Privacy Policy

This Privacy Policy explains how ParkCanvas ("ParkCanvas", "we", "us") collects, uses, discloses and protects personal information when you visit our website, request a demo, or use our platform. ParkCanvas provides parking-management software to businesses ("Operators"); where we process information on an Operator's behalf, we act as their processor and their privacy notice also applies.

1. Information we collect

Information you give us

• Contact and demo-request details — name, work email, company, role and message.
• Account details for Operator users — name, email and role.
• Communications you send us.

Information from use of the platform

• Parking and transaction data — vehicle plates, sessions, bookings, permits and payment status.
• Payment details are collected and stored by our PCI-DSS compliant payment provider; we receive only tokens and limited metadata (e.g. card brand and last four digits), never full card numbers.
• Technical data — IP address, device and browser information, and basic usage analytics.

2. How we use information

• To provide, operate and improve the platform and website.
• To process parking sessions, bookings, permits and payments.
• To respond to enquiries and demo requests.
• To keep the service secure, prevent fraud and meet legal obligations.

We rely on the lawful bases of contract, legitimate interests, consent (where required) and legal obligation.

3. Sharing

We share information with: the relevant Operator for whom a parking transaction is made; service providers (subprocessors) who help us run the platform, such as cloud hosting, payment processing and email delivery; and authorities where required by law. We do not sell personal information. A current list of subprocessors is available on request.

4. International transfers

We may process information in countries other than your own. Where we do, we use appropriate safeguards. Data-residency options are available for Operators with specific requirements.

5. Retention

We keep personal information only as long as needed for the purposes above, to meet legal and tax obligations, and to resolve disputes. Operators can configure retention windows for transaction data.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, port or object to the processing of your personal information, and to withdraw consent. To exercise these, contact us at privacy@parkcanvas.com. If your data is processed by ParkCanvas on behalf of an Operator, we will refer your request to them.

7. Security

We protect information with encryption in transit and at rest, strict tenant isolation, access controls and auditing. See our Security & Trust page for details.

8. Cookies

We use a minimal set of cookies and similar technologies. See our Cookie Notice.

9. Children

Our services are intended for businesses and adults; we do not knowingly collect personal information from children.

10. Changes

We may update this policy from time to time. We'll revise the "last updated" date above and, where appropriate, notify you.

11. Contact

Questions? Email privacy@parkcanvas.com. The data controller is [Legal entity name], [registered address], [jurisdiction].

Note: This policy is a starting template and should be reviewed by qualified legal counsel and tailored to your legal entity, jurisdiction (e.g. NZ Privacy Act, Australian Privacy Principles, GDPR/UK GDPR) and actual data practices before launch.