Privacy Policy

1. Introduction

SCS Driving Instructor ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, store, and share your personal information when you use our website and services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect and Why

We collect personal data for the following purposes:

3.1 Account Registration

When you create an account, we collect your full name, email address, and phone number. This data is necessary to provide you with access to our booking system, student dashboard, and lesson management features.

3.2 Lesson Booking

When you book driving lessons, we collect booking details including dates, times, pickup locations, and lesson history. This data is necessary to deliver our driving instruction services and track your learning progress.

3.3 Contact Forms

When you submit a contact enquiry, we collect your name, email address, phone number, and message content. This data is necessary to respond to your enquiry and provide customer support.

3.4 Cookie and Consent Data

We collect cookie consent preferences to comply with UK GDPR requirements. See our Cookie Policy for full details.

4. Where We Store Your Data

All personal data is stored on UK-based servers. Your data is encrypted at rest using AES-256 encryption and transmitted over secure HTTPS connections using TLS 1.2 or higher.

We do not transfer your personal data outside the United Kingdom unless required by a third-party service (see Section 6 below), in which case appropriate safeguards are in place.

5. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

6. Third-Party Sharing

We share your data with the following third parties only where necessary to provide our services:

• Google Maps — We use Google Maps to display our coverage area. Google may collect usage data when you interact with the map. See Google's Privacy Policy.
• Google Reviews — We display Google Reviews on our website. Reviewer names and review content are sourced from the Google Places API.
• Email Service Provider — We use a third-party SMTP relay service to send transactional emails (booking confirmations, password resets, contact form acknowledgements). Your email address is shared with this provider solely for delivery purposes.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the following rights:

• Right of Access — You have the right to request a copy of the personal data we hold about you.
• Right to Rectification — You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure — You have the right to request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You have the right to object to the processing of your personal data in certain circumstances.
• Right to Restrict Processing — You have the right to request that we limit the processing of your personal data in certain circumstances.
• Right to Withdraw Consent — Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at scsdriving@outlook.com. We will respond to your request within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract — Processing necessary for the performance of a contract (e.g., providing driving lessons you have booked).
• Consent — Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing cookies).
• Legitimate Interest — Processing necessary for our legitimate business interests (e.g., improving our services, preventing fraud).
• Legal Obligation — Processing necessary to comply with a legal obligation (e.g., tax record-keeping).

9. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.