Privacy Policy
Last updated: 22 August 2026
This Privacy Policy explains how A2Z Airport Parking Ltd collects, uses, shares and protects your personal data when you use our website to compare and book UK airport parking, hotel stays and flights.
Section 6 is the hotel and flight addendum. It supplements this policy. If there is any inconsistency, read the addendum together with the rest of this Privacy Policy.
By using our website, you agree to the practices described in this policy. If you do not agree, please do not use our website.
A2Z Airport Parking is operated by A2Z Airport Parking Ltd, a company registered in England and Wales (company number 10693802).
Registered office:
390 London Road, Mitcham, England, CR4 4EA
1. Who we are
A2Z Airport Parking Ltd acts as a UK travel comparison platform and booking agent. We help customers compare and book airport parking with third-party parking providers, and hotel stays and flights fulfilled by travel partners. We do not own or operate car parks, hotels or airlines.
For UK data protection purposes, A2Z Airport Parking Ltd is the data controller for personal data used to operate this website, provide search and booking functionality, maintain customer accounts, communicate with customers, prevent fraud, comply with law and provide support.
Hotels, airlines, travel suppliers and payment providers may act as independent controllers for the personal data they receive in order to provide their own services.
In this policy, references to "we", "us", "our", "booking agent", "comparison platform" or "booking platform" mean A2Z Airport Parking Ltd. References to "you" or "your" mean the customer. References to "parking provider" or "service provider" mean the third-party company that supplies the parking service. References to "travel partner" mean the hotel, airline or travel supplier that fulfils a hotel or flight booking.
2. Personal data we collect
We may collect:
- Contact details, such as name, email address and phone number
- Booking details, such as airport, dates, times, parking product, hotel or flight selection, passenger names and booking references
- Vehicle details, such as vehicle registration
- Payment-related information, handled securely by payment processors
- Customer support communications, including messages, emails, calls and complaints
- Technical data, such as IP address, browser/device data, pages visited and approximate location from IP
- Marketing preferences, such as newsletter consent and unsubscribe choices
- Account information if you create or use a customer account for Manage Booking
We do not store full card numbers or CVV data on our servers.
We collect only the data required for the relevant purpose. Travel-document details are collected only where a supplier requires them and are not retained unless operationally necessary.
3. How we use your data
We use your data to:
- Provide quote comparisons and process bookings
- Send booking confirmations, updates and service messages
- Share required booking details with the selected parking provider
- Help manage, amend or cancel bookings
- Respond to customer queries and complaints
- Prevent fraud and keep our website secure
- Improve our website and customer experience
- Send marketing only where you have consented
- Comply with legal, tax and accounting obligations
4. Legal bases under UK GDPR
Depending on the activity, we rely on the following legal bases. The material purposes are:
- Contract — hotel, flight and parking search, creating and servicing bookings, confirmations, amendments, cancellations, refunds and supplier communications needed to provide a service you requested
- Legal obligation — tax, accounting, regulatory and record-keeping duties, and responding to lawful requests
- Legitimate interests — proportionate security, fraud prevention, service administration, complaint handling and business improvement, where those interests are not overridden by your rights
- Consent — marketing where consent is required, and non-essential cookies or analytics where consent is required
5. Sharing your data
We may share your data with:
- Third-party airport parking providers to fulfil your parking booking
- The selected hotel and, where required, the hotel group
- The selected airline and, where required, codeshare or operating carriers
- LiteAPI (Nuitée Connect) as the travel technology partner that searches, reserves, tickets and services hotel and flight bookings
- Nuitée or the travel-partner payment entity as Merchant of Record for hotel and flight card payments
- Stripe as the payment processor for A2Z airport parking
- Website hosting, IT, analytics (only with cookie consent), email and customer support providers
- Professional advisers, such as accountants or legal advisers
- Authorities where required by law or to protect rights and safety
Hotel and flight suppliers and payment providers may process personal data outside the UK, including in the EEA and other countries used by the airline, hotel or travel technology partner. Where this happens, we use appropriate safeguards required by UK GDPR, such as adequacy regulations or standard contractual clauses, where they apply.
Processor and controller contracts with those suppliers must be in place before production use. A Data Protection Impact Assessment should be completed if our risk assessment indicates one is required.
6. Hotel and flight services addendum
Last updated: 22 August 2026
This addendum supplements A2Z Airport Parking's main Privacy Policy and explains additional personal data processing arising from hotel and flight search and booking services.
If there is any inconsistency, this addendum should be read together with the full Privacy Policy.
A trip summary on A2Z, if shown, is a convenience record of separate bookings. It does not mean we combine parking, hotel and flight into one contract or one payment.
6.1 Who is responsible for your data
A2Z legal entity: A2Z Airport Parking Ltd
Registered address: 390 London Road, Mitcham, England, CR4 4EA
Contact email: info@a2zairportparking.co.uk
A2Z Airport Parking Ltd may act as a controller for personal data used to operate its website, provide search and booking functionality, maintain customer accounts, communicate with customers, prevent fraud, comply with law and provide support.
Hotels, airlines, travel suppliers and payment providers may act as independent controllers for the personal data they receive in order to provide their own services.
6.2 Data we may collect for hotel bookings
Depending on the booking, we may process:
- name;
- email address;
- telephone number;
- billing/contact details;
- stay dates;
- destination;
- hotel and room selection;
- guest details;
- booking reference;
- cancellation/refund status;
- customer service communications;
- technical and security information.
