Privacy Policy

Introduction

This privacy policy explains how Tammy Driving Lessons uses and protects information provided when using driving instruction services. Tammy Driving Lessons is committed to ensuring privacy. Personal information will be used in accordance with this privacy policy and the UK General Data Protection Regulation (GDPR).

What information is collected

The following personal information may be collected from students:

Full name
Contact details, including phone number, email address, and home address
Date of birth
Driving license details (including provisional license number)
Details of lessons and progress
Driving test information (including booking details and results)
Payment records
A photograph of your Driving Licence

How information is used

This information is collected and used for the following specific and legitimate purposes:

To provide and manage driving lessons, including booking and scheduling.
To contact regarding lessons, cancellations, or other essential service updates.
To track progress and tailor lessons to student needs.
To manage payments and financial records, as required by law.
To book driving and theory tests on the student’s behalf, with explicit permission.
To comply with legal obligations as a driving instructor.

Legal basis for processing

Personal data is processed based on the following legal grounds under the UK GDPR:

Performance of a contract: Processing data is necessary to provide the driving instruction services requested.
Legitimate interests: Data may be processed to maintain accurate business and financial records, provided these interests do not override rights and freedoms.
Legal obligation: Processing is necessary to comply with the legal requirements, such as maintaining financial records for tax purposes.

Information sharing and disclosure

Personal information will not be sold, distributed, or leased to third parties. Data will not be shared with any other party for marketing or other purposes, unless explicit, written permission is given or required by law to do so.

Possible exceptions where information may be legally required to be shared include:

If a court order or other legal process compels it.
In the event of a motoring offense or incident during a lesson.
In specific safeguarding situations, particularly those involving vulnerable children.

Data storage and security

Tammy Driving Lessons is committed to ensuring that information is secure and will take reasonable steps to protect personal data from loss, misuse, and unauthorized access.

Physical records: All paper-based records (e.g., progress cards, diaries) are stored securely in a locked cabinet when not in use. They are not left unattended in the vehicle overnight.
Digital records: All electronic devices used to store personal data (e.g., computers, tablets, phones) are password-protected.
Data minimisation: Only the personal information that is strictly necessary for the purposes outlined above is collected and retained.

How long information is kept

Personal data will not be kept for longer than is necessary.

Lesson and progress records will be held for the duration of lessons and for a short period after the test has been passed or services have finished.
Financial records, which may include some personal data, will be retained for a minimum of [e.g., six years] to comply with UK tax law.
Once data is no longer required, it will be disposed of securely.

Rights

Under UK GDPR, the following rights regarding personal data are available:

The right to be informed: The right to know how data is being processed, which is the purpose of this policy.
The right of access: A copy of the personal information held can be requested.
The right to rectification: Data can be corrected if it is inaccurate or incomplete.
The right to erasure: Data can be requested to be deleted.
The right to restrict processing: The processing of personal data can be requested to be restricted in certain circumstances.
The right to object: Processing of data can be objected to.
The right to data portability: Personal data can be requested in a format that allows it to be moved to another provider.

To exercise any of these rights, please use the contact details below.

Contact details and complaints

If there are any questions about this privacy policy or how data is handled, please contact:

Data Controller: Tammy Goldstein
Email: tgoldstein0907@gmail.com

Phone: 07936 546223

If you are not satisfied with the response, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Changes to this policy

This policy may be updated from time to time. The latest version will always be available upon request.