Privacy Policy
How we collect, use and protect your personal data
Last updated: 23 August 2026
Direct Pass Driving ('we', 'us', 'our') is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
Data Controller
The data controller for this website is Direct Pass Driving, operating in Derby, Derbyshire. If you have any questions about this policy or how we handle your data, please contact us via the enquiry form on our website or by WhatsApp.
What data we collect
When you submit an enquiry form on our website, we collect: your full name, phone number, email address (optional), postcode, preferred lesson type (manual or automatic), and preferred availability. We may also collect technical data such as your IP address, browser type, and pages visited via analytics cookies (only with your consent).
Why we collect it (lawful basis)
We process your enquiry data on the basis of legitimate interests and to take steps at your request prior to entering a contract (Article 6(1)(b) UK GDPR). Specifically, we use your contact details to respond to your lesson enquiry, arrange bookings, and communicate about your lessons. We do not use your data for automated decision-making or profiling.
How we use your data
Your data is used solely to: respond to your enquiry, arrange and manage driving lesson bookings, send you relevant information about your lessons, and (with your consent) send occasional updates about offers or availability. We will never sell, rent or share your personal data with third parties for marketing purposes.
Who we share your data with
Your enquiry data is processed through our customer messaging platform (GoDaddy Airo Inbox) to deliver messages to our team. We may also use Google Analytics to understand how visitors use our website — this is only activated with your cookie consent. Both services act as data processors under our instruction and are bound by appropriate data processing agreements.
How long we keep your data
We retain enquiry and booking data for up to 2 years from your last contact with us, after which it is securely deleted. If you become a student, we may retain records relevant to your lessons for up to 6 years for legal and accounting purposes.
Cookies
Our website uses a cookie consent banner. Essential cookies are required for the site to function. Analytics cookies (Google Analytics) are only set if you click 'Accept' on the cookie banner. You can withdraw consent at any time by clearing your browser cookies. We do not use advertising or tracking cookies.
Your rights
Under UK GDPR you have the right to: access the personal data we hold about you, request correction of inaccurate data, request erasure of your data ('right to be forgotten'), object to processing based on legitimate interests, request restriction of processing, and data portability. To exercise any of these rights, please contact us via our website. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS encryption. Access to enquiry data is restricted to authorised personnel only.
Third-party links
Our website may contain links to third-party sites (such as WhatsApp). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
Changes to this policy
We may update this privacy policy from time to time. The 'last updated' date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.
The Information Commissioner's Office (ICO) is the UK's independent body set up to uphold information rights. You can contact them at ico.org.uk or on 0303 123 1113.
