Vehicle Control Services Ltd: Parking & Data

Navigating private car parks in the UK can often lead to questions about the entities managing them and the legal frameworks under which they operate. One such prominent entity is Vehicle Control Services Limited (VCS Ltd). Understanding who they are, how they manage parking, and perhaps most importantly, how they handle your personal data, is crucial for any motorist. This article aims to shed light on VCS Ltd's operations, their data collection practices, and your rights as a data subject, providing a comprehensive overview of their role in the UK's private parking landscape.

Vehicle Control Services Limited, officially registered in England & Wales under Company No. 02498820, is a well-established company in the realm of private car park management. Their registered office is located at 7 Europa View, Sheffield Business Park, Sheffield, S9 1XH. As a company that deals extensively with personal data, VCS Ltd is registered as a Data Controller with the Information Commissioner's Office (ICO), bearing registration number Z9662939. This registration signifies their commitment to adhering to data protection legislation, including the General Data Protection Regulation (GDPR), which governs how organisations collect, use, and store personal information.

It's worth noting that Vehicle Control Services Limited is part of the broader Excel Parking Group of Companies. Furthermore, motorists might encounter a similar entity, Conkai Security Limited (Company No. 07152136, ICO registration number ZA013653), which operates with an identical Privacy Policy to VCS Ltd. This interconnectedness is important to recognise when dealing with parking charge notices or data inquiries from either entity, as their operational and data handling principles are aligned.

How VCS Ltd Manages Parking: The Manual Patrol System

VCS Ltd employs various methods for car park management, but this particular privacy notice focuses on sites operated and managed using manned patrols, where manual tickets are issued. This system involves parking attendants or patrol officers actively monitoring car parks for breaches of site regulations or terms and conditions. When a contravention is observed, a Parking Charge Notice (PCN) is issued directly to the vehicle.

The terms and conditions for using a car park managed by VCS Ltd are typically displayed prominently on signage throughout the site. These signs outline rules such as maximum stay durations, payment requirements, permitted parking bays, and restrictions on certain activities. A breach of these published terms constitutes a contractual agreement violation, leading to the issuance of a PCN. It's the driver's responsibility to read and understand these terms before parking.

Data Collection: What Information Does VCS Ltd Gather?

In the course of their parking management activities, VCS Ltd collects various types of information. For sites under manual patrol, the primary data collected involves images of vehicles observed in breach of regulations. This includes the vehicle's registration mark (VRM) and may also capture images of individuals entering or exiting the vehicle. Beyond these initial observations, VCS Ltd may gather additional data depending on the circumstances:

• Payment details: If payment is made for parking services.
• Customer details: Basic information if you are a permit holder for a specific site.
• Contact details: Telephone numbers, email addresses, and postal addresses if you contact them directly.
• Registered Vehicle Keeper details: Name and postal address, often obtained from the DVLA if a PCN remains unpaid and the driver details are not initially provided.
• Hirer details: Name, telephone number, email address, and serviceable postal address if the vehicle is hired.
• Driver details: Name, telephone number, email address, and serviceable postal address if the driver is identified by the keeper or directly.
• Health condition details: Specifically in respect to Blue Badges, to verify eligibility for disabled parking provisions.
• Internet details: Including IP addresses and operating system details, particularly if interacting with their online services or appeals.
• Credit Reference information: Previous known addresses, aliases, associated persons, and County Court Judgements, potentially obtained from agencies like Experian if a PCN is persistently unpaid.
• Telephone Calls: Recordings of calls to their helplines and customer service lines for training and evidential purposes. These recordings capture information provided by you during the call.

It's important for motorists to be aware of the breadth of information that can be collected, as it directly relates to the enforcement process of parking charges.

