From 25th May 2018 data protection rules across Europe will undergo their biggest change in the last two decades. In April 2016, after years of negotiations officials agreed upon the European General Data Protection Regulation.
The change brings outdated personal data rules up to speed with an increasingly digital era. The amount of data we produce now wasn't foreseeable when current data protection laws were drawn up in the late 1990s.
So, from May 25, 2018, GDPR will be enforced by data protection regulators across Europe. It will change how businesses and public sector organisations can handle the information of their customers.
I am a self-employed Driving Instructor and Fleet Trainer trading as “Mikes-Driving)”.
For the services I provide I require some personal information about the people who take driving lessons or further training with me or inquire about lessons and/or further training.
This policy details my approach to the collection, generation and holding of personal data. For the purpose of this policy, “you” refers to anyone who contacts me about driving lessons, learners who have lessons with me and qualified drivers taking post-test training (e.g. Motorway Experience courses) with me.
You will be asked to confirm your acceptance of this policy, in writing during our initial session.
How do I collect information about you?
When you browse my website, I will see what pages have been visited (although this is only identified by your IP address).
However, you may prefer to disable cookies on this site and on others. The most effective way to do this is to disable cookies in your browser.
Whenever you contact me by email, phone call or any messaging service e.g. Text, WhatsApp, Facebook), I will store your messages and contact details on my phone/PC.
Prior to arranging your first lesson, I will request some information from you (from your Driving Licence), as well as your contact details.
Some additional information about you is generated by me.
What information do I collect, generate and hold about you?
The data I collect from you (that identifies you) and hold is:-
- Information from your Driving License
- Home Address and Pick Up Address (if different)
- Contact details (email and phone numbers)
- Messages from you (e.g. Text, WhatsApp, Facebook or email)
- The data I generate about you (that identifies you) and hold is:-
- Record of your lessons (dates and times)
- Record of your payments (dates and amounts)
- Record of your learning (using a 1-5 scoring system)
- Reference number that links all data about you
- Driving Test results, identified by Reference Number
- Website Traffic from (identifying pages visited by IP Addresses) or Google Search Console (identifying common searches for my website, using Google.)
Why do I need this information?
The information I collect from you is only used in my role as a self-employed driver trainer and either enables me to fulfill my contract with you or meet my legal obligations (e.g. providing evidence that I satisfied myself that anyone driving my car has a valid driving licence).
The information I generate about you is used to fulfill my contract with you (e.g. monitoring your progress in driving lessons) and to satisfy a legal requirement to be able to identify the driver of my car at any given time. I also have a legal obligation to maintain accurate records of payments received.
I will also need to view details on your vehicles Motor Insurance Certificate to ensure that any post-test training carried out in a vehicle provided by yourself is suitably insured.
Some information I generate is used for statistical purposes.
The contact phone number you provide to me will be stored on my phone and used to allow me to make contact with you in respect of driving lessons. I may also contact you, after you have passed your test, to see how you are getting on with your driving or to make arrangements for further sessions (if you have indicated an interest in any post-test lessons). If you wish to provide a testimonial for my website, I will also seek your written consent prior to publishing in case I am required to verify the source of the testimonial.
What do I do with it?
Data collected by me is used to enable me to:-
- Verify your on-line Driving Licence
- Keep a record of your lessons dates/times (partly to plan my diary and partly to be able to confirm the details of the driver using my car at any given time)
- Contact you during the course of your lessons, in respect of your lessons, or to check on your driving progress after you have passed your test
- Maintain an accurate record of payments made and the progress you have made throughout the course of your lessons
- Validate my accounts and have evidence for my annual self assessment (tax) return (to satisfy HRMC)
- Analyse results of driving tests, purely for my own statistical purposes and review of my approach to test preparation (identifying you only by your Reference Number and date of test)
- Analyse the performance of my website and understand how website visitors access/use my website
I hold data in a number of formats on my PC at home. I also create and maintain a paper based record called a “Driver Record”. This record captures dates of your lessons as well as dates and amounts of payments made in addition to recording the progress you have made, in your driving lessons against a driving lesson learning syllabus (simply noting what you have covered in your lessons and scoring your progress, using a 1-5 scoring system).Lesson Plans are also maintained recording the routes and details of individual lessons.
This information is also shared with you through the AA My Drive and AA L-Drive applications, which can be used to maintain your progress and contact details and allow you access to the information as well as additional training resources outside of scheduled lessons. The responsibility for the Privacy Policies associated with these applications reside with the Automobile Association, (please refer to their website for further information of needed)
What do I NOT do with it?
I do not use your data for marketing purposes or provide it to any other party, with the exception of where it is requested by a law enforcement body (Police or DVSA) or AA Driving School or insurance company (for insurance purposes, as requested, in the event of an incident resulting in any damage to my car, if you were the driver).
Any sensitive information you share with me about your personal life or your health (in writing or verbally) will not be recorded and will not be shared with others by me.
Links to other websites
My website contains links to enable you to visit other websites of interest. However, once you have used these links to leave my site, you should note that I do not have any control over that website. Therefore, I cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
How secure is your information?
Electronic data is held on a password protected PC. My PC is protected from malicious attacks using McAfee (Antivirus/Malware) software. files are backed up and stored on an wired network connected disk (held securely within my home address).This information is also available through my Wireless Network which is secured by WPA2 standard encryption, the encryption key is known only to myself.
Paper based files are held in folders at my home address except on the day of a pupils lesson, when they will be in my driving school car (which is locked when not attended).
How long do I keep your information?
If you phone/message me but do not arrange lessons with me, your messages/contact details will be held on my phone or PC for up to 30 days (from the date of your last contact) and then deleted.
Once you have started lessons with me, all information is held until you have permanently stopped lessons with me (e.g. passed your test or moved away from Northampton) and retained for up to 30 days after lessons have permanently stopped (except for the following data):-
- Record of Lessons/Payments (6 full accounting years)
- Log of Website Traffic (Most recent 500 pages visited – Approx. 6 weeks)
- Contact Details (Email address/Phone Number) – For six months after lessons have stopped (or sooner, if you request that I delete your contact details earlier).
- Written testimonials from yourself and related images, will remain on my website, as agreed by yourself on the Testimonials Authorisation Form.
Please note that if you stop lessons temporarily and agree a date of resumption, I will retain all your records as if you were an active pupil. However, if you stop lessons with me temporarily but do not indicate when you plan to resume or do not make contact with me for 90 days (after your last lesson), I will assume that you have stopped lessons permanently and delete all information held.
Can I see what information you hold about me?
Upon written request (email@example.com), I will supply you with details of all the information I hold about you (within 28 days of your request) or confirm that I have deleted information I have held about you (where information has passed its retention period and has already been deleted/erased/destroyed). Information is provided free of charge. However, in the event of repetitive requests (three times or more), I will charge an administration fee of £30.00. for subsequent requests.
Unused Credit Lessons on AA Account
Should there be any remaining credit lessons on your on line AA Account this will be remain. You will need to contact the AA Driving School directly to rearrange any necessary refund.