Important information about Unboot.me’s role
Unboot.me is primarily a technology platform supporting parking-compliance activities.
An authorized agency, property operator, parking-enforcement organization, security organization, property manager, tow provider, or other business using Unboot.me may determine whether and how parking rules are established or enforced.
Depending upon the processing involved, an authorized agency or business may act as the business, controller, or other legally responsible entity for Personal Information associated with its parking-compliance activities, while Unboot.me acts as its service provider, contractor, processor, or technology provider.
Unboot.me may separately act as a business or controller with respect to information that we process for our own purposes, including:
The fact that an enforcement record appears within Unboot.me does not mean that Unboot.me owns or controls the property involved or independently made the underlying decision to issue a warning, citation, immobilization, or tow request.
California Notice at Collection
This section is intended to serve as Unboot.me’s California Notice at Collection where the CCPA applies.
Where Personal Information is collected through a particular webform, payment interface, geolocation request, signup flow, dispute form, account-creation process, or other interface, Unboot.me may provide a shorter notice at that location linking directly to this section.
During the preceding 12 months, Unboot.me may have collected the following categories of Personal Information depending on the individual’s interaction with the Services.
Unboot.me does not presently collect protected-classification information, biometric information for the purpose of uniquely identifying individuals, or education information as ordinary categories of information required to provide the Services.
Incidental information could nevertheless appear within photographs, dispute submissions, communications, identification documents, or other information voluntarily submitted by a user.
Unboot.me does not sell Personal Information. Unboot.me does not share Personal Information for cross-context behavioral advertising as “sharing” is defined under the CCPA.
During the preceding 12 months, Unboot.me has not sold or shared categories of Personal Information for cross-context behavioral advertising, provided these statements accurately reflect all production tracking technologies and vendor configurations used by Unboot.me.
Unboot.me does not knowingly sell or share Personal Information of consumers under 16 years of age.
Sensitive Personal Information
Unboot.me may process Sensitive Personal Information within the meaning of the CCPA, particularly precise geolocation information, authentication information, and identification information where collected.
Unboot.me uses and discloses Sensitive Personal Information only for purposes reasonably necessary and proportionate to:
Unboot.me does not use Sensitive Personal Information for the purpose of inferring characteristics about consumers for advertising, marketing profiles, or unrelated behavioral analysis.
Unboot.me does not sell precise geolocation data. Unboot.me does not use motorist geolocation for continuous background tracking.
Because Unboot.me limits its use and disclosure of Sensitive Personal Information to legally permitted operational purposes and does not process such information for the purpose of inferring unrelated characteristics about consumers, Unboot.me does not presently maintain a separate “Limit the Use of My Sensitive Personal Information” mechanism.
If these practices change in a manner that creates such a right under the CCPA, Unboot.me will provide the required notice and mechanism before implementing the applicable processing.
Vehicle and parking-compliance information
Authorized field operators may create records containing information such as:
Information may be collected before the vehicle owner or driver directly interacts with Unboot.me because an authorized field operator or agency may first create the parking-compliance record.
Location information and location verification
Location information is an important part of certain Unboot.me Services.
Field operators may provide or generate location information when documenting parking-compliance activity and confirming that an enforcement event occurs within an authorized property or enforcement zone.
A motorist may also be asked to confirm their location during an applicable payment workflow.
When location permission is granted, Unboot.me may receive precise device-location information and compare the payer-confirmed location to the vehicle’s recorded enforcement location.
The Services may calculate and record:
The system may independently recalculate distance server-side to protect the integrity of the verification record.
Location-verification information may be classified as verified, mismatched, or unverified.
A geolocation denial, failure, or mismatch does not by itself create a parking violation.
Where permitted by the applicable transaction flow, payment may continue even if location permission is denied or unavailable, with the applicable transaction documented as unverified.
Unboot.me may create map snapshots showing the payer-confirmed location and recorded vehicle location. Such evidence is intended to remain within restricted storage and be accessible only to authorized persons with a legitimate reason to review it.
Public-facing views should not display raw GPS coordinates, private storage paths, IP addresses, or sensitive internal identifiers.
Unboot.me does not use motorist location information for unrelated advertising.
Motorist and payer information
When a motorist or another payer interacts with an enforcement record, Unboot.me may process:
This information is used to administer the transaction, identify the correct record, provide receipts, communicate relevant status information, process disputes, prevent fraud, maintain evidence, and comply with applicable legal requirements.
Payments
Payments may be processed through third-party payment processors acting under their applicable contractual and legal obligations.
