The signs at the Oradent Ashford car park clearly state that Civil Enforcement Ltd (CEL) is the parking operator. Both signs name CEL directly and include their contact details, website, and company number. One of the signs even says the site is “managed using ANPR and manual patrols by Civil Enforcement Ltd.”
So according to the signs, CEL are the company offering the parking contract to drivers, enforcing the rules, and obtaining DVLA data. There is no mention at all of Creative Car Park Ltd (CCP) on any of the signs.
This completely contradicts what the Oradent staff have said — they claim they only deal with CCP and have no involvement with CEL. They also said that the matter was reported to CCP and that CCP applied a “blackout.” This suggests the landowner’s agreement is with CCP, not CEL.
If CEL are not the company contracted by Oradent, then:
• CEL may be operating without proper landowner authority
• CEL may have unlawfully accessed DVLA data to issue the Notice to Keeper
• The PCN may be unenforceable, because the company issuing it wasn’t the company offering the parking contract at the time
At the same time, if Oradent's head office operations team has a centralised contract with CEL but the local staff mistakenly believe they deal with CCP, that’s a serious internal miscommunication. It may also explain why the wrong company (CCP) told Oradent they would apply a “blackout,” but had no actual control over the PCN issued by CEL.
To be clear:
• A driver cannot be in contract with both CCP and CEL at the same time.
• Only one company can be the operator authorised by the landowner.
• If CCP are not mentioned on the signage and CEL issued the PCN, then CEL must be the operator — and CCP had no power to cancel or intervene.
• If the landowner/landholder (Oradent) never contracted with CEL, then CEL may be issuing PCNs without landowner authority, which makes the use of DVLA data a potential GDPR breach.
This now strengthens the position that:
• Oradent need to explain who exactly holds the contract for parking enforcement at the Ashford site.
• If it’s CEL, then why were Oradent and their staff communicating with CCP instead?
• If it’s CCP, then CEL’s issuing of a PCN (and access to DVLA data) is unlawful.
This also increases the seriousness of the issue from a data protection and consumer law perspective.
As already stated, you should not communicate with DCBL under any circumstances.
Here is an updated letter you should now send to Oradent without delay:
Dear [Practice Manager / Oradent Head Office],
Following your recent response and the correspondence you shared between yourselves and Creative Car Park Ltd (CCP), I have since visited the Oradent Ashford car park and inspected the signage on site.
The signs clearly and repeatedly state that the car park is managed and enforced by Civil Enforcement Ltd (CEL). CEL is named on the signs as the party responsible for using ANPR and manual patrols, issuing parking charges, and contacting the DVLA. There is no mention whatsoever of Creative Car Park Ltd (CCP) anywhere on the signage.
This raises serious concerns.
You told me that your staff have no direct dealings with CEL and that they only deal with CCP. You also shared emails between your staff and CCP in which CCP acknowledged a fault with the terminal on 3 January 2025 and confirmed a “blackout” was applied, meaning no charges should have been issued. Yet the Notice to Keeper I received was issued by CEL – a completely different company.
As the Registered Keeper who has received the PCN, I am entitled to know who actually manages parking enforcement at this location. CEL and CCP are two separate legal entities. A driver cannot be in a contract with both of them at the same time, and only the company with a valid agreement flowing from the landowner has the authority to issue parking charges.
If CCP are the company you have contracted with, then CEL have:
• Accessed my personal data from the DVLA unlawfully
• Issued a parking charge with no legal authority
• Created serious confusion about who holds liability for this matter
If CEL are the company with the contract, then why were your staff communicating only with CCP, and why was a “blackout” agreed by a company with no apparent role in enforcement?
The situation is now completely unsatisfactory. You have passed this matter back to me and wrongly suggested that I deal with DCBL, a powerless third-party debt collector with no standing or authority. I will not be engaging with DCBL under any circumstances. They are not a party to any alleged contract and are entirely irrelevant.