Why Does VCS Ltd Collect Your Data? Lawful Purposes Explained

VCS Ltd collects and uses personal data for several defined reasons and purposes, all underpinned by specific lawful bases in accordance with current Data Protection Legislation. They are transparent about these reasons:

• Statistical Analysis: Anonymised registration details (without keeper information) are used to map or profile car park usage, understand traffic flow, and analyse customer payment methods. This data is purely for operational insights and does not identify individuals.
• Access Control: Registration details, including vehicle keeper, hirer, and driver information, are used to ensure only authorised vehicles, registered with VCS Ltd or their clients, are permitted access to specific car parks or sites.
• Parking Management: This is a core reason. Information collected helps ensure compliance with terms and conditions, identify the liable party responsible for a contravention, and facilitate the recovery of charges when a PCN is issued. This directly supports their business model of enforcing private parking regulations.
• Security & Crime Prevention/Detection: Data is used to enhance the security of the car parks they operate. Furthermore, VCS Ltd may be required to share information with the Police or other UK Statutory Enforcement Agencies to assist in their enquiries or investigations, contributing to broader public safety.

Crucially, VCS Ltd states that where they use your personal information, they do so based on the following lawful purposes:

• For legitimate business purposes: This primarily includes the pursuit and recovery of charges following the issuance of a PCN. This is a key aspect of their operations and is considered a legitimate interest for a private parking company.
• To perform a contract or an agreement with you: This applies if you have entered into a direct agreement, such as for contract parking services or car park control. By parking on their managed land, you implicitly agree to the displayed terms, forming a contract.
• To meet a legal obligation: This covers instances where they are legally compelled to process or share data, for example, under a court order or specific legislation.

VCS Ltd explicitly advises that they DO NOT rely on your express consent as a reason for processing personal data in the context of their parking enforcement activities. Therefore, they do not need to request your consent in advance or seek permission to process this data for the purposes outlined.

Where Does VCS Ltd Obtain Your Personal Data From?

Depending on the specific reasons for processing your data, VCS Ltd may obtain your personal information from various sources:

• Directly from you: You might provide this information when requesting services, making a payment, or appealing a PCN.
• From the Registered Vehicle Keeper: If you are not the registered keeper, the keeper of the vehicle may identify you as the driver or hirer responsible for the parking contravention.
• From the Driver & Vehicle Licensing Agency (DVLA): As an Approved Operator, VCS Ltd is permitted to request vehicle keeper details from the DVLA for any PCN they issue. This is a standard procedure for private parking companies seeking to enforce charges.
• From Credit Reference agencies: Specifically, VCS Ltd mentions using Experian to obtain Consumer Information Reports if a PCN remains unpaid. These reports can include data from various sources, such as Electoral Roll records and Public Records, including Court Records, to assist in tracing individuals for debt recovery.
• From their Clients: Depending on the nature of the services provided, information may be supplied by their clients, such as your employer, college, or university, especially if they are contracted to manage parking for these institutions.

VCS Ltd's Legal Basis for Data Access and PCN Enforcement

VCS Ltd operates within a robust legal framework that permits them to obtain and use personal data for the enforcement of parking charges. This is primarily because, by parking on their managed land, you are deemed to have entered into a contract with them by accepting the displayed terms and conditions. The legal bases cited include:

• Contract Law: As the driver of the vehicle, you are the liable party responsible for settling the charge incurred when a contravention is recorded. The terms and conditions displayed on signage around the car park form a contract, which you accept by parking. Their right to pursue a charge in this manner is significantly bolstered by the Supreme Court Ruling in ParkingEye Limited v Beavis [2015] EWCA Civ 402, a landmark case that affirmed the enforceability of parking charges on private land.
• Road Traffic Regulations Act 1984: At specific sites where VCS Ltd operates for clients, they may issue an Excess Charge Notice under powers obtained through this Act. Breaching such notices can lead to the driver or registered keeper facing criminal prosecution in the Magistrates Court, indicating a more severe level of enforcement.
• Byelaws: Similarly, at certain client sites, notices may be issued under relevant Byelaws. These also carry the potential for criminal prosecution in the Magistrates Court for the driver or registered keeper.
• Schedule 4 of the Protection of Freedoms Act 2012: In England & Wales, this Act provides a crucial legal pathway for private parking companies to seek recovery of unpaid Parking Charges. It allows the keeper of the vehicle to be liable for the unpaid charge if the driver cannot be identified or does not pay, under specific conditions. This provision significantly strengthens the enforcement capabilities of private parking operators.