Payment providers may receive information necessary to process a transaction.
Unboot.me may receive transaction information such as:
Unboot.me does not need to receive or store complete payment-card credentials where the applicable payment provider processes those credentials directly.
Payment records may be maintained to preserve transaction integrity and establish that a transaction was properly completed.
Disputes
Motorists may submit disputes through Unboot.me where dispute functionality is available.
A dispute may contain:
Dispute information may be provided to the authorized agency responsible for the applicable enforcement record and to authorized Unboot.me personnel where reasonably necessary to administer the dispute, provide support, preserve platform integrity, or meet legal or contractual obligations.
Dispute attachments are treated as restricted evidence and are not intended for general public access.
A privacy-rights request is separate from a parking-enforcement dispute. A request to delete, correct, or access Personal Information does not itself invalidate or cancel a warning, citation, immobilization, tow, payment obligation, vehicle-release record, or other enforcement action.
Towing and vehicle release
When towing is requested or completed, Unboot.me may process information necessary to identify, transport, store, and release the relevant vehicle.
Information may include:
Where an optional driver’s-license photograph or other identification image is provided for release verification, that information is intended for restricted access.
Unboot.me does not use identification photographs to create facial-recognition profiles or biometric identification templates unless separately disclosed and legally permitted.
Account and business information
Users operating on behalf of agencies, businesses, or tow partners may provide or generate information such as:
We use this information for authentication, authorization, account management, operational coordination, customer support, security, reporting, and legal compliance.
Device, network, and security information
When you use the Services, Unboot.me or its service providers may automatically process technical information such as:
We use such information to maintain security, detect unauthorized access, prevent fraud, diagnose problems, maintain availability, and improve reliability.
Sources of Personal Information
We may collect Personal Information from:
Purposes for which we use Personal Information
Unboot.me may use Personal Information to:
We limit the collection, use, disclosure, and retention of Personal Information to purposes that are reasonably necessary and proportionate to the applicable purpose or another compatible and properly disclosed purpose.
How we disclose Personal Information
Unboot.me may disclose Personal Information to the following categories of recipients.
Information may be available to the authorized organization responsible for administering the applicable property, parking-compliance operation, account, or enforcement record.
Information reasonably necessary for an authorized towing request, pickup, impound, storage, or release may be disclosed to the applicable tow partner.
We may disclose information to companies providing services such as:
Such parties are expected to process information consistent with applicable contractual restrictions and privacy law.
We may disclose Personal Information to attorneys, insurers, accountants, auditors, consultants, and other professional advisors where reasonably necessary.
Information may be disclosed where reasonably necessary to comply with applicable law, subpoena, warrant, court order, regulatory request, or other valid legal process, or to protect persons, property, legal rights, or platform security.
Personal Information may be transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable privacy requirements.
CCPA disclosures for business purposes
During the preceding 12 months, Unboot.me may have disclosed the following categories of Personal Information to service providers or contractors for business purposes:
Unboot.me does not authorize service providers or contractors to use such information for unrelated cross-context behavioral advertising.
No sale or sharing of Personal Information
For purposes of the CCPA:
Unboot.me does not sell Personal Information. Unboot.me does not share Personal Information for cross-context behavioral advertising.
Accordingly, Unboot.me does not presently provide a separate “Do Not Sell or Share My Personal Information” mechanism because Unboot.me does not engage in the activity to which that right applies.
Unboot.me may nevertheless maintain a privacy-request page or privacy-choice interface through which consumers may communicate privacy preferences and exercise other applicable rights.
If Unboot.me begins selling or sharing Personal Information as those terms are defined under the CCPA, we will provide legally required notices and opt-out mechanisms before engaging in such activity.
Global Privacy Control
Unboot.me recognizes legally valid opt-out preference signals, including Global Privacy Control (“GPC”), where required by applicable law.
When an applicable GPC signal is received, Unboot.me will treat the signal as a request to opt out of any activity legally defined as a sale or sharing for the browser or device transmitting the signal and, where legally required and technically capable of association, for the applicable consumer account.
Because Unboot.me presently does not sell or share Personal Information within the meaning of the CCPA, a GPC signal ordinarily confirms a privacy choice that already reflects our stated practices.
GPC does not prevent processing necessary to provide requested Services, complete transactions, authenticate users, prevent fraud, maintain security, satisfy legal requirements, or otherwise process information in circumstances not classified as sale or sharing.
Data retention
Unboot.me retains Personal Information only for as long as reasonably necessary and proportionate to accomplish the purpose for which the information was collected or another compatible, disclosed, and lawful purpose.