As the occupier and party who appointed the parking enforcement company, you are jointly and severally liable for any data misuse, confusion, or enforcement action taken by the companies acting under your instruction. You cannot avoid that responsibility by referring me to a debt collector or stating that the matter is out of your hands.
I now require the following:
1. Confirmation of the full legal name of the company currently contracted to manage and enforce parking at the Ashford site
2. Confirmation of whether CEL were authorised to issue a parking charge in this case
3. An explanation of why your staff are dealing only with CCP, despite all signage referring exclusively to CEL
4. Written confirmation that the PCN will be cancelled immediately
5. Confirmation that CEL and/or CCP have been instructed to recall the matter from DCBL
If I do not receive a satisfactory response, I will escalate this matter as a formal complaint to:
• The Information Commissioner’s Office (ICO), due to the potential unlawful processing and sharing of my personal data
• The DVLA, as there is reason to believe that my data has been obtained and used without a proper legal basis
If it is shown that my personal data has been obtained and/or used unlawfully, I will hold all parties involved fully liable for breach of my rights under the UK GDPR and the Data Protection Act 2018, and I reserve the right to pursue a claim for damages and any other remedies available.
Please escalate this to your Head Office or regional operations team immediately. I expect a full and clear response without delay.
Yours sincerely,
[The Keeper’s name]
That still does not clarify what CCP have to do with an invoice from CEL if the contract is with CEL. Simply stating that CEL are acting for CCP is not an answer. If CCP were a trading name of CEL, that would be a different matter but that isn't the case as CCP are an independently registered limited liability company.
Something here doesn’t add up, and the whole situation smells bad.
According to the Notice to Keeper (NtK), it was Civil Enforcement Ltd (CEL) who obtained the Keeper’s personal data from the DVLA and named themselves as the “creditor.” That means CEL are claiming to have the legal right to issue and enforce the parking charge. Only the company with a valid contract from the landowner has that right, or someone authorised by them.
However, all communication from the landowner (Oradent) is with Creative Car Park Ltd (CCP) – a completely separate company from CEL. There is no communication at all between Oradent and CEL. So the question is: why did CEL access the Keeper’s DVLA data if Oradent are dealing with a different company (CCP)? If CEL do not have their own contract with Oradent, they had no lawful reason to get the Keeper’s personal details.
Under GDPR, any company accessing and using personal data must have a legal basis to do so. The usual basis in these parking cases is called “legitimate interest.” But that only applies if the company has a real interest and legal reason to act – such as being the contracted operator. If CEL does not have a contract with Oradent, they may will have accessed the Keeper’s DVLA data unlawfully.
There is another problem. Oradent clearly believes that CCP are handling the parking enforcement. Oradent passed the Keeper’s personal data to CCP to deal with the matter. But if CEL are the creditor and CEL got the data from the DVLA, why does CCP have any access to that data at all? The Keeper did not give permission for CCP to have their details, and CCP is not named on the NtK. If CCP are not the data controller, they have received the Keeper’s data unlawfully from Oradent or CEL.
It gets worse. CCP appear to know that the case has been passed to a debt collector (DCBL). That means either CEL shared the Keeper’s data with CCP, or CCP shared it with CEL, or Oradent shared it with both. In any of those cases, there has been data sharing between separate companies, and it is unclear if any of that sharing was lawful or agreed.
As for DCBL – they are not a party to the alleged contract. If a contract existed, it would be between the driver and either CCP or CEL – not both, and definitely not DCBL. There can’t be a single contract with both CCP and CEL. Only one company can hold the rights under the contract, not both at the same time.
You absolutely must not communicate with DCBL. They are powerless to do anything as they are not a party to any contract allegedly breached by the driver. Never, ever, communicate with a useless debt collector, especially DCBL. Ignore them.
So the GDPR issues are:
• Did CEL have a legal basis to access the Keeper’s data from the DVLA?
