Privacy policy
What we collect, why we collect it, how long we keep it, and how to make us delete it.
Last updated 4 September 2026
Before publishing this site, fill in the bracketed details below.
This policy is complete and accurate for how the site currently works, but it needs your registered company name, address, and ICO registration number to be a valid notice. Search this page for square brackets. Once the pilot involves credit agreements, this policy will need a rewrite and a professional review.
Who we are
PayMyFines ("we", "us") operates paymyfines.co.uk. For the purposes of UK data protection law we are the data controller for the personal data described in this policy.
- Registered name: [Registered company name]
- Registered address: [Registered address]
- Company number: [Company number]
- ICO registration number: [ICO registration number]
- Data protection contact: privacy@paymyfines.co.uk
What we collect
We only collect what you type into a form on this site. Specifically:
If you join the waitlist
- Your email address.
- Which lists you asked to hear about, the pilot or the public launch.
- Anything you choose to write in the optional message box.
- A timestamped record that you gave consent, which we are required to keep as proof.
If you use the contact form
- Your name and email address.
- The topic you selected and the message you wrote.
- A timestamped record of your consent.
We do not ask for and do not want your bank details, your vehicle registration, your address, or a copy of your penalty notice. Please do not send them. If you do, we will delete them.
What we do not collect
This site sets no analytics cookies, runs no advertising pixels, and does not track you across other websites. We do not build a profile on you and we do not use automated decision making.
Why we use it, and our lawful basis
- Waitlist emails. To tell you when the pilot and the launch open. Our lawful basis is your consent, given by ticking the box on the form.
- Replying to you. To answer a message you sent us. Our lawful basis is your consent, and our legitimate interest in responding to people who contact our business.
- Product research. To understand what people need, in aggregate, so we build the right thing. Our lawful basis is legitimate interest. Anything we publish or share internally from this is anonymised.
- Proof of consent. To demonstrate we were permitted to email you. Our lawful basis is legal obligation.
Who we share it with
We do not sell your data. We do not share it with insurers, lead generators, brokers, advertisers, or anyone else looking to market to you. There are no exceptions to this and there is no version of our business model that depends on it.
We do use these service providers, who process data on our instructions:
- Formspree, which receives form submissions and forwards them to our inbox. Formspree acts as a processor under our instructions.
- [Email provider], which hosts the mailbox your message arrives in.
- [Hosting provider], which serves this website. Standard server logs may record your IP address for a short period as part of normal operation and security.
Some of these providers may process data outside the UK. Where that happens, transfers are covered by the appropriate safeguards required under UK GDPR, such as an International Data Transfer Agreement or adequacy regulations.
Third party content on this site
This site loads fonts from Google Fonts and icons from the jsDelivr content delivery network. When your browser requests those files, it necessarily reveals your IP address to those providers. They are not set by us to track you, and we receive no data back from them. If you would rather this did not happen at all, tell us and we will prioritise self hosting these files.
How long we keep it
- Waitlist records: until you unsubscribe or ask for deletion, or until twenty four months after launch if you never engage with any of our emails, whichever comes first.
- Contact messages: twenty four months after the conversation ends, so we have context if you come back to us.
- Consent records: for as long as we hold the related data, plus twelve months.
Your rights
Under UK GDPR you have the right to:
- Ask what personal data we hold about you and get a copy of it.
- Have inaccurate data corrected.
- Have your data deleted.
- Restrict or object to how we use it.
- Receive your data in a portable format.
- Withdraw consent at any time, which does not affect anything done before you withdrew it.
Email privacy@paymyfines.co.uk to exercise any of these. We will respond within one month, and it costs you nothing. Every email we send will also carry a one click unsubscribe link.
Cookies
This site sets no cookies. There is nothing to consent to and no banner to dismiss, which is deliberate. If we add analytics later, we will ask for your consent first and this section will change before anything is set.
Security
The site is served over HTTPS and form submissions are encrypted in transit. Access to submissions is limited to the people who need it. No system is perfectly secure, which is part of why we deliberately collect so little.
Children
This service is intended for adults who drive. We do not knowingly collect data from anyone under 18. If you believe we have, tell us and we will delete it.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113. You do not have to come to us first.
Changes to this policy
When we change this policy we will update the date at the top. If a change materially affects how we use data you have already given us, we will email you before it takes effect rather than relying on you to check this page.