Skip to main content
Legal

Privacy policy

Version 1.0 · Last updated: 22 May 2026

Who we are

FightPCN is an independent service that helps individuals generate AI-assisted parking fine appeal letters. We are not affiliated with Bromley Council, the London Borough of Bromley, or any government body.

What we collect

  • Images and PDFs of your Penalty Charge Notice
  • PCN details extracted from your upload (number, date, vehicle, location, amount)
  • Your answers to the appeal questionnaire
  • Anonymous session identifiers (UUID)
  • Cookie consent preference
  • IP address (for security logging and consent records)
  • Payment information — processed entirely by Stripe; we never see card details

AI processing

Your PCN image is sent to OpenAI's GPT-4o Vision API to extract ticket details. OpenAI processes this data under their Privacy Policy. By default, OpenAI does not use API data to train their models. Data is processed in the United States under Standard Contractual Clauses.

Appeal letter generation also uses the OpenAI API. Your questionnaire responses are sent to generate a personalised letter — no data is stored by OpenAI beyond the request lifecycle.

Legal basis (UK GDPR)

Article 6(1)(b)

Processing is necessary to perform the service you have requested (contract performance).

Article 6(1)(a)

You have given explicit consent to AI processing of your PCN image.

Data retention

Session data, PCN images and extracted details are deleted after 30 days. Payment records are retained for 7 years as required by HMRC. Consent logs are retained for 3 years.

Third-party processors

We use trusted third-party services to operate this platform, including for AI processing, data storage, payment handling, and hosting. All processors are bound by data processing agreements and handle your data only as instructed.

Your rights

Under UK GDPR you have the right to access, correct, delete, restrict processing of, port, and withdraw consent for your personal data.

Request data deletion

Use our self-service form to request erasure of all personal data we hold about you. We will process requests within 30 days.

Delete my data →

For all other rights (access, correction, portability), email twolabs.ai@gmail.com.

You may also lodge a complaint with the Information Commissioner's Office at ico.org.uk.