This has been issued by a private company. The fine is for £120. Is it legal? How does that company track my personal details. What about data protection? Do I have to pay it?