Retention periods are determined using factors including:
When Personal Information is no longer reasonably required, Unboot.me may delete, destroy, anonymize, or deidentify the information, subject to legitimate backup cycles, legal holds, security requirements, and applicable law.
Unboot.me does not retain Personal Information for longer than is reasonably necessary merely because storage capacity permits us to do so.
Public versus restricted information
Certain information must be made available to motorists to enable them to identify and respond to an enforcement record.
Public or unauthenticated interfaces may therefore display information reasonably necessary to identify the applicable record, which may include:
The following information is not intended to be publicly accessible merely because a person knows or enters a vehicle’s license plate:
Security
Unboot.me maintains administrative, technical, and organizational safeguards designed to protect Personal Information.
Safeguards may include:
No information system can guarantee absolute security.
If a security incident involving Personal Information occurs, Unboot.me will investigate and provide legally required notices when applicable.
Audit records and data integrity
Certain material platform events may be recorded within audit or integrity systems.
Audit records may document events involving:
Certain audit information may be immutable or otherwise protected from ordinary modification.
A consumer privacy request does not require Unboot.me to falsify an accurate transaction history, destroy information that must legally be preserved, compromise security controls, or eliminate information that applicable law permits Unboot.me to retain.
Information retained solely under an applicable CCPA exception will not be used for unrelated purposes inconsistent with that exception.
California privacy rights
Subject to applicable limitations and exceptions, California residents may have the following CCPA rights.
You may request information concerning Personal Information we have collected about you, including:
Where Unboot.me maintains information for longer than 12 months and applicable law requires access beyond the preceding 12 months, qualifying requests may include Personal Information collected on or after January 1, 2022.
You may request deletion of qualifying Personal Information collected from you.
The right to deletion is subject to legal exceptions, including circumstances where information is reasonably necessary to complete a transaction, provide requested Services, maintain security, detect fraud, preserve legal claims, satisfy legal obligations, or otherwise qualify for an exception under applicable law.
You may request correction of inaccurate Personal Information that Unboot.me maintains about you.
California consumers have the right to opt out where a business sells Personal Information or shares it for cross-context behavioral advertising. Unboot.me presently does neither.
California law provides a right to limit certain uses or disclosures of Sensitive Personal Information.
Unboot.me currently limits its processing of Sensitive Personal Information to purposes for which a separate right to limit is not required, including reasonably expected Services, security, fraud prevention, permitted operational services, and processing that is not performed to infer characteristics about consumers.
Unboot.me will not unlawfully discriminate or retaliate against a consumer for exercising rights provided by the CCPA.
How to submit a California privacy request
California consumers may submit a request to know, delete, or correct through:
Where applicable, the online request interface should permit a consumer to request information extending beyond the preceding 12 months where Unboot.me maintains responsive information for such a period.
If applicable law requires Unboot.me to provide an additional designated request method, including a toll-free telephone number, Unboot.me will provide that method in accordance with applicable law.
No consumer is required to create a new Unboot.me account solely to exercise a CCPA right.
Verification of privacy requests
Unboot.me may verify requests to know, delete, or correct to ensure that Personal Information is not disclosed, altered, or deleted at the request of an unauthorized person.
Depending on the information involved, verification may include matching information supplied by the requestor against information reasonably associated with the relevant record.
Information requested for verification may include:
We will consider the sensitivity of the requested information and the risk of harm from unauthorized access when determining the appropriate verification standard.
We will not request substantially more Personal Information than reasonably necessary for verification.
A request to opt out of sale or sharing, if applicable in the future, will not be subject to verification unless permitted by law.
Response time
For applicable requests to know, delete, or correct, Unboot.me will confirm receipt within the period required by California law.
Where the current CCPA regulations apply, Unboot.me generally will confirm receipt within 10 business days and respond to a verified request within 45 calendar days.
Where reasonably necessary and permitted by law, the response period may be extended so that the total response period does not exceed 90 calendar days, provided Unboot.me gives the consumer notice and explains the reason for the extension.
Unboot.me will respond to applicable opt-out requests as required by law.
Denials and exceptions
A privacy request may be denied in whole or in part where permitted by law.
Reasons may include:
Where required, Unboot.me will explain the basis for denying the request.
Service-provider and contractor processing
Where Unboot.me processes Personal Information as a service provider or contractor to an authorized agency or other business, Unboot.me processes such Personal Information consistent with applicable contractual and legal restrictions.
An agency may remain responsible for responding to privacy requests concerning Personal Information for which that agency is the applicable business or controller.
