Privacy Policy

Who we are

OverturnFine is operated by Overturn Ltd, 124 City Road, London, United Kingdom, EC1V 2NX ("we", "us", "our"). We are the data controller for the personal data described in this policy. You can contact us at hello@overturnfine.co.uk for any question about your data.

What we collect

When you use OverturnFine, we collect:

• The notice you upload. A photo of your parking notice, rejection letter, or related document, used to read the details on it. We do not keep a copy of the original photo itself once it has been read, we keep the text/data extracted from it.
• Case details. The information on your notice (reference number, vehicle registration, dates, location, amount), the grounds and mitigating circumstances you tell us, and your name and postal address, used to prepare your document and, where the form requires it, printed on it.
• Contact details.Your email address, used to send your order confirmation, your case link, and (for informal/formal challenge letters only) a one-time reminder if we haven't heard from you after several weeks.
• Payment information. Handled entirely by Stripe, our payment processor. We never see or store your full card details, only that a payment succeeded, the amount, and (if you provide it) your email.
• Basic technical data. Standard web server logs (IP address, browser type, timestamps) generated automatically by our hosting provider for security and reliability, not used to build a profile of you.

Why we collect it

We use your data only to:

• Work out what stage your case is at and what your options are.
• Prepare, and let you re-download, the document you paid for.
• Process your payment and send you a receipt/confirmation.
• Let you find your case again later using your reference and email.
• Respond if you contact us for help.
• Meet our own legal and accounting obligations (e.g. keeping payment records).

We do not sell your data, and we do not run advertising or advertising cookies on this site.

Cookies and analytics

With your consent, we use Google Analytics to understand how visitors use the site (which pages get read, whether the checker gets used), so we can improve it. You'll see a short banner on your first visit asking whether to allow this — analytics is off by default and stays off until you actively accept, and you can decline at any time.

We never send your name, address, email, PCN or reference numbers, vehicle registration, uploaded files, or anything extracted from your notice to Google Analytics. It only ever receives anonymous usage events (e.g. "a guide page's button was clicked", "a checkout was started") and standard technical data like page URLs and browser type.

Who we share it with

We use a small number of specialist providers to actually run the service. Each only receives what it needs to do its specific job:

• Anthropic(Claude), to read the text on your uploaded notice and help draft your document. Anthropic processes this data to provide that service to us. Under Anthropic's standard commercial API terms, data submitted through the API is not used to train their models.
• Stripe, to process your payment securely. Stripe is a payment processor regulated in its own right, see Stripe's own privacy policy for how they handle payment data.
• Resend, to send your order confirmation and case-reminder emails.
• Railway, our hosting provider, who stores our database and runs our servers, currently hosted in the EU.

We do not share your data with any other third party, and we never sell it. We may disclose data if required to by law, or to protect our legal rights.

How long we keep it

We keep your case data for as long as it may reasonably be useful to you, so you can always return to your order and re-download your document, and so we can meet our own legal/accounting obligations around payment records. If you'd like your data deleted sooner, contact us and we'll action it, subject to any records we're legally required to keep (e.g. payment records for tax purposes).

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you, and get a copy of it.
• Ask us to correct inaccurate data.
• Ask us to delete your data, subject to our legal record-keeping obligations.
• Ask us to restrict or object to certain processing.
• Ask for your data in a portable format.
• Complain to the Information Commissioner's Office (ico.org.uk) if you believe we haven't handled your data properly.

To exercise any of these, email hello@overturnfine.co.uk.

Security

We take reasonable technical and organisational steps to protect your data, including encrypted connections (HTTPS) for all traffic to this site, and access to our systems restricted to what's needed to run the service. No method of transmission or storage is 100% secure, but we take this seriously given the sensitive, legal nature of what we handle.

Changes to this policy

We may update this policy from time to time. If we make a material change, we'll update the date at the top of this page.