Who Does VCS Ltd Share Your Data With?

VCS Ltd only shares your personal information with other organisations in consideration of the purposes for which it was originally collected. They explicitly state that they do not disclose or use your data for other purposes, such as marketing. The organisations with whom they may share some or all of your data include:

• Other companies within the Excel Parking Group of Companies.
• The DVLA, for obtaining registered keeper details.
• The Police and other Law Enforcement Agencies, for security and crime prevention/detection.
• Debt Recovery Agencies in England, Wales, and Scotland, for the recovery of unpaid PCNs.
• Law Firms in England, Wales, and Scotland, also for the recovery of unpaid PCNs through legal proceedings.
• The Independent Appeals Service (IAS), in relation to appeals against a PCN.
• The Court Services, including County Court, Sheriffs Court, The High Court, and Magistrates Court, for legal enforcement.
• Clients, particularly public bodies such as universities, colleges, or hospitals, for whom VCS Ltd processes data to identify employees, visitors, staff, students, or patients where relevant.

How Long Is Your Data Held? Retention Periods

VCS Ltd adheres to specific data retention periods, ensuring that personal data is only held for as long as necessary for the purposes for which it was collected and in line with any contractual or legal obligations. Here's a summary of their retention policy:

Securing Your Information: Data Storage Practices

VCS Ltd places a strong emphasis on securing the personal data they hold. They ensure that your data is treated with the strictest confidence and take appropriate steps to keep it secure once it has been transferred into their systems or those of third-party processors acting on their behalf. The primary method of storage is electronic, encompassing document formats, images, and database records.

When hard copy information, such as letters or other correspondence, is received, it is first transferred into an electronic copy. The original hard copies are then stored for a period before being securely disposed of. Their data storage systems incorporate up-to-date information security controls, including active firewalls and commercial data encryption services, to protect the data. When data is transferred to third parties, it is done so in a secure electronic format, ensuring that it can only be received and used by the intended parties for the specified reasons.

A key aspect of their data storage policy is that all personal information is stored on data systems run on data centres explicitly hosted within the UK. This means your data remains within the UK, except in the specific circumstance where the data relates to a non-UK registered vehicle or a non-UK resident. In such cases, they may engage with appropriate agencies in the relevant country of origin or domicile to facilitate enforcement or communication.

It is also important to note that VCS Ltd does not use your personal information in any automated decision-making processes. All their processes and systems require some form of user input or confirmation when processing or handling decisions that incorporate your information, ensuring human oversight.

Your Rights Under VCS Ltd's Privacy Policy (GDPR)

VCS Ltd complies with the requirements of the General Data Protection Regulation (GDPR) to uphold your rights to privacy. Their Privacy Notice provides clear reasons for why and how they use your personal data, and under what circumstances they may retain and share it with third parties. Under the scope of their Privacy Notice, you have several key rights:

• Right of Access: You have the right to know what personal information VCS Ltd holds about you. This allows you to verify the lawfulness of the processing and the accuracy of the data.
• Right to Rectification: You have the right to have any information VCS Ltd holds about you corrected if it is shown to be inaccurate or incomplete.
• Right to Erasure ('Right to be Forgotten'): You have the right to have personal data deleted or removed when there is no compelling reason for its continued use, provided that addressing your request does not conflict with other legitimate reasons VCS Ltd may have to retain your information (e.g., ongoing PCN enforcement).
• Right to Object: You have the right to object to VCS Ltd processing your personal data. This objection will be weighed against their legitimate interest in using your personal data. However, for matters where a PCN has been incurred, this is generally not considered a reasonable request except in very exceptional circumstances, as their processing is based on contractual and legitimate interests rather than consent.

VCS Ltd explicitly states that they do not process personal data under the basis of explicit consent for the purposes outlined in this Privacy Notice. Therefore, as the data subject, you do not have the right to withdraw consent in this matter, as consent was not the basis for the processing in the first place.

