Privacy notice

1Who we are

CancelMyCharge is run by Robustus AI - FZCO, a company registered in the IFZA free zone, Dubai, United Arab Emirates. We decide how your details are used, which makes us the "controller" under UK data protection law. To contact us about your details, write to Robustus AI - FZCO, DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates.

2What we collect

• Your email address, to confirm it before your free check. We email you a 6-digit code, and keep a count of how many free checks you've used.
• Photos of your parking charge. We read them and then delete them. We don't keep the photos.
• What we read from them, which you can correct: the parking company, reference number, vehicle registration, car park, dates and times, amounts, and whether the notice contains certain legal wording.
• Your answers to our questions, such as which country the car park is in, when the notice arrived, and why you think the charge is wrong.
• Health details, only if you choose to give them, such as an illness, an injury, a medical appointment or a Blue Badge, when they're part of why the charge is wrong.
• Your email address, if you give it to get your letters or to hear when letters are available.
• Which new services you'd use, with your email, if you sign up under "Coming next".
• Payment details. Your card is held by Stripe, not by us. We keep only Stripe's reference for it and whether a payment went through.
• Letters and outcomes: the letters we write, and what you tell us happened, including anything we read from a rejection letter or receipt you upload (we don't keep those files either).
• Your internet (IP) address, to limit how often the service can be used and stop misuse. We keep it for up to a day, and not with your case. Cloudflare checks you're not a bot before we send a code.
• Which pages are visited, as daily totals: the page, and the website that sent you there (for example google.com). No cookies, and nothing that identifies you or your device.

We don't ask for your name or address, and the letters we write don't say who was driving. Your vehicle registration and the details of the charge can still identify you, so we treat them as personal data.

3Why we use it, and our legal basis

• To check your charge and write your letters: because you've asked us to, under our contract with you (or the steps before it).
• Health details: only with your explicit consent, which you give by ticking a box before we use them. If they're about someone else, you confirm they've agreed. You can withdraw consent at any time by emailing us, and we'll delete them. This doesn't affect anything we did before.
• To take our fee if the charge is cancelled, and to send the reminders before it: under our contract with you.
• To tell you when letters are available, if you asked us to: with your consent. You can withdraw it at any time by emailing us.
• To keep payment and tax records: because the law requires it.
• To stop misuse of the service, such as limiting how often it can be used: in our legitimate interest in keeping it working.

We don't sell your details, use them for advertising, or send you marketing.

4Who we share it with

Only the companies that run parts of the service for us, under contracts that limit what they can do with it:

• Anthropic (USA): its AI reads your photos and helps write your letters.
• Supabase: stores your case. Our database is in Ireland.
• Vercel (USA): hosts the website.
• Stripe: holds your card and takes payments.
• Resend (USA): sends our emails.
• Cloudflare: runs the check that you're not a bot.

You send the appeal letters to the parking company, POPLA or IAS yourself. We don't contact them. We'd only share your details with anyone else if the law required it.

5Sending your details abroad

We're based in the United Arab Emirates, and some of the companies above are in the USA. When your details leave the UK, we rely on the UK's approved safeguards, such as the International Data Transfer Agreement or the UK Extension to the EU-US Data Privacy Framework. Email us for details.

6How long we keep it

• Photos and uploaded documents: not kept. They're deleted once they've been read.
• A check you don't go ahead with: deleted after 90 days. If you asked us to tell you when letters are available, we keep your email until we've told you or you ask us to stop. The same goes for "Coming next" sign-ups.
• A case where we wrote letters: kept for 12 months after it closes, so we can deal with any question about the fee. That's at least 60 days after your letter.
• Payment records: 6 years, for tax and accounting.
• Your email and free-check count: deleted 60 days after your free-check period starts.

7Your rights

You can ask us for a copy of your details, to correct them, to delete them, to restrict or object to how we use them, or to have them sent to you in a reusable format. To ask, write to Robustus AI - FZCO, DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates, and we'll reply within a month. Some rights don't apply in every case, for example we have to keep payment records.

If you're unhappy with how we've handled your details, tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

8Our UK representative

Because we're based outside the UK, the law requires us to appoint a representative in the UK. We'll name them here before we take any payments. Until then, to contact us about your details, write to Robustus AI - FZCO, DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates.

9Cookies

We don't use advertising or tracking cookies. Stripe sets its own cookies on its payment page to prevent fraud.