Privacy Policy

At Zal Parking (“we”, “us”, “our”), your privacy matters to us. We provide valet and car parking booking services at O’Hare International Airport (ORD). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data — including your rights under the General Data Protection Regulation (GDPR). By using our website or booking our services, you agree to the practices described below.

1.Information We Collect

We collect information that you provide directly, as well as some information automatically when you use our website.

2.How We Use Your Information

• To process and confirm your parking bookings and payments.
• To manage your account and provide customer support.
• To send booking confirmations, updates, and service-related notifications by email or SMS.
• To send promotional offers by email or text — only where you have given consent (see Section 4).
• To improve our website, services, and security.
• To comply with legal obligations and prevent fraud.

3.Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the UK, we process your personal data under one or more of the following legal bases:

4.Marketing & SMS Communications

By opting in, you consent to receive promotional content and service messages from Zal Parking via email and SMS/text message. Message and data rates may apply.

You can unsubscribe at any time by clicking “unsubscribe” in any email, replying STOP to any text message, or contacting us directly. Withdrawing consent does not affect messages that are necessary for your booking.

5.Cookies

We do not sell your personal information. We only share it with trusted parties who help us run our service:

• Payment processors — to securely handle your payments and refunds.
• SMS and email providers — to deliver booking and marketing messages.
• Google reCAPTCHA & Google Maps — for security and location services on our site.
• Legal authorities — where required by law or to protect our rights and safety.

7.Data Retention

We keep your personal data only as long as necessary to provide our services, meet legal and accounting requirements, and resolve disputes. When it is no longer needed, we securely delete or anonymize it.

8.Data Security

We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10.International Data Transfers

We are based in the United States. If you access our services from outside the U.S., your data may be transferred to and processed in the U.S. Where required, we take steps to ensure your data is protected in line with GDPR.

10.Children’s Privacy

Our services are intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us and we will remove it.

11.Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised date. Continued use of our services after changes means you accept the updated policy.