Skip to main content

Privacy Policy

Last updated: 23 March 2026

1. Who We Are

DriveSchoolPro is operated by LEAVE.REVIEW LTD (Company No. 05408918), a company registered in England and Wales with its registered office at 124 City Road, London, England, EC1V 2NX.

For the purposes of UK data protection legislation, LEAVE.REVIEW LTD is the data controller for the personal data described in this policy.

If you have any questions about this policy or how we handle your data, please contact us at privacy@driveschoolpro.com.

2. What Data We Collect

We collect the following categories of personal data:

Account information

When you register for DriveSchoolPro, we collect your name, email address, phone number, and business details (such as your driving school name and address).

Student records

Driving instructors and school administrators use DriveSchoolPro to manage student data, which may include a student's name, date of birth, driving licence details, learning progress notes, and lesson history. This data is entered by the account holder and is their responsibility to obtain appropriate consent for.

Payment information

Payments are processed securely by Stripe. We never store your full card number, CVV, or other sensitive payment credentials. Stripe provides us with a tokenised reference and basic transaction details (amount, date, last four digits of card).

Usage data

We automatically collect information about how you use the platform, including pages visited, features used, session duration, browser type, device type, and IP address. This helps us understand how the service is used and where improvements can be made.

Cookies and similar technologies

We use cookies and local storage to manage your session, remember your preferences, and (with your consent) analyse how visitors use our website. See Section 8 for full details.

3. How We Use Your Data

We use personal data for the following purposes:

  • Providing and improving the service — to deliver the DriveSchoolPro platform, maintain your account, and develop new features
  • Processing payments — to handle subscription billing and invoicing via Stripe
  • Transactional communications — to send lesson reminders, receipts, account notifications, and important service updates
  • Analysing usage — to understand how the platform is used so we can improve it (analytics only loaded with your consent)
  • Legal and regulatory obligations — to meet our obligations under HMRC, DVSA record-keeping requirements, and other applicable law

We do not use your data for advertising or sell it to third parties.

4. Legal Basis for Processing

Under UK GDPR Article 6, we rely on the following legal bases:

  • Contract (Art. 6(1)(b)) — processing your account information and student records is necessary to provide the service you have signed up for
  • Legitimate interests (Art. 6(1)(f)) — analysing usage patterns to improve the platform, fraud prevention, and security monitoring, where these do not override your rights
  • Legal obligation (Art. 6(1)(c)) — retaining financial records for HMRC requirements and other regulatory compliance
  • Consent (Art. 6(1)(a)) — loading analytics cookies and sending optional marketing communications, where you have explicitly agreed

5. Data Sharing

We share personal data only with the following third-party service providers, who process data on our behalf under appropriate data processing agreements:

  • Stripe — payment processing (see Stripe's Privacy Policy)
  • Neon — cloud database hosting (data stored encrypted at rest)
  • Vercel — website hosting and content delivery
  • Resend — transactional email delivery (lesson reminders, receipts, notifications)

We do not sell, rent, or trade personal data with any third party for their own marketing purposes.

6. Data Retention

We retain personal data for the following periods:

  • Active account data — retained for as long as your account is active
  • Financial records — retained for 6 years following the end of the relevant tax year, as required by HMRC
  • Deleted accounts — personal data is anonymised within 30 days of account deletion; financial records are retained for the period above to meet legal obligations
  • Usage analytics — aggregated and anonymised after 26 months

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — you can request a copy of the personal data we hold about you
  • Right to rectification (Art. 16) — you can ask us to correct inaccurate or incomplete data
  • Right to erasure (Art. 17) — you can request that we delete your personal data ("right to be forgotten"), subject to legal retention obligations
  • Right to restrict processing (Art. 18) — you can ask us to pause processing your data in certain circumstances
  • Right to data portability (Art. 20) — you can request your data in a structured, machine-readable format
  • Right to object (Art. 21) — you can object to processing based on legitimate interests
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at privacy@driveschoolpro.com. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

We use two categories of cookies:

Essential cookies

These are always active and are necessary for the website and application to function correctly. They handle session management, authentication, and security. They do not track you across other websites and cannot be disabled.

Analytics cookies

We use Google Analytics to understand how visitors use our website — for example, which pages are visited most often and where visitors come from. These cookies are only loaded if you click Accept All on the cookie consent banner. No analytics cookies are set if you choose Necessary Only.

We do not use advertising cookies or cross-site tracking cookies of any kind.

Changing your cookie preferences

You can change your cookie preferences at any time by clicking the button below to re-open the consent banner:

You can also install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from collecting data about your visits across any website.

9. Data Security

We take the security of your data seriously and use the following measures to protect it:

  • Encryption in transit — all data between your browser and our servers is encrypted using HTTPS/TLS
  • Encryption at rest — data stored in our database is encrypted at rest
  • Multi-tenant data isolation — your organisation's data is logically separated from other accounts; no other DriveSchoolPro user can access your data
  • PCI DSS compliant payment processing — all card payments are handled by Stripe, which is certified to PCI DSS Level 1
  • Access controls — access to production systems is restricted to authorised personnel only, and reviewed regularly

No method of transmission over the internet is completely secure. If you believe your data has been compromised, please contact us immediately at privacy@driveschoolpro.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data practices. When we make material changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this page periodically. Continued use of DriveSchoolPro after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For any data protection queries, to exercise your rights, or to raise a concern:

Email: privacy@driveschoolpro.com
Data Controller: LEAVE.REVIEW LTD
Registered address: 124 City Road, London, England, EC1V 2NX
Company number: 05408918