1. Who we are
TrustedBristolAirportParking.co.uk is an independent Bristol Airport parking comparison and booking service operated in the South West of England. We are not the car park operator — we connect customers with verified parking operators at Bristol Airport.
For questions about this policy, contact us at bookings@trustedbristolairportparking.co.uk or call 07960 011047.
2. What data we collect
When you make a booking or contact us, we may collect the following personal data:
- Identity data: full name
- Contact data: email address, mobile number
- Vehicle data: vehicle registration number
- Location data: postcode (used for card payment verification)
- Travel data: drop-off and return dates, arrival time, flight number
- Payment data: card details processed securely by Stripe — we never store full card numbers
- Technical data: IP address, browser type, device type, pages visited
- Marketing attribution data — only if you consent: the first page you landed on, the site or search engine that referred you, any campaign tags on the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid, msclkid), whether you are on a mobile, tablet or desktop, when you first arrived and how many times you have visited. This is stored on your device and attached to your booking so we can tell which advertising works. If you refuse or withdraw analytics consent it is never collected, and anything already held on your device is deleted. See our cookie policy.
3. How we use your data
We use your personal data for the following purposes:
- To process and manage your parking booking
- To send booking confirmation and follow-up emails
- To pass relevant booking details to your assigned car park operator
- To process payments securely via Stripe
- To respond to your enquiries
- To improve our website and services
- To comply with our legal obligations
We do not use your data for automated decision-making or profiling.
4. Legal basis for processing
We process your data on the following legal bases under UK GDPR:
- Contract: processing is necessary to fulfil your booking
- Legitimate interests: to improve our service, prevent fraud, and ensure security
- Legal obligation: where required by law
- Consent: for optional analytics and marketing attribution only. You can withdraw it at any time, as easily as you gave it, and nothing else about your booking changes if you do.
5. Who we share your data with
We share your booking details with the car park operator assigned to fulfil your booking. This includes your name, vehicle registration, mobile number, drop-off and return dates, and flight number where provided.
We also use the following third-party services:
- Stripe — payment processing (PCI DSS compliant)
- Brevo (Sendinblue) — email delivery
- MongoDB Atlas — secure cloud database storage
- Cloudflare — website security and performance
We do not sell, rent, or trade your personal data to any third party for marketing purposes.
6. Data retention
We retain your booking data for up to 7 years for accounting and legal compliance purposes. You may request deletion of your data at any time — see Section 8.
7. Cookies and storage on your device
Cookies and similar device storage are governed by the Privacy and Electronic Communications Regulations (PECR); UK GDPR sets the standard the consent has to meet. Everything we store on your device, who provides it, what it does and how long it lasts is listed in full in our cookie policy.
The short version: the items needed to take your booking — remembering your cookie choice, carrying your dates through to checkout, and Stripe’s fraud-prevention cookies on the payment page — are strictly necessary and exempt from consent under regulation 6(4). Optional analytics and the marketing attribution described in section 2 are not, so they are off until you turn them on, and refusing is one click, exactly like accepting. We use no advertising cookies, no retargeting pixels and no cross-site tracking. Change or withdraw your choice at any time with the control in the footer of every page.
8. Your rights
Under UK GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your data (subject to legal retention requirements)
- Restriction: ask us to restrict processing of your data
- Portability: receive your data in a structured, machine-readable format
- Object: object to processing based on legitimate interests
To exercise any of these rights, email us at bookings@trustedbristolairportparking.co.uk. We will respond within 30 days.
9. Data security
We take the security of your data seriously. All data is transmitted over 256-bit SSL encryption. Payment data is handled exclusively by Stripe and is never stored on our servers. Our database is hosted on MongoDB Atlas with access controls and encryption at rest.
10. International transfers
Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in compliance with UK GDPR.
11. Changes to this policy
We may update this privacy policy from time to time. The current version will always be available at this URL. Significant changes will be communicated by email where appropriate.
12. Complaints
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or call 0303 123 1113.