6.3 Data we may collect for flight bookings
Depending on the booking and supplier requirements, we may process:
- passenger names;
- contact details;
- date of birth where required;
- nationality or travel document details where required by the supplier;
- itinerary;
- airline/fare selection;
- baggage and seat selections;
- booking/ticket references;
- servicing communications;
- cancellation/refund status.
We collect only the data required for the relevant purpose. We do not retain travel document information unless it is operationally necessary to ticket or fulfil the booking.
6.4 Why we use personal data
We may use personal data to:
- provide hotel and flight searches;
- create and service bookings;
- send confirmations and service communications;
- facilitate payments and refunds;
- communicate with travel suppliers;
- provide customer support;
- detect abuse, fraud and security incidents;
- comply with legal, tax, accounting and regulatory obligations;
- improve the service using appropriately controlled analytics;
- send marketing where permitted.
6.5 Lawful bases
Depending on the activity, A2Z may rely on:
- contract — where processing is necessary to provide a service requested by the customer;
- legal obligation — where records must be retained or supplied under law;
- legitimate interests — for proportionate security, fraud prevention, service administration and business improvement;
- consent — where required, for example certain marketing or non-essential cookie activity.
The material purposes and the bases we rely on for them are set out in section 4 of this Privacy Policy.
6.6 Who data may be shared with
Personal data may be shared where necessary with:
- Nuitée / LiteAPI and associated travel supply partners;
- hotels and accommodation providers;
- airlines;
- ticketing and flight servicing partners;
- payment processors, including Nuitée or the travel-partner payment entity as Merchant of Record for hotel and flight card payments;
- fraud/security providers;
- hosting and infrastructure providers;
- customer support providers;
- regulators, law enforcement or professional advisers where legally required.
Only data reasonably required for the relevant function is shared. Parking payments are processed separately by Stripe and are not part of the hotel or flight payment.
6.7 International transfers
Travel services can require personal data to be transferred outside the United Kingdom, including to a destination country, airline, hotel or supplier.
Where UK data protection law requires safeguards for an international transfer, the relevant controller should use an appropriate lawful transfer mechanism.
Where A2Z transfers personal data internationally, or instructs a processor to do so, we use UK GDPR safeguards such as the UK adequacy regulations or the UK International Data Transfer Agreement / standard contractual clauses, where they apply.
6.8 Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, including legal, tax, accounting, fraud prevention and dispute requirements.
The retention periods that govern hotel and flight data are set out in section 8 of this Privacy Policy.
6.9 Payment data
Card details are processed by the relevant payment provider.
A2Z does not store full card numbers or CVV data.
Where a travel partner is Merchant of Record, that party may process and retain payment information in accordance with its own privacy notice and legal obligations.
6.10 Your rights
Subject to applicable law, individuals may have rights including access, rectification, erasure, restriction, objection, portability, withdrawal of consent where consent is relied upon, and the right to complain to the Information Commissioner's Office.
How to exercise those rights is set out in sections 10 and 12 of this Privacy Policy.
6.11 Marketing
Booking a hotel or flight does not automatically enrol you into marketing unless there is a valid lawful basis.
Where consent is used, marketing consent is collected separately from acceptance of booking terms.
6.12 Changes to this addendum
A2Z may update this addendum where the travel service, suppliers or data practices change.
Material new uses of personal data will be brought to customers' attention before the new processing begins where required.
7. Cookies
We use cookies and similar technologies to run the website, remember preferences, understand usage and improve performance. Optional analytics and marketing cookies are used only with consent. You can accept, reject or change those preferences later via Cookie Settings in the footer. For full details, including the hotel and flight addendum, see our Cookie Policy.
8. Data retention
We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, tax, accounting, fraud prevention and dispute requirements.
The following retention schedule applies unless a longer period is required by law or a supplier must keep data longer under its own legal duties:
- Booking records — airport parking, hotel and flight booking records, including passenger and guest details needed for fulfilment, for the life of the booking and then up to 7 years
- Payment references — payment and accounting references (not full card numbers or CVV) up to 7 years
- Customer support records — support and complaint records for as long as needed for dispute, legal or service purposes
- Account data — while the account is active and then as needed to complete outstanding bookings, support or legal duties
- Marketing records — until you unsubscribe or withdraw consent
- Analytics and security logs — for as long as needed for security, fraud prevention and service improvement, then deleted or anonymised
Booking a parking, hotel or flight product is not consent to marketing. Marketing consent is collected separately, for example on a newsletter signup.
9. Security
We use reasonable technical and organisational measures to protect your information. However, no internet transmission or system can be guaranteed as completely secure.
10. Your rights
Depending on your circumstances, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent where processing is based on consent
- Complain to the UK Information Commissioner's Office
11. Third-party links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal data.
12. Contact us
For privacy questions or data requests, please contact us at info@a2zairportparking.co.uk, via our website contact page or write to:
A2Z Airport Parking Ltd
390 London Road
Mitcham
England
CR4 4EA
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), although we would appreciate the opportunity to resolve your concern first.
13. Changes to this policy
We may update this Privacy Policy, including the hotel and flight addendum, where our services, suppliers or data practices change.
Material new uses of personal data will be brought to your attention before the new processing begins where required. The latest version will be available on this page.
Related policies
For full booking conditions, see our Terms and Conditions.
For hotel and flight bookings, see our Hotels & Flights Terms and Conditions and Travel Partner & Booking Disclosure.
For cancellation and refund rules, see our Cancellation Policy (airport parking in sections 1 to 10; hotels and flights in sections 11 to 21).
For customer support and complaints, see our Customer Support & Complaints Policy.
For how we handle personal data, see our Privacy Policy.
For cookies and similar technologies, see our Cookie Policy.
