Privacy Policy

Who we are

DriveCraft Driving School Ltd ("DriveCraft", "we", "us", "our") is a DVSA-registered driving school based at 39 Gold Street, Northampton, NN1 1RS. We are the data controller for the personal information we process.

We are registered with the Information Commissioner's Office (ICO) — registration number ZB687059 — in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: info@drivecraft.co.uk · 07475 925760

What information we collect

General enquiries & bookings

• Contact details: name, email address, phone number
• Lesson booking details: area, preferred transmission, experience level
• Payment information (processed securely via Stripe — we do not store card details)
• Communications you send us via the contact form, email or WhatsApp
• Website usage data via Google Analytics (anonymised)

Student Portal

• Login email address and one-time access codes (not stored after use)
• Lesson history: dates, durations, instructor, payment status
• In-portal messages between you and your instructor
• Payment records for lessons purchased through the portal
• Test date and test centre (if provided)

How we use your information

• To respond to enquiries and arrange driving lessons
• To process payments for lessons and packages
• To send lesson confirmations and reminders
• To improve our website and services
• To comply with our legal obligations

We will never sell your personal data to third parties or use it for unsolicited marketing without your consent.

Legal basis for processing

We process your data under the following lawful bases (UK GDPR):

• Contract — to fulfil your booking
• Legitimate interests — to respond to enquiries and improve our service
• Legal obligation — to meet DVSA and HMRC requirements

How long we keep your data

We retain booking and payment records for 6 years to comply with HMRC requirements. Contact form enquiries are kept for up to 12 months. You may request deletion at any time (subject to legal obligations).

Third-party services

We use the following trusted third-party processors. Each is bound by their own data processing agreements and GDPR-compliant policies:

• Stripe — secure payment processing (stripe.com/gb/privacy)
• Supabase — secure data storage, hosted in the EU (supabase.com/privacy)
• Resend — transactional email delivery (lesson codes, booking confirmations)
• Vercel — website hosting and content delivery
• Google Analytics — anonymised website usage tracking (IP anonymisation enabled)
• DVSA — driving test pass information submitted as required by law

We do not use your data for advertising profiling or sell it to any third party.

Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

• Access — request a copy of the personal data we hold about you (Subject Access Request)
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where there is no lawful reason to keep it
• Restriction — ask us to pause processing in certain circumstances
• Objection — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format
• Withdraw consent — where processing is based on your consent, you may withdraw it at any time

To exercise any right, email info@drivecraft.co.uk. We will respond within 30 days.

How to complain

If you are unhappy with how we handle your personal data, please contact us first at info@drivecraft.co.uk and we will do our best to resolve it.

You also have the right to lodge a complaint directly with the Information Commissioner's Office (ICO) — the UK's independent data protection authority:

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Our ICO registration: ZB687059

Cookies

We use essential cookies for site functionality and Google Analytics cookies (with IP anonymisation) to understand how visitors use our site. You can opt out of analytics cookies via your browser settings.