EntryPass Limited, MagicFine Privacy Policy

1. Who we are

MagicFine is operated by EntryPass Limited ("we", "us"). For the purposes of UK data protection law, the data controller is EntryPass Limited, a private limited company registered in England with company number 17239837, whose registered office is at 49 Station Road, Polegate, England, BN26 6EA. You can contact us at Hello@EntryPass.io or via our Contact page. MagicFine is independent and not connected to any council, parking company or appeal tribunal, and is not a law firm.

2. The information we collect

We collect the fine notice you upload as an image, PDF, screenshot or email. We also collect the answers and case details you provide, evidence you choose to attach such as photos and receipts, the email address you use to sign in, and payment related information, which is processed entirely by Stripe, so we never store your card details. We also collect limited technical data such as log and device information needed to run and secure the service.

3. How we use your information, and our legal basis

We use your uploaded notice and answers to identify the notice type, deadline and possible appeal grounds, and to generate your appeal pack. This is to perform our contract with you. We use your email to manage your account and send service messages on the same basis. We process payment information to fulfil purchases under contract, and to meet accounting obligations as a legal obligation. We use limited technical data to keep the service secure and working as a legitimate interest. If we send marketing emails in the future, we will rely on your consent, which you will be able to withdraw at any time.

4. AI and automated processing

We use multiple AI models that work together, cross checking each other and conducting deeper analysis, to give you the most accurate guidance on your fine. These outputs are guidance to help you decide and prepare. They are not legal advice and do not produce a legally binding decision about you.

We do not currently use your data to train AI models. We may do so in the future, but only to help our models produce better appeal responses based on the context of fines, and we would never use personal or sensitive data for training. Such details would be excluded before any data is used for this purpose. If we introduce model training, we will update this policy beforehand and, where required, give you the chance to opt out by contacting us at Hello@EntryPass.io.

5. Redaction

Before analysis you can manually blur personal details such as your name, address, vehicle registration and PCN number. Please keep the issuer, date, location, amount, reason and appeal information visible, as we cannot analyse the fine without them.

6. Who we share it with

We do not sell your data. We share data only with the sub processors that help us run the service, including payment processing by Stripe, and hosting and AI document analysis on Lovable Cloud infrastructure. We do not use any analytics or tracking tools. Each sub processor acts under contract and only on our instructions. We may also disclose information where required by law.

7. Where your data is processed

Your data is processed within Europe. Where any transfer outside the UK occurs, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual safeguards (IDTA/Addendum).

8. How long we keep it

You can delete any case and its uploads from your dashboard at any time. Sensitive documents and evidence are automatically deleted three months after a case is closed. A limited, non sensitive case summary remains available in your history. Payment and accounting records are retained separately for up to six years where legally required.

9. Security

Uploads are stored in private, access controlled storage tied to your account and are not publicly browsable. We restrict uploads by file type and size and validate files to reduce risk. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and we will notify you and the ICO of any qualifying breach as required by law.

10. Cookies and tracking

We do not currently use cookies or tracking tools. If this changes, we will update this policy and, where required, ask for your consent before using any non essential cookies.

11. Children

MagicFine is intended for adults dealing with their own parking fines and is not directed at anyone under 18.

12. Your rights

Under UK GDPR you can request access to your data, correction, deletion, restriction, portability, and you can object to certain processing or withdraw consent. Email us at Hello@EntryPass.io and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

13. Changes

We may update this policy and will revise the "last updated" date above. Significant changes will be highlighted in the app.