Can I get proof of custom to use in an appeal?

Our customers are not exempt from the terms and conditions of the car park operator If you need to prove that you paid for parking:

• Credit or Debit Card users can find the record of payment details on the Card Provider's statements;
• Paybyphone users have access to their payment data online or in emails or SMS texts;
• Park & Choose Permit holders are issued with a receipt and copy of our Terms and Conditions at the time of purchase, and the Registered Keeper can apply at Reception for a copy of the online record of their permit;
• Other drivers are advised by instructions on parking payment machines, and on the receipts they issue, to retain the receipt as proof of purchase of a parking permit.

When all is said and done, it is the driver's responsibility to keep the receipt.

GDPR Data Subject Requests (DSRs) must be made through specific channels See our Data Protection Statement article Your rights under data protection law for details. DSRs by other channels will be rejected under GDPR, as will DSRs for time-related data or metadata.

Reviewing best practice, we examined a hypothetical case in which a rogue makes a fraudulent DSR, representing that they were either the Registered Keeper or the driver of a vehicle, and need evidence to appeal a Parking Charge Notice:
We found that knowledge of presence or of absence of a vehicle could be used to match presence or absence of a third party driver or passenger to anonymous geodata device records inadvertently published by them (for example heatmapped locations of watches, fitness and other IoT devices, or smartphones running fitness or health tracker apps).

We further found that such data could then be used to discover social media user profiles and pattern-of-life records including home address, second home, contact details, images of the user, their occupation, place of work, deployment and holiday locations anywhere in the world, fitness training routes, biometrics, regular periods of absence from home - and provide a gateway to similar user profile and pattern-of-life data of their friends and colleagues. See the global investigative journalism website bellingcat.com article After Strava, Polar is Revealing the Homes of Soldiers and Spies .

It is therefore foreseeable that disclosure of anonymous time-related data or metadata can assist intrusive journalism or crime such as coercive control, burglary or terrorism. Therefore records which corroborate or eliminate personal location at a specific time cannot be disclosed on demand. This includes copies of admission tickets, receipts, merchant copies of card transactions, booking or attendance records, confirmation emails, security camera images, or vehicle registration marks entered into payment channels or permit schemes.