If you wish to exercise any of these rights or require more information about their Privacy Notice, you should contact their Data Protection Officer. You can do so by email at [email protected] or by post at: Data Protection Officer, Vehicle Control Services Limited, 7 Europa View, Sheffield Business Park, Sheffield, S9 1XH. They may need to establish your identity before releasing information but will aim to provide the requested information within one month of your confirmed request.

Navigating Parking Disputes: Appeals and Complaints

Should you find yourself in a dispute with VCS Ltd regarding a PCN or their data handling practices, there are established channels for recourse:

• PCN Appeals: If you wish to appeal a Parking Charge Notice issued by VCS Ltd, and your initial appeal to them is rejected, you typically have the option to escalate your appeal to the Independent Appeals Service (IAS). The IAS provides an impartial review of parking charge disputes on private land, ensuring a fair process for motorists.
• Data Protection Complaints: If you have concerns or wish to make a complaint about how VCS Ltd has handled your personal data, you can contact the Information Commissioner's Office (ICO). The ICO is the UK's independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. Their website (www.ico.org.uk) provides comprehensive guidance on making a complaint.
• Accredited Trade Association: Vehicle Control Services Limited is an Approved Operator for Parking on Private Land, and their Accredited Trade Association is the International Parking Community (IPC). You can find more details or lodge a complaint with the IPC via their website (www.theipc.info), which oversees the standards and conduct of its members in the private parking industry.

Frequently Asked Questions (FAQs)

Understanding the intricacies of private parking enforcement can be confusing. Here are some common questions motorists have regarding Vehicle Control Services Limited:

What is a Parking Charge Notice (PCN)?
A PCN is an invoice issued by a private parking company, like VCS Ltd, for an alleged breach of the terms and conditions of parking on private land. It is a contractual charge, not a fine.

Can I appeal a PCN from VCS Ltd?
Yes, you can appeal a PCN directly to VCS Ltd. If your appeal is rejected, you may have the option to appeal to an independent appeals service, such as the Independent Appeals Service (IAS), if VCS Ltd is a member of an accredited trade association that offers this service.

Why did VCS Ltd obtain my personal details?
VCS Ltd obtains personal details, primarily vehicle keeper information from the DVLA, to identify the liable party for an unpaid PCN. This is permitted under the Protection of Freedoms Act 2012 and is crucial for their legitimate business interest in recovering charges.

How long does VCS Ltd keep my data?
VCS Ltd retains data for varying periods depending on the type of data and its purpose. For unpaid PCNs, liable party details can be held for up to 6 years in England & Wales (5 years in Scotland) in line with statutory limitations on debt recovery. Other data, like statistical information, is held for shorter periods. Refer to the detailed retention table above.

What are my rights if I receive a PCN from VCS Ltd regarding my data?
Under GDPR, you have rights to access the data they hold about you, request corrections if it's inaccurate, and in some circumstances, request its erasure or object to its processing. However, these rights are balanced against VCS Ltd's legitimate interests in processing data for PCN enforcement, meaning certain requests may not be granted if they hinder the recovery process.

Does VCS Ltd use ANPR (Automatic Number Plate Recognition)?
While this specific privacy notice details manual patrols, VCS Ltd does operate sites using CCTV or ANPR, which are covered by separate privacy notices. If you are concerned about ANPR, you should consult their specific ANPR privacy policy.

Can I ignore a PCN issued by VCS Ltd?
Ignoring a PCN is not advisable. While a PCN is not a criminal fine, it is a contractual charge. Unpaid PCNs can lead to debt recovery actions, including court proceedings, which could result in a County Court Judgment (CCJ) against you, impacting your credit rating. It's always best to engage with the process, either by paying the charge or submitting a formal appeal.

In conclusion, Vehicle Control Services Limited plays a significant role in managing private car parks across the UK, employing structured systems and robust data handling practices. Understanding their operations, the legal basis for their actions, and your rights as a motorist is essential for navigating the complexities of private parking enforcement. By being informed, you can better manage any interactions you may have with parking management companies and ensure your data rights are respected.

If you want to read more articles similar to Vehicle Control Services Ltd: Parking & Data, you can visit the Automotive category.