Parking season tickets privacy notice

The following privacy notice applies to parking season tickets (off-street parking).

This notice explains how personal information is going to be used, what it is used for, who it might be shared with and why and for how long it is to be kept.

What information is collected?

Your name, address, contact details and vehicle details are collected and held and used for the purpose of administering the parking season tickets and concessionary parking.

Your personal data may be converted (‘anonymised’) into statistical or aggregated data in such a way as to ensure that you are not identified or identified from it.

Why do we collect your personal information?

The purpose of processing your personal data is to administer the councils parking season tickets (for our off-street car parks)

We are relying on GDPR Article 6(1) (b) & (e) as the lawful basis for processing in line with Crawley Borough Council (Off Street Parking Places) (Civil Enforcement & Consolidation) Order 2009 as amended.

Data Controller

Crawley Borough Council is registered as a Data Controller with The Information Commissioner’s Office (Registration Number Z5327706).

The council (CBC) complies with the Data Protection Act 2018 and the GDPR.

We ensure that your personal data is processed fairly, kept safe and secure and retained for no longer than is necessary.

The Data Protection Officer for CBC is Head of Legal and Democratic Services.

If you have any concerns or questions about how we look after your personal information please contact the Data Protection Officer.

The legal basis for processing personal data

  • Consent of the data subject
  • Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
  • Processing is necessary for compliance with a legal obligation
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

Who we share data with

We pass data to:

  • Internal departments
  • Other partner agencies that provide services on our behalf
  • Agencies with whom we have a duty to co-operate, such as the police
  • Housing Associations
  • Benefits Agency
  • HM Court Services

We will not share data with third-parties for marketing purposes.

Transfer outside the European Economic Area

If your data needs to be transferred we will make sure that an adequate level of protection is in place.

Retention periods

Personal data will not be retained for longer than necessary in relation to the purposes for which they were collected.  

Retention period
Civil Enforcement Officer pocket books
2 years where pocket books are used (e.g. Blue Badge Enforcement) unless required for longer investigation purposes.
Penalty charge notices
6 years
Incident reports
4 years unless case involves child (then to be minimum of 4 years until 18th birthday)
Appeals against penalty charge notices (on and off street)
6 years
Hand held computer downloads
1 year from the case being closed
Photos of vehicles parked in contravention
1 year from the case being closed
DVLA Records
System should redact data 3 years from case being closed
Automatic number plate recognition (ANPR) - photos of vehicle number plate
System automatically rewrites information after 28/31 days
Subscriber details on Pulsar
Removed once permit/concession has expired
Test tickets
No legal requirement to keep
Warrant/debt write offs
6 years
Permit application forms and renewals
2 years from data collection date or 1 year from date of expiry
Dispensations, waivers and suspension applications
2 years from data collection date. Destroy after application processed
Banking summary sheets
Minimum of 3 years as per finance regulations
Newsletters, press articles, minutes of meetings, leaflets
No legal requirement to retain for a specified period. Minutes to be kept for as long as necessary.
Permit waiting list 
1 year. Remove details once they have been issued with a permit
Season ticket waiting list
1 year after expiry
Season ticket application forms and correspondence
1 year
Market concessions / event parking application forms
4 years (insurance requirements relating to events)
Validation deal application form
No legal requirement to keep, however can be kept as long as may be useful. Keep application forms for 6 months.
Window cleaner application form
No legal requirement to keep, however can be kept as long as may be useful. Destroy once application has been processed. Personal details will be kept for 1 year on the system.
Business badge application form
No legal requirement to keep, however can be kept as long as may be useful. Destroy once application has been processed. Personal details will be kept for 1 year on the system
Refund documentation
6 years
Staff permit list
6 years
Staff permit list
1 year
Accident/injury forms
6 years
Car parks operational handover paperwork
Statute of limitations
CCTV and body worn/dash cam video camera footage
Images stored for 28/31 days unless required for investigation
Blue Badge enforcement reports/footage
1 year unless required for investigation
E-mail and customer correspondence
3 years


You have the right to:

  • Be informed of data processing (which is covered by this privacy notice)
  • Access your personal information (known as a Subject Access Request)
  • Have inaccuracies corrected
  • Have information erased
  • Restrict processing
  • Data portability
  • Intervention in respect of automated decision making/profiling
  • Withdraw Consent (see below)
  • Complain to the Information Commissioner’s Office (see below)

To exercise any of these rights please contact the Data Protection Officer.

Withdrawal of consent

The lawful basis upon which CBC process personal data is that it is necessary in order to comply with its legal obligations and to enable it to perform tasks carried out in the public interest.  However, where personal data is solely processed on the basis of consent, you will have the right to withdraw that consent.

Where can I get advice?

If you have any worries or questions about how your personal information is handled please contact our Data Protection Officer.

For independent advice about data protection, privacy and data rights, you can contact the Information Commissioner’s Office (ICO):

  • Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire DK9 5AF
  • Tel:  0303 123 1113 (local rate) or 01625 545 745 if you prefer to use a national rate number
  • Visit
  • Email