ITAL Group Limited is committed to compliance with all relevant UK and EU laws in respect of personal data, and to protecting the “rights and freedoms” of individuals whose information ITAL Group Limited collects in accordance with the General Data Protection Regulation (GDPR).

The General Data Protection Regulation 2016 replaces the EU Data Protection Directive of 1995 and supersedes the laws of individual Member States that were developed in compliance with the Data Protection Directive 95/46/EC. Its purpose is to protect the “rights and freedoms” of living individuals, and to ensure that personal data is not processed without their knowledge, and, wherever possible, that it is processed with their consent.

This section of the website explains what information we collect about customers and the procedures we have in place to safeguard their privacy.

Who are we?

We are ITAL Group Limited, trading as the Appeals Service (AS); we provide a second stage appeals service for customers issued with a Penalty Notice when parking on railway land.

Data Processors

We are data processors, as defined under the GDPR. We are only allowed to process your personal data in accordance with the GDPR and for the purposes notified to the Information Commissioner. You can find more information at the Information Commissioner's website at The Parking Company that took your details are the Data Controllers.

What personal information do we collect?

When you ask us to consider a further appeal, the Appeals Service will only request you provide the personal information that is needed to process your appeal. We require your data to pursue our legitimate interests in a way which might reasonably be expected as part of our appeals process.

When you ask us to review your appeal, you will need to provide us with personal details.

It is necessary to share your personal information with the parking operator which is the subject of your appeal. The company will be asked to provide us with its response to your appeal, this will include any information it holds from the point of issuing the Penalty Notice until the point you came to the Appeals Service.

Do we collect sensitive personal data?

On occasion, we may need to collect what is called sensitive personal data. When required by law we will obtain your explicit consent to do this at the time when we collect the information.

What do we use the personal data for?

The personal information that we collect is used to provide you with the service requested. To ensure that we follow your instructions correctly and to improve our customer service, we may monitor and/or record any communication between you and us. By using this website and its services you consent to the collection and use of the information you provide for the purposes set out above.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so

Your Rights

Under GDPR you are entitled to see the personal information we hold about you and you may ask to make any necessary changes to ensure that it is accurate and kept up to date. To make such a request contact the appropriate Parking Company.

Do we use your information for marketing purposes?


How we will contact you

This may be by post or e-mail depending on the information you have provided to us.

How long do we keep your personal data?

We will retain your information for as long as necessary to fulfil the purpose(s) above, and in accordance with the law.

If you require your data to be deleted please contact the Parking Company in writing with your request

Data Protection Officer

ITAL Group Limited are required to appoint a Data Protection Officer (DPO) under GDPR. If you have any comments, queries or requests relating to our use of your personal information or any questions about this Privacy Policy you can get in touch with our DPO at the address below or by email to

ITAL Group Limited
PO BOX 212
GU32 9BQ


To ensure that our website is as useful as possible we sometimes need to use cookies to help us gather information about how our website visitors use this site.

What are cookies?

A cookie (web cookie, or browser cookie) is a small file which is stored on your computer when you visit a website. These files are used by the website for a number of things but mainly to track or trace where you have been on the website and what you are searching for.

Cookies are also used to enable you to submit payments and appeals online. With cookies disabled you would otherwise need to do this by contacting our support teams by phone or letter.

For a more details, you can read about cookies on Wikipedia.

How does ITAL Group use cookies?

We actively use cookies to record how our visitors use and browse around our website. This helps us determine popular and unpopular pages and lets us know where we need to improve and what services we may need to promote or update.

In order to achieve this we use the popular Google Analytics system.

ITAL Group also use cookies to track information supplied when making a payment or an appeal - this is so that data can be aggregated over several pages before being submitted to our database. This also enables you to go back and change data on a previous page. We do not store your financial details and use a dedicated and accredited payment provider to take payments.

How to Disable Cookies

This website works best with cookies enabled, however if you wish to disable cookies, you can do this in your browser. Here are instructions on disabling cookies. This links to an instructional document maintained by a website which has no connection to AS.