• Why is Oradent dealing with CCP if CEL claim to be the creditor?
• Why does CCP have the Keeper’s data at all?
• Was the Keeper’s data shared with DCBL without a proper legal reason?
• Has there been unlawful data sharing between separate companies without the Keeper’s consent or knowledge?
All of this creates a very confusing and probably unlawful chain of data handling.
These are the suggested next steps:
1. Do not communicate with DCBL.
This remains unchanged. DCBL are irrelevant. They are not a party to any alleged contract and cannot enforce anything. No replies, no engagement. Ignore them entirely.
2. Send a letter to Oradent.
Use the draft response below to put responsibility back on Oradent as land occupier. They are the party who contracted with CCP and/or CEL and are therefore jointly and severally liable for any data misuse, signage failings, or enforcement actions. This makes it clear that the matter is not closed and that you, the Keeper, will not be passed from pillar to post.
3. Hold off on contacting CEL or CCP for now.
Since the PCN was issued by CEL but all communication from Oradent has been with CCP, it's unclear who is truly responsible. Let Oradent clarify who they contracted with and who they instructed. If they fail to provide clarity or take responsibility, further action can then be taken directly with the parties involved.
4. Gather evidence from the site.
You should still return to the car park and:
1. Photograph all signage (especially terms and conditions)
2. Identify which company is named on the signage (CEL, CCP, or both)
3. Note any mention of how registration must be logged and whether any system failures are covered
This step is important in case a formal complaint needs to be escalated or if legal action is later brought.
5. Keep all communications and evidence organised.
Retain copies of:
• The NtK from CEL
• Any DCBL letters
• All emails or letters from Oradent
• The signage photos
• Any notes or records of phone calls This creates a full paper trail in case of escalation.
6. Await response from Oradent before further escalation.
Only once Oradent have replied (or failed to do so within a reasonable time) should you consider:
• Making a complaint to the ICO (for data misuse)
• Reporting the matter to the DVLA KADOE compliance team
• Contacting CEL or CCP directly for evidence of contract and data handling justification
• Making a Subject Access Request (SAR) if necessary to all parties
Here is a draft letter you should sent to your contact at Oradent:
Dear [Oradent Practice Manager/Reception],
Thank you for sending over the emails between your practice and Creative Car Park Ltd (CCP). However, I must make it clear that your response is not satisfactory, and I do not accept that this matter has been resolved by asking me to “deal with DCBL.”
To be clear:
1. The PCN (Notice to Keeper) was issued by Civil Enforcement Ltd (CEL), not CCP.
2. All of your communication has been with CCP, not CEL.
3. CEL and CCP are entirely separate companies. They are not trading names of one another.
4. There has been no communication between CEL and yourselves, and yet CEL claim to be the "creditor" in this matter and have obtained and processed my personal data, which raises serious concerns under data protection law.
5. I have never given consent for you to pass my personal information to CCP or CEL, or for it to be shared between them.
6. Despite being informed of the blackout, a PCN was issued. You then confirmed the vehicle was legitimately on site. CCP acknowledged the issue and agreed a “blackout” was applied — meaning no PCNs should have been issued. Yet the PCN has still been escalated to a debt collector.
I must also make it clear that I will not communicate with DCBL, who are not a party to any alleged contract and have no legal standing. They are irrelevant to this matter and their letters will be ignored.
As the land occupier and party who engaged the services of the parking operator (CCP or CEL), you are jointly and severally liable for the actions of any company you have authorised to enforce parking on the land. That includes the wrongful issue of charges, any unlawful sharing of personal data, and the ongoing harassment caused by debt recovery action.
I now require you to:
• Immediately escalate this matter to senior management within Oradent or your head office.
• Instruct CEL or CCP, whichever is responsible, to cancel the charge and to recall the matter from debt recovery.
• Confirm what contractual arrangements exist between Oradent, CCP, and CEL that have led to this confusion and the wrongful issue of a PCN.
