Privacy Policy

FOF Driving School Manchester ("we", "us") decides how the personal information described here is used, so we are its data controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

FOF Driving School Manchester is run by Awaiting confirmation: the instructor's full name as a sole trader.

For anything about your personal information, contact us by email at fofabass@yahoo.com or phone 07939 737132.

We collect what you give us and what is created as you learn with us:

• Enquiries: your name, email and/or phone number, postcode, the lessons you're interested in and your message.
• Pupil accounts: your name, email address, mobile number, default pickup address and postcode, transmission preference and driving experience. Your password is handled by our sign-in provider; we never see it.
• Bookings: lesson type, date and time, pickup address, notes you add, booking status and history, and how you chose to pay.
• Learning records: progress on each driving skill, lesson reports your instructor publishes to you, mock test results, and theory and practical test dates and test centre if you share them.
• Instructor's private notes: teaching notes your instructor keeps about your lessons. These are never shown in your portal or to anyone you invite.
• Payments and credit: amounts paid, payment method, refunds, lesson hours bought and used, promo codes used and gift vouchers redeemed.
• Gift vouchers: the buyer's name and email, the recipient's name and email (if given) and any message.
• Waiting list: your name, email, phone number, postcode, preferred lesson times, experience and theory test status.
• Parent or guardian accounts: the parent's name, email and relationship, and which parts of your learning you've chosen to share.
• Referrals: if you join through a friend's referral link, we record the link between your accounts.
• Marketing choices: whether you've agreed to offers and news, when, how, and the exact wording you agreed to.
• Messages and account activity: a log of the emails we send you and whether they were sent successfully, and a record of important account actions for security.

We don't collect special category information (such as health details) through this website. Please don't include it in notes or messages; if your instructor needs to know about something that affects your driving, talk to them directly.

To provide your lessons (contract)

Taking and managing bookings, picking you up, teaching you, keeping your progress records, taking payments, managing lesson credit and vouchers, and sending booking confirmations, changes and reminders. We need this information to do what you've asked us to do.

Our legitimate interests

Keeping accurate teaching and business records, preventing double bookings, fraud and misuse, keeping accounts secure, answering enquiries, running the waiting list you joined, handling complaints, and improving our teaching. We only rely on this where it doesn't override your interests and rights.

Legal obligations

Keeping financial records for tax, and responding to lawful requests from authorities.

Your consent

Sending you offers and news by email. You can withdraw consent at any time (see Your choices). Withdrawing doesn't affect messages we need to send about your bookings.

We never sell your personal information and we don't use it for advertising.

Awaiting confirmation: legal review of the lawful bases, including for pupils aged under 18

Your instructor records what you covered in each lesson and how you're progressing against driving skill areas. You can see your published lesson reports, progress and mock test results in your pupil portal.

Progress records and mock tests are teaching tools. They aren't an official DVSA assessment and don't predict the result of your practical test.

Lesson reports are written by your instructor. If we start using AI tools to help draft them, we'll update this policy first.

We record what you pay, how you paid (for example cash, bank transfer or card), any refunds, and the lesson hours added to and used from your account.

We don't currently take card payments on this website. If we add online card payments, they'll be processed by a payment provider and we'll update this policy.

We use these service providers to run the website and your lessons. They process information only on our instructions:

• Supabase: our database and sign-in system. Our project is hosted in the London region.
• Resend: sends our emails, such as booking confirmations and reminders.
• Lovable: hosts this website.
• Cloudflare: provides the domain name services for fofdrivingschool.co.uk.

If you choose to open the coverage map on our home page, it loads from OpenStreetMap, which will see your IP address.

We may also share information where the law requires it, or to protect someone's safety.

Parents and guardians

A parent or guardian only gets access if you invite them, or your instructor sets it up, using their email address. They must create their own account with that same email and accept. They then see only what's been switched on for them: lessons, progress and reports, mock tests, and credit and purchases. They never see your contact details, pickup addresses or your instructor's private notes. You or your instructor can change or remove their access at any time, and it stops straight away.

Our database is hosted in the UK. Some of our providers (such as Resend and Lovable) are based in, or may process information in, other countries including the United States. Where that happens we rely on safeguards recognised under UK law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the International Data Transfer Agreement.

Awaiting confirmation: confirmation that each provider's data processing terms have been accepted for this account, and which safeguard each relies on

We keep information only as long as we need it for the purposes above:

• Pupil accounts, bookings and learning records: while you're learning with us and for a period afterwards in case you return or there's a query. Awaiting confirmation: retention period for pupil records
• Financial records: for as long as UK tax law requires.
• Enquiries: Awaiting confirmation: retention period for enquiries that don't lead to lessons
• Waiting list: until you book, leave the list, or Awaiting confirmation: retention period for inactive waiting list entries
• Marketing opt-outs: we keep a record that you've unsubscribed so we don't contact you again. Awaiting confirmation: retention period for opt-out records
• Message logs: Awaiting confirmation: retention period for email and text delivery logs

When information is no longer needed we delete it or anonymise it.

You have the right to:

• access the personal information we hold about you;
• correct anything inaccurate. You can update most details yourself in your account;
• ask us to erase your information, where we don't need to keep it;
• ask us to restrict how we use it;
• object to uses based on our legitimate interests, and to marketing at any time;
• receive information you gave us in a portable format, where processing is based on consent or contract.

To make a request, email fofabass@yahoo.com. We may need to confirm your identity first. We'll respond within one month, or tell you if we need longer because the request is complex, as the law allows. Deleting an account is done by us on request; there isn't a self-service delete button yet.

If you're unhappy with how we've handled your information, please tell us so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

• Offers and news: tick or untick the box in Account settings, or use the unsubscribe link in any marketing email. It takes effect immediately. See Marketing and unsubscribe.
• Family access: invite, change or remove a parent or guardian in Account settings.
• Waiting list: leave using the link in your waiting list email.

This website uses HTTPS. Access to your records is restricted by your account: you see your own records, your instructor sees the records needed to teach you, and a parent or guardian sees only what's been shared with them. Our providers' keys are kept on our servers, never in your browser.

Please use a strong password that you don't use elsewhere, and sign out on shared devices.

If a personal data breach is likely to put your rights at risk, we'll tell you without undue delay, and report it to the ICO within 72 hours where the law requires.

Many learners are 16 or 17 when they start. Pupils hold their own accounts and control what's shared with a parent or guardian, as explained above. If you're under 18 and unsure about anything here, ask a parent or guardian, or contact us.

Awaiting confirmation: legal review of consent and contract arrangements for pupils under 18

We only use storage that's needed for the website to work, such as keeping you signed in. Our Cookie policy lists exactly what's used.

If we change how we use your information, we'll update this page. For significant changes that affect you, we'll also tell you by email before they take effect.