Privacy Policy

1. Introduction

Drivora ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1a. Roles (Instructors & Students)

Drivora provides the platform. Driving instructors are independent businesses and may receive student contact details and booking information in order to deliver lessons. Instructors are responsible for how they use student data outside Drivora (for example, their own records, communications, and legal obligations).

2. Information We Collect

Instructor Information

• Name, email address, and phone number
• Business information (trading name, service areas, car details)
• Stripe Connect account information for payment processing
• Subscription and payment history
• Device fingerprint (for trial abuse prevention)

Student Information

• Name, email address, and phone number
• Pickup addresses for lessons
• DVLA driving record check code (optional; if provided by the student for instructor verification)
• Test date and experience level (optional intake questions)
• Booking and payment history

Usage Information

• IP address and browser information
• Pages visited and actions taken
• Analytics data via PostHog (see Cookies section)

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process payments and manage subscriptions
• Enable lesson booking and scheduling
• Support instructor verification workflows (DVLA check code, if provided)
• Send transactional emails (booking confirmations, reminders, payment notifications)
• Prevent fraud and abuse
• Comply with legal obligations
• Improve our Service through analytics

4. DVLA Check Code

Purpose: Students may choose to provide a DVLA “driving record check code” so instructors can verify driving record details using the official GOV.UK service.

What we do not collect: We do not request or store driving licence photos through Drivora.

Access: The check code is visible to the instructor who manages the student.

Retention: DVLA check codes typically expire after 21 days. Instructors may request an updated code if needed.

Official service: Students can create a check code via GOV.UK: View or share your driving licence information.

5. Data Sharing

We share your information only with:

• Stripe: For payment processing (both subscriptions and lesson payments via Stripe Connect)
• Supabase: For hosting and data storage (UK region)
• Resend: For transactional email delivery
• PostHog: For analytics (only if you consent to cookies)
• Between instructors and students: Contact information is shared to facilitate lesson delivery
• Law enforcement: If required by law or to protect our rights

We do not sell your personal information to third parties.

6. Cookies & Tracking

We use cookies for:

• Essential cookies: Supabase session cookies (required for authentication)
• Analytics cookies: PostHog tracking (requires your consent)

See our Cookie Policy for more details.

7. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Limit how we process your data
• Portability: Export your data in a machine-readable format
• Objection: Object to processing of your data
• Withdraw consent: For analytics cookies

To exercise these rights, contact us at support@drivora.co.uk

8. Data Retention

• Active accounts: Retained while account is active
• Deleted accounts: Anonymized (name, email, phone removed), but financial logs retained for 7 years per UK tax law
• Payment records: Retained for 7 years

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption at rest and in transit (TLS/SSL)
• Row-level security (RLS) in our database
• Private storage buckets with signed URLs (where used)
• Audit logging for sensitive actions
• Regular security updates

10. Children's Privacy

We allow bookings from students under 18 (as they are eligible for driving lessons in the UK). We do not knowingly collect data from children under 13 without parental consent.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via the platform.

12. Contact Us

For privacy questions or to exercise your rights, contact us at:

Email: support@drivora.co.uk