• Explain why my data was shared or accessed by these companies without clarity or transparency.
If this matter is not resolved swiftly, I will have no choice but to consider a formal complaint to the Information Commissioner’s Office (ICO) and the DVLA, as well as exploring other avenues to recover any loss or distress caused.
I trust you will treat this matter with the urgency it deserves.
Yours sincerely,
[Keepers name]
Stop fretting! Even if this were to go all the way to a county court claim (highly unlikely), you would not be "summonsed" as this is not criminal matter. It is simply a civil contractual dispute. The County Court is the ultimate dispute resolution service and you should not be afraid of it.
There is some confusion in your facts as provided. While CCP and ParkingEye are the same company, Civil Enforcement Ltd is a completely different company.
Before we continue, let's summarise what we know so far:
Date of incident: Friday 3rd January 2025
Location: Oradent Ashford private car park
Operator: Creative Car Park Ltd (CCP) / Civil Enforcement Ltd (CE) ????
Issue: Terminal for number plate entry was out of service due to a building-wide power outage.
Mitigation:
• Vehicle registration details were manually provided to Oradent staff.
• Oradent Manager informed CCP and was reportedly told that a "blackout" would be applied, meaning no PCNs would be issued for that day.
• Outcome: Despite the above, a PCN was issued and sent to the registered keeper (you).
Post-PCN actions:
• Multiple calls were made to Oradent, who confirmed they had informed CCP.
• Oradent contacted CCP requesting cancellation.
• CCP has now declined to cancel on the basis that the case has been passed to DCBL for recovery.
• You are outside the appeal window and did not receive a formal rejection or POPLA code.
• CCP have not responded to your complaint emails.
So, analysis of the failings are:
1. Failure to consider mitigating circumstancesThe operator was informed in advance of the registration not being entered due to equipment failure. There is evidence the site owner asked for cancellation. Operators are expected under the BPA/IPC Private Parking Single Code of Practice (PPSCoP) to consider site-specific faults and cancellation requests from landowners.
2. Improper escalation while a complaint was unresolvedThe BPA now require that if a formal complaint is raised, the operator must treat it as an appeal if it's about a PCN — even if out of time. See PPSCoP, Section 11.2. Escalating to debt recovery during an unresolved complaint/appeal is poor practice.
3. Denial of access to independent appeal (POPLA)You were never issued with a rejection notice or a POPLA code, effectively denying you an independent appeal, breaching the operator’s obligations under the Code of Practice.
Recommended actions
Step 1: Formal Complaint to CCP Ltd
You've already emailed, but I recommend sending a formal complaint as a PDF attachment in an email or by first class post using a free "Proof of Posting" certificate from any post office, in order to preserve a paper trail.
Include the following points:
• State the PCN number, vehicle registration, and the date.
• Summarise the situation and refer to the evidence from Oradent.
• Cite Section 11.2 of the Private Parking Single Code of Practice, highlighting that your complaint must be treated as an appeal.
• Demand a response and cancellation, or at the very least, a rejection letter with a POPLA code.
• Request they instruct DCBL to suspend recovery until your complaint is resolved.
If you'd like, I can draft the complaint letter in formal terms for you.
Step 2: Formal Complaint to Oradent
Write to Oradent (preferably to a head office or practice manager) explaining:
• Their failure to ensure the PCN was cancelled despite being the landowner.
• That their chosen parking operator is damaging their reputation and causing distress to genuine patients.
•Request that they escalate the issue directly with the operator's management, not just frontline customer service.
This may be enough to generate internal pressure for cancellation.
You can safely ignore anything from DCBL or any other debt recovery agent. They are powerless to do anything except to try and persuade the low-hanging fruit on the gullible tree into paying out of ignorance and fear. They are not a party to any contract allegedly breached by the driver. Ignore DCBL and their ilk.
So, before we do anything else, I need clarification on how mention of Civil Enforcement Ltd (CEL) has come into this matter.