Privacy Policy
1. Data Collection:
What's collected:
Name, address, phone number, email address, payment details, driving license details, and potentially other information relevant to providing the service.
How it's collected:
Through forms, phone calls, emails, and potentially video recordings (dashcams).
2. Data Use:
For providing services: Booking lessons, communicating about appointments, and potentially using dashcam footage for training or evidence.
For legal compliance: Sharing data with the DVLA for test bookings.
For marketing (with consent): Sending newsletters or promotions (with the client's permission).
3. Data Sharing:
With third parties (with client consent or legal obligation): DVLA, payment processors, and potentially other service providers.
Without consent: Only in specific legal circumstances, such as when required by law or for the purposes of insurance claims.
4. Data Security:
Physical security: Keeping paper records locked away when not in use.
Digital security: Password protecting devices and apps used to store data.
Data encryption: Using encryption to protect data while in transit and at rest.
5. Data Retention:
Reasonable period:
Keeping data only for as long as necessary to provide services, comply with legal obligations, or for other legitimate business purposes.
Client rights:
Clients can request access to their data, request corrections to inaccurate data, and request deletion of their data.
6. Client Rights:
Access: Clients can request access to the personal data an instructor holds about them.
Rectification: Clients can request the correction of inaccurate data.
Erasure: Clients can request the deletion of their data, subject to certain exceptions.
Portability: Clients can request a copy of their data in a portable format.
Restriction of processing: Clients can request that their data not be used for certain purposes.
Objection: Clients can object to the processing of their data for certain purposes.
Withdrawal of consent: If consent is the legal basis for processing, clients can withdraw their consent.
7. Compliance with Data Protection Laws:
GDPR:
The General Data Protection Regulation (GDPR) is a key piece of legislation that impacts how driving instructors handle personal data.
Data Protection Act 2018:
The Data Protection Act 2018 provides further guidance on data protection in the UK.
8. Communication of the Privacy Policy:
Transparency: The privacy policy should be clear and easy to understand.
Accessibility: The policy should be easily accessible to clients, such as on the instructor's website or in a separate document.
Regular updates: The policy should be reviewed and updated regularly to reflect changes in the instructor's practices or data protection laws