Privacy Policy

1. Who We Are

Way2Go Driving School is operated by Andy Hughes, a sole trader registered in England. Our contact details are:

• Email: info@way-2-go.uk
• Phone: 07808 765066

2. What Data We Collect

We may collect the following personal data:

• Account data: name, email address, phone number, postcode, role (learner, instructor)
• Profile data: profile photo (instructors), driving experience, instructor bio
• Usage data: course progress, quiz results, lesson completions
• Payment data: billing details processed securely via Stripe (we do not store card numbers)
• Communications: messages sent via our contact form or enquiry forms
• Technical data: IP address, browser type, device information (via cookies)

3. How We Use Your Data

We use your data to:

• Create and manage your account
• Match learners with local driving instructors
• Process enrolments and payments for courses
• Send transactional emails (account confirmation, instructor match notifications)
• Respond to enquiries submitted via our contact form
• Improve our website and services

4. Legal Basis for Processing

• Contract: processing necessary to provide services you've requested
• Legitimate interests: matching learners with instructors, fraud prevention, service improvement
• Consent: where we ask for your explicit consent (e.g. marketing emails)
• Legal obligation: where required by law

5. Third Parties We Share Data With

• Stripe — payment processing (their privacy policy applies to payment data)
• Brevo (Sendinblue) — transactional email delivery
• Cloudinary — media file storage (profile photos)
• Railway.app — hosting infrastructure
• postcodes.io — postcode lookup for instructor matching (no personal data sent)

We do not sell your personal data to third parties.

6. How Long We Keep Your Data

We retain account data for as long as your account is active, or for as long as necessary to provide services. Payment records are kept for 7 years to comply with HMRC requirements. You may request deletion at any time (see Your Rights below).

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a portable format
• Restriction — limit how we process your data
• Object — object to processing based on legitimate interests

To exercise any of these rights, email info@way-2-go.uk. We will respond within 30 days.

8. Cookies

We use cookies to keep you logged in and improve your experience. See our Cookie Policy for full details.

9. Security

We use HTTPS encryption, secure password hashing, and CSRF protection on all forms. Payment data is handled entirely by Stripe and never stored on our servers.

10. Complaints

If you have concerns about how we handle your data, you can contact us directly or lodge a complaint with the Information Commissioner's Office (ICO).

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.