Privacy Policy

Last updated: March 2026

1. Who we are

QuickAppeal is a trading name of DarkForge Labs Ltd, a company registered in England and Wales. Full company details, including registered address and company number, are available at darkforgelabs.co.uk.

Contact: support@quickappeal.co.uk

2. What data we collect

When you use our service, we collect the following personal data:

  • Your name
  • Your address
  • Your vehicle registration number
  • Your PCN (Penalty Charge Notice) details
  • Parking ticket information (operator, location, contravention, amount)
  • Your description of events
  • Your IP address (for rate limiting and abuse prevention only)
  • Payment information (processed entirely by Stripe — your card details never touch our servers)

3. How we use your data

We use your data solely to generate your personalised parking ticket appeal letter.

Lawful basis: Performance of a contract (Article 6(1)(b) UK GDPR). You pay for letter generation, and we need your data to deliver the service you have contracted us to provide.

We do not use your data for marketing, profiling, or any purpose other than generating your appeal letter.

4. Who we share data with

We share your data with the following third-party providers, each of which is necessary for the delivery of our service:

Anthropic (AI provider)

Your name, address, vehicle registration, and ticket details are sent to Anthropic’s API to generate the appeal letter. Based in the USA. A Data Processing Agreement (DPA) governs this processing and data is transferred under Standard Contractual Clauses (SCCs). Anthropic does not use your data to train its models under our API agreement and deletes input data within 30 days.

Stripe (payment provider)

Processes your payment securely. Based in the USA. Data transferred under Standard Contractual Clauses. Your card details are handled entirely by Stripe and never pass through our systems.

Vercel (hosting provider)

Hosts our application. Based in the USA. A Data Processing Agreement (DPA) is in place.

Upstash (infrastructure)

Provides rate limiting. IP addresses are stored temporarily. No personal data beyond IP addresses is stored by Upstash.

5. Data retention

We do not maintain a database of users or appeal letters. Your personal data is processed in-memory during your session and is not persisted to any database.

Payment records are retained by Stripe in accordance with financial regulations and Stripe’s own privacy policy.

Rate-limiting data (IP addresses only) is retained by Upstash for a maximum of 24 hours.

6. Cookies

We use only strictly necessary cookies set by Stripe for payment fraud detection. We do not use analytics cookies, advertising cookies, or tracking cookies of any kind.

No cookie consent banner is required for strictly necessary cookies under UK PECR (Privacy and Electronic Communications Regulations 2003).

7. Your rights under UK GDPR

Under UK data protection law, you have the right to:

  • Access your personal data (Subject Access Request)
  • Rectification of inaccurate data
  • Erasure of your data (‘right to be forgotten’)
  • Restrict processing of your data
  • Data portability
  • Object to processing of your data
  • Not be subject to automated decision-making

As we do not store your personal data beyond your session, most of these rights are automatically satisfied. To exercise any right or make a complaint, contact us at support@quickappeal.co.uk. We will respond within 30 days.

8. International transfers

Your data is processed by US-based providers (Anthropic, Stripe, Vercel, and Upstash). These transfers are safeguarded by Standard Contractual Clauses (SCCs) and/or UK International Data Transfer Agreements (IDTAs) approved by the UK Information Commissioner’s Office, ensuring your data receives an equivalent level of protection as it would under UK law.

9. Children’s privacy

This service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has used our service, please contact us and we will take appropriate action.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be clearly indicated on the website.

11. Supervisory authority

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):