Plain Sailing Tadley – Privacy Policy
Last updated: 01 January 2026
This Privacy Policy explains how Plain Sailing Tadley (“we”, “us”, “our”) collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
The data controller is:
Plain Sailing Tadley
Address: Heddle Road, Andover, SP11 6WY
Email: contact@mssdrivingschool.co.uk
Telephone: 07438 656468
2. Personal Data We Collect
We may collect and process the following personal data:
- Full name
- Email address
- Telephone number
- Home address
- Date of birth
- Provisional driving licence details (verified via uploaded image)
- Lesson notes and instructor feedback
- Progress tracker data
- Booking and attendance records
- Payment records (excluding card details)
We do not store driving test outcomes.
3. Lesson Notes & Progress Records
- The most recent lesson record is stored on the website and visible only to the student and their assigned instructor.
- Previous lesson records may be stored securely in Google Sheets for business continuity and compliance purposes.
- Progress trackers are stored on the website and are visible only to the student and instructor.
4. Under‑18s & Parental Responsibility
Learners under the age of 18 may hold their own user account and access their learning resources and progress data.
Where a learner is under 18:
- A parent or legal guardian with parental responsibility must also provide their details.
- All contracts, lesson agreements, and binding arrangements must be accepted and signed by both the learner and the parent or legal guardian.
- The parent or legal guardian accepts responsibility for payments, cancellations, attendance, and compliance with all applicable policies.
We only collect and process under‑18 data where necessary for lesson delivery, safeguarding, and legal compliance.
5. How We Collect Data
Personal data is collected through:
- Website forms
- User account registration
- The Amelia booking system
- Direct communication
- Uploaded documentation (e.g., provisional driving licence images)
6. Legal Basis for Processing
We process personal data under the following lawful bases:
- Contract – to deliver driving lessons and related services
- Legal obligation – including tax, safeguarding, and regulatory requirements
- Legitimate interests – business operations, safety, quality control, and record‑keeping
- Consent – where applicable (not used for direct marketing)
7. How We Use Personal Data
We use personal data to:
- Manage bookings and payments
- Deliver driving lessons
- Track learning progress
- Maintain safety and quality standards
- Meet legal and regulatory obligations
- Communicate essential service information
We do not carry out direct marketing via email, SMS, or WhatsApp.
8. Data Sharing
We may share personal data with:
- DVSA, where required
- Amelia, for booking and scheduling
- Stripe and Square, for payment processing
- Accountants, HMRC, and financial institutions
- Government bodies, regulators, law enforcement, or courts where legally required
- Franchise instructors, only where necessary to deliver booked services
We do not sell personal data.
9. Third‑Party Services
We use third‑party platforms including:
- Amelia
- Stripe
- Square
- Google services
- WordPress
- Jetpack
- IONOS
These providers process data under their own privacy policies and security measures.
10. Cookies & Tracking
We use cookies and tracking technologies including:
- Google Analytics
- Meta (Facebook) Pixel
- Jetpack
These tools help us understand website usage and improve performance. Cookie preferences can be managed through browser settings and our Cookie Policy.
11. Data Retention
We retain personal data for 6 years after the last lesson or interaction, unless:
- A longer retention period is required by law, or
- There is an ongoing dispute or legal requirement
Data is securely deleted once no longer required.
12. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse.
13. Your Data Protection Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure (where applicable)
- Restrict processing
- Object to processing
- Request data portability
Requests should be made in writing using the contact details above.
14. Data Breaches
In the event of a personal data breach, we will assess and report it to the relevant authorities where legally required.
15. Complaints
If you are unhappy with how we handle your data, you may complain to the Information Commissioner’s Office (ICO).
16. Policy Updates
This Privacy Policy is reviewed annually and may be updated when required.
Updates take effect upon publication on this website. Notification of changes will be provided via the website where appropriate.
Acceptance
By using this website, creating an account, or booking services, you acknowledge this Privacy Policy.
