Privacy Policy

Last updated: 18 June 2026

ParkAhead ("we", "us", "our") operates the ParkAhead website and mobile web app (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it. We comply with the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.

1. Who we are (Data Controller)

ParkAhead is the data controller for the personal data described in this policy. For any privacy request, contact: privacy@nextspotcy.com.

2. Data we collect

Account data: email, display name, avatar, password hash, OAuth identifiers (e.g. Google).
Location data: approximate or precise GPS coordinates when you open the map, drop a parking spot, request a handoff, or confirm arrival. Location is processed in real time and only stored attached to specific actions (e.g. a spot you created).
Vehicle information: optional details such as license plate, vehicle make/model, and EV charging needs, where you choose to provide them.
Payments (where applicable): processed by our payment processor; we receive transaction metadata (amount, status, last 4 digits) but never your full card number.
Owner / business data: business name, contact phone, city, lot details for users who apply as parking owners.
Usage & device data: IP address, browser, device type, language, pages viewed, timestamps, error logs.
Reputation & activity: spots created, handoffs completed, reports submitted, reputation score history.

3. How we use your data and legal basis

To provide the Service (contract, Art. 6(1)(b) GDPR): show nearby parking, run the handoff flow, process bookings.
Location processing (consent, Art. 6(1)(a)): we ask your browser for location permission and only use it while the relevant feature is active.
Payments and fraud prevention (contract + legitimate interests, Art. 6(1)(b)/(f)).
Reputation, safety and abuse prevention (legitimate interests, Art. 6(1)(f)).
Legal obligations (Art. 6(1)(c)): tax records, responding to lawful requests.
Service emails (contract); marketing emails only with your consent and an unsubscribe link.

4. Sharing

We share data only with:

Hosting and database providers that run the Service on our behalf.
Map providers (e.g. Google Maps) to render the map and search nearby parking.
Payment processors to take and refund payments.
Other users — your display name, avatar and reputation are visible to drivers you interact with in a handoff. Your precise home address is never shown.
Law enforcement and regulators where legally required.

We do not sell your personal data.

5. International transfers

Some of our processors are located outside the EEA. Where this is the case we rely on EU Standard Contractual Clauses or equivalent safeguards.

6. Retention

Account data: until you delete your account, plus up to 30 days in backups.
Location attached to a spot or handoff: up to 12 months, then anonymised.
Completed bookings: shown in "My bookings" for 24 hours after the end time, then moved to "Booking history" in your profile (and in the owner's profile for the corresponding owner). Booking history is automatically deleted 30 days after the booking ends.
Payment and invoicing records: 7 years (tax law).
Server logs: up to 90 days.

7. Your rights

You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interests. You can withdraw consent at any time. To exercise these rights email privacy@nextspotcy.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.

8. Security

We use encryption in transit (HTTPS), encryption at rest for our database, hashed passwords, and role-based access. No system is 100% secure; please use a strong, unique password.

9. Children

The Service is not intended for anyone under 16.

10. Changes

We may update this policy. Material changes will be notified in-app or by email at least 14 days before they take effect.