Privacy Policy

This policy explains how Blue Badge Portal collects, uses, stores, and shares personal data when you use our registration service.

Special Category Data (GDPR)

We process information linked to Blue Badge records, which may reveal disability or medical status. This is treated as Special Category personal data under UK GDPR. We process this data only where necessary for the operation of the Blue Badge verification service and apply additional safeguards for confidentiality and access control.

Data Storage and OCR Processing

Badge photos are stored securely on our local server disk. We do not send badge photos to third-party cloud AI providers for OCR processing. OCR extraction is performed client-side within your browser session.

Retention and Deletion Policy

Our retention controls include automated clean-up:

Badge photos are permanently deleted 30 days after a badge is rejected.
Badge photos are permanently deleted 90 days after a badge expires.

Sharing with Parking Operators

To help prevent unfair fines, we share only the minimum operational data required with authorized parking operators: verified vehicle registration marks (VRMs) and badge expiry dates. We do not provide full badge photo records for routine checks.

Your Rights

You may contact us if you need help accessing, correcting, or understanding data linked to your account. Use Contact Support for privacy-related requests.