Where appropriate, Unboot.me may refer a request to the applicable agency or assist the agency in fulfilling the request.
Unboot.me does not acquire an independent right to sell or share agency-controlled Personal Information merely because the information is processed through Unboot.me.
Children
The Services are not directed to children under 13 years of age.
Unboot.me does not knowingly collect Personal Information directly from children under 13 in circumstances prohibited by applicable law.
Unboot.me does not knowingly sell or share the Personal Information of consumers under 16 years of age.
An enforcement record associated with a vehicle used by a household that includes a minor does not by itself mean Unboot.me knowingly collected Personal Information from that minor.
Automation and artificial intelligence
Unboot.me may use automated technology to assist with operational functions such as:
Automated plate recognition may assist a field operator by pre-populating information. It does not independently establish that a parking violation occurred.
Location-verification automation may calculate whether a payer’s confirmed location falls within an applicable threshold. It does not independently create a parking violation.
Unboot.me does not currently represent that these systems make decisions concerning employment, housing, financial or lending services, educational opportunities, or healthcare that constitute “significant decisions” under California’s CCPA automated-decisionmaking regulations.
If Unboot.me later deploys automated decisionmaking technology in a manner subject to California’s ADMT requirements, it will provide legally required pre-use notices and applicable consumer rights.
Data minimization and purpose limitation
Unboot.me seeks to collect, use, retain, and disclose only Personal Information reasonably necessary and proportionate for the relevant disclosed purpose.
Personal Information collected for one purpose will not be used for an unrelated, incompatible purpose without appropriate notice and, where required, consumer consent.
Unboot.me may periodically evaluate the information it collects to determine whether categories of Personal Information can be reduced, removed, anonymized, or retained for shorter periods.
Deidentified and aggregated information
Unboot.me may create aggregated or deidentified information for purposes such as:
Where information is maintained as deidentified information within the meaning of applicable law, Unboot.me will maintain and use it in deidentified form and will not attempt to reidentify it except where permitted by law to test whether deidentification methods remain effective.
Legal holds
Unboot.me may suspend an otherwise applicable deletion process when Personal Information is reasonably necessary for:
Information subject to a valid legal hold will be retained only as reasonably necessary for the applicable matter and subsequent lawful retention requirements.
Third-party services
The Services may interact with technology operated by third parties, including infrastructure, payment, mapping, authentication, communications, and other providers.
Where a third party acts as our service provider or contractor, we expect its processing to be governed by applicable contractual and legal restrictions.
Where you independently interact with a third-party product or service outside Unboot.me’s control, that provider’s own privacy policy and terms may apply.
International and other U.S. privacy rights
Individuals outside California may have privacy rights under other applicable state, federal, or international privacy laws.
Depending upon applicable law, these rights may include access, correction, deletion, portability, consent withdrawal, restriction, objection, and rights relating to targeted advertising, sale, profiling, or Sensitive Data.
Unboot.me will provide rights required by applicable law.
Nothing in this Privacy Policy is intended to reduce or waive any privacy right that cannot lawfully be waived.
Changes to this Privacy Policy
Unboot.me may update this Privacy Policy to reflect changes in:
The “Last Updated” date will identify the most recent revision.
Where a proposed use of Personal Information is materially different from the purpose originally disclosed and applicable law requires additional notice or consent, Unboot.me will provide that notice or obtain that consent before implementing the new use.
This Privacy Policy will be reviewed at least annually for accuracy and legal compliance.
Accessibility
Unboot.me intends for this Privacy Policy and its privacy-request mechanisms to be reasonably accessible to consumers, including consumers with disabilities.
If you have difficulty accessing this Privacy Policy or require it in an alternative format, contact help@unboot.me.
The online Privacy Policy should be presented in a format that permits consumers to print or save the document.
Contact Unboot.me
For questions regarding this Privacy Policy or Unboot.me’s privacy practices:
For privacy-rights requests, consumers should use the Unboot.me Privacy Request interface or contact the email address above.
Questions disputing the validity of a warning, citation, immobilization, tow, property rule, or associated enforcement decision should be submitted through the applicable Unboot.me dispute process rather than through a privacy request.
Relationship to other agreements
This Privacy Policy should be read together with any applicable:
Where Unboot.me processes Personal Information on behalf of an authorized agency subject to a written data-processing agreement, that agreement may impose additional privacy and security requirements between Unboot.me and that agency.
Nothing in this Privacy Policy is intended to waive or limit a nonwaivable right under applicable privacy law.