Learners Lounge

Plain Sailing Tadley – Privacy Policy

Last updated: 01 January 2026

This Privacy Policy explains how Plain Sailing Tadley (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is:

Plain Sailing Tadley

Address: Heddle Road, Andover, SP11 6WY
Email: contact@mssdrivingschool.co.uk 
Telephone: 07438 656468 

2. Personal Data We Collect

We may collect and process the following personal data:

  • Full name
  • Email address
  • Telephone number
  • Home address
  • Date of birth
  • Provisional driving licence details (verified via uploaded image)
  • Lesson notes and instructor feedback
  • Progress tracker data
  • Booking and attendance records
  • Payment records (excluding card details)

We do not store driving test outcomes.

3. Lesson Notes & Progress Records

  • The most recent lesson record is stored on the website and visible only to the student and their assigned instructor.
  • Previous lesson records may be stored securely in Google Sheets for business continuity and compliance purposes.
  • Progress trackers are stored on the website and are visible only to the student and instructor.

4. Under‑18s & Parental Responsibility

Learners under the age of 18 may hold their own user account and access their learning resources and progress data.

Where a learner is under 18:

  • A parent or legal guardian with parental responsibility must also provide their details.
  • All contracts, lesson agreements, and binding arrangements must be accepted and signed by both the learner and the parent or legal guardian.
  • The parent or legal guardian accepts responsibility for payments, cancellations, attendance, and compliance with all applicable policies.

We only collect and process under‑18 data where necessary for lesson delivery, safeguarding, and legal compliance.

5. How We Collect Data

Personal data is collected through:

  • Website forms
  • User account registration
  • The Amelia booking system
  • Direct communication
  • Uploaded documentation (e.g., provisional driving licence images)

6. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Contract – to deliver driving lessons and related services
  • Legal obligation – including tax, safeguarding, and regulatory requirements
  • Legitimate interests – business operations, safety, quality control, and record‑keeping
  • Consent – where applicable (not used for direct marketing)

7. How We Use Personal Data

We use personal data to:

  • Manage bookings and payments
  • Deliver driving lessons
  • Track learning progress
  • Maintain safety and quality standards
  • Meet legal and regulatory obligations
  • Communicate essential service information

We do not carry out direct marketing via email, SMS, or WhatsApp.

8. Data Sharing

We may share personal data with:

  • DVSA, where required
  • Amelia, for booking and scheduling
  • Stripe and Square, for payment processing
  • Accountants, HMRC, and financial institutions
  • Government bodies, regulators, law enforcement, or courts where legally required
  • Franchise instructors, only where necessary to deliver booked services

We do not sell personal data.

9. Third‑Party Services

We use third‑party platforms including:

  • Amelia
  • Stripe
  • Square
  • Google services
  • WordPress
  • Jetpack
  • IONOS

These providers process data under their own privacy policies and security measures.

10. Cookies & Tracking

We use cookies and tracking technologies including:

  • Google Analytics
  • Meta (Facebook) Pixel
  • Jetpack

These tools help us understand website usage and improve performance. Cookie preferences can be managed through browser settings and our Cookie Policy.

11. Data Retention

We retain personal data for 6 years after the last lesson or interaction, unless:

  • A longer retention period is required by law, or
  • There is an ongoing dispute or legal requirement

Data is securely deleted once no longer required.

12. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse.

13. Your Data Protection Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request erasure (where applicable)
  • Restrict processing
  • Object to processing
  • Request data portability

Requests should be made in writing using the contact details above.

14. Data Breaches

In the event of a personal data breach, we will assess and report it to the relevant authorities where legally required.

15. Complaints

If you are unhappy with how we handle your data, you may complain to the Information Commissioner’s Office (ICO).

16. Policy Updates

This Privacy Policy is reviewed annually and may be updated when required.

Updates take effect upon publication on this website. Notification of changes will be provided via the website where appropriate.

Acceptance

By using this website, creating an account, or booking services, you acknowledge this Privacy Policy.