it looks like it skipped a stage, I never got a NTO in the post before this.
It hasn't skipped a stage, NTO = Notice to Owner, applicable to council tickets, not private. The letter explains the stages, and says that a PCN was affixed to the vehicle. Of course, as it wasn't your vehicle, you wouldn't have received this. Having presumably received no response from the driver, they have now issued a Notice to Keeper, using the details of the (cloned) plates.
You have missed their 'deadline' to appeal, but this is of little concern. I would write to P4Parking (the alleged creditor) explaining that the car to which they have issued the PCN was not yours, and was instead bearing false plates. Provide them with a copy of any report etc. that you have from the police, alongside the crime reference number. Whilst I would normally recommend ignoring debt collectors, as they seem to be acting on behalf of the parking company at the Notice to Keeper stage, I'd be tempted to also send a similar communication to them.
Feel free to show us a draft before sending.