle them in line with this policy.

6. Cookies & Tracking

We use cookies and similar technologies for two purposes:

• Essential cookies — required for the site and checkout to function. These do not need consent.
• Analytics & advertising cookies — such as Google Ads/Analytics, used to measure performance and ad conversions. We only set these with your consent.

You can withdraw consent or manage cookies at any time through your browser settings, or via any cookie-preferences control provided on our site.

7. International Transfers

Some of our providers (for example Stripe, Google and our hosting partners) may process data outside the United Kingdom. Where they do, we rely on appropriate safeguards — such as UK ‘adequacy’ regulations, the International Data Transfer Agreement (IDTA), or Standard Contractual Clauses — to ensure your data remains protected.

8. How Long We Keep Your Data

• Booking & transaction records: retained for up to 6 years to meet UK tax and accounting obligations.
• Vehicle inspection photographs: taken and held by the Operator, typically for a short period after your vehicle is returned, in line with the Operator’s policy.
• Marketing data: kept until you withdraw consent or unsubscribe.
• Analytics data: retained for the period set by the relevant provider.

9. Your Rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Request erasure of your data (where applicable);
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time (where we rely on consent).

To exercise any of these rights, email us at info@aeroparkdirect.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

10. Children

Our service is intended for adults aged 18 or over. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. The latest version will always be published on this page with the “Last updated” date above. We encourage you to review it periodically.

12. Contact Us

For any privacy question or request, contact AeroPark Direct Ltd at info@aeroparkdirect.co.uk, or write to us at 66 Paul Street, London, England, United Kingdom, EC2A 4NA.