Privacy Policy

Last updated: January 2026

1. Introduction

IMS Driving School ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or website, you agree to the collection and use of information as described in this policy.

2. Who We Are

Data Controller:

• Trading Name: IMS Driving School
• Phone: 07999 066136
• Website: https://imsdrivingschool.co.uk
• Service Area: Manchester and Greater Manchester

For data protection queries, please contact us using the details above.

3. Information We Collect

3.1 Information You Provide Directly

When you book lessons, contact us, or use our website, we may collect:

• Identity Information: First name, last name
• Contact Information: Phone number, email address, home address or pickup location
• Driving Information: Provisional/full licence status, experience level, any relevant medical conditions
• Booking Information: Preferred lesson times, package selected, scheduling preferences
• Payment Information: Billing address (card payment details are processed securely by Stripe and not stored by us)
• Communications: Records of emails, calls, and messages between us

3.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Technical Information: IP address, browser type and version, device type, operating system
• Usage Information: Pages visited, time spent on pages, click patterns, referral source
• Location Information: General geographic location based on IP address

3.3 Lesson Records

During your time as a student, we maintain:

• Progress notes and lesson summaries
• Attendance and punctuality records
• Areas covered and skills developed
• Test readiness assessments
• Any incidents or concerns noted

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Marketing Communications

We will only send marketing communications if you have opted in to receive them. You can opt out at any time by:

• Clicking "unsubscribe" in any marketing email
• Contacting us directly to update your preferences
• Updating your preferences in your account (if applicable)

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

5.1 Contract Performance

Processing necessary to provide the driving lessons and services you have booked, including:

• Scheduling and delivering lessons
• Processing payments
• Communicating about your booking

5.2 Legitimate Interests

Processing necessary for our legitimate business interests, where these do not override your rights, including:

• Sending service-related communications
• Maintaining student records
• Improving our services
• Protecting our business and students

5.3 Legal Obligation

Processing necessary to comply with legal requirements, including:

• Insurance and regulatory record-keeping
• Responding to legal requests
• Tax and accounting obligations

5.4 Consent

Where we rely on consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

6. Information Sharing

6.1 Third Parties We Share Data With

We may share your information with:

6.2 Legal Disclosure

We may disclose your information if required by law, court order, or government request, or to:

• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate potential violations of our terms

6.3 What We Don't Do

We do not:

• Sell your personal information to third parties
• Rent or trade your information for marketing purposes
• Share your information with unrelated third parties for their marketing
• Transfer your data outside the UK/EEA without appropriate safeguards

7. Data Retention

We retain your personal information for as long as necessary for the purposes described in this policy. Specific retention periods:

After retention periods expire, we securely delete or anonymise your data.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

8.1 Right of Access

You can request a copy of the personal data we hold about you. We will respond within 30 days.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete data. We will make corrections promptly.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data in certain circumstances, including:

• Data is no longer necessary for its original purpose
• You withdraw consent (where consent was the basis)
• You object to processing and there are no overriding legitimate grounds

Note: We may need to retain some data for legal, insurance, or regulatory purposes.

8.4 Right to Restriction

You can request we restrict processing of your data while we verify its accuracy or consider your objection.

8.5 Right to Data Portability

You can request your data in a commonly used, machine-readable format and have it transferred to another provider where technically feasible.

8.6 Right to Object

You can object to processing based on legitimate interests. We will stop unless we have compelling legitimate grounds.

8.7 Rights Related to Automated Decision-Making

We do not make automated decisions that significantly affect you without human involvement.

8.8 Exercising Your Rights

To exercise any of these rights, contact us using the details in Section 12. We will respond within 30 days. There is no fee for most requests, but we may charge a reasonable fee for manifestly unfounded or excessive requests.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

9.1 Technical Measures

• HTTPS encryption on our website
• Secure payment processing via PCI-DSS compliant provider (Stripe)
• Regular software and security updates
• Secure password practices

9.2 Organisational Measures

• Access to personal data limited to those who need it
• Staff awareness of data protection responsibilities
• Regular review of security practices
• Secure disposal of data when no longer needed

9.3 Data Breach Procedures

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours
• Notify affected individuals without undue delay
• Document the breach and remedial actions taken

10. Cookies and Tracking

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit websites. They help websites function and provide information to website owners.

10.2 Cookies We Use

10.3 Managing Cookies

You can control cookies through your browser settings:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Options > Privacy & Security > Cookies
• Safari: Preferences > Privacy > Cookies
• Edge: Settings > Privacy, search, and services > Cookies

You can also opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

Note: Disabling cookies may affect website functionality.

11. Third-Party Services

Our website and services use the following third-party providers:

These providers have their own privacy policies governing their use of your data.

12. Contact Us

For questions about this Privacy Policy, to exercise your data protection rights, or to make a complaint about our data practices:

IMS Driving School

• Phone: 07999 066136
• Website: https://imsdrivingschool.co.uk

We aim to respond to all data protection queries within 30 days.

13. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office

• Website: ico.org.uk
• Helpline: 0303 123 1113
• Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We encourage you to contact us first so we can try to resolve your concerns.

14. Children's Privacy

Our services are intended for individuals aged 17 and over (the minimum age for driving lessons). We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

For students aged 17, we may require parental consent and may communicate with parents/guardians about lesson progress.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes:

• We will update the "Last updated" date at the top
• We may notify you by email or website notice for material changes
• Continued use of our services after changes constitutes acceptance

We recommend reviewing this policy periodically.

16. Additional Information

16.1 International Transfers

We do not transfer your personal data outside the UK or European Economic Area (EEA). If this changes, we will ensure appropriate safeguards are in place.

16.2 Profiling

We do not engage in automated profiling or decision-making that significantly affects you.

16.3 Data Protection Officer

As a small business, we are not required to appoint a Data Protection Officer. Data protection queries should be directed to IMS Driving School using the contact details above.

This Privacy Policy was last reviewed and updated in January 2026.

© 2026 IMS Driving School. All rights reserved.