Privacy Policy
Last Updated:
Who we are
Russell Driver Training (“we”, “us”, “our”) provides driving tuition services in the UK.
Data controller: Russell Driver Training
Contact: simonrussell.red.driving@gmail.com
What this policy covers
This policy explains how we collect, use, share and protect personal data submitted via our website enquiry form and in subsequent communications. It applies to prospective pupils and anyone submitting an enquiry on their behalf.
Personal data we collect
- Contact details: first name, surname, email address, mobile number.
- Address details: address line, town/city, postcode (we auto-format to uppercase; we may look up town/council using public postcode APIs).
- Lesson details: enquiry type, licence type, optional licence number, availability (days/hours), date of birth (to confirm eligibility).
- Technical data: reCAPTCHA risk analysis data generated by Google to help detect spam/bot activity (see “reCAPTCHA” below).
- Metadata: submission timestamp and internal status notes.
How we collect data
- Directly from you when you complete and submit the enquiry form.
- Automatically through Google reCAPTCHA v3 to protect the form against abuse.
- Derived (postcode normalisation and optional town autofill using the public
api.postcodes.ioservice).
Why we use your data (lawful bases)
- To respond to your enquiry and provide quotations/scheduling — legitimate interests (running and growing our tuition business).
- To send you an acknowledgement email confirming we received your enquiry — legitimate interests.
- To prevent spam and abuse using tokens and reCAPTCHA — legitimate interests (security and fraud prevention).
- To meet legal obligations such as record-keeping where required — legal obligation.
- Marketing — we will only send marketing with your consent (you can withdraw at any time).
Where we store your data
- Google Sheets (UK/EU/Global): enquiry submissions are stored in a private Google spreadsheet under our Google account.
- Email: a notification email is sent to us and a confirmation email to you. To reduce exposure, emails include redacted versions of sensitive fields (e.g., partially masked email/mobile).
Google may process data on servers located outside the UK/EEA. Where this occurs, we rely on appropriate safeguards (e.g., UK/EEA Standard Contractual Clauses) offered by Google as a processor.
reCAPTCHA
We use Google reCAPTCHA v3 to protect our forms against spam and automated abuse. reCAPTCHA analyses interactions (e.g., mouse movements, IP address, cookies) to determine whether a visitor is human. This is subject to Google’s privacy terms:
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Security
- Transport security via HTTPS on our site and between our site and Google services.
- Form submission protection using a server-checked token and reCAPTCHA.
- Access restrictions: Google Sheet is private to our account; we use strong authentication.
- Email redaction: we minimise sensitive data included in emails.
No internet service can be completely secure; we continuously review and improve our safeguards.
How long we keep data
We keep enquiry records for up to 12 months from the last meaningful contact unless a lesson relationship is formed, in which case some records may be retained longer for accounting, insurance or legal purposes. We regularly review and delete data that is no longer needed.
Who we share data with
- Service providers: Google (Workspace/Sheets, Gmail, reCAPTCHA) and our hosting provider, strictly to provide our services.
- Legal/Compliance: if required by law or to protect our rights, safety, or property.
- We do not sell your personal data.
Your rights (UK GDPR)
You have the right to request: access to your personal data; correction; deletion; restriction; objection to certain processing; and data portability. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
To exercise your rights, contact us at simonrussell.red.driving@gmail.com. We may need to verify your identity before fulfilling requests.
Children
Our services are not directed to children under 16. If you are a parent/guardian and believe your child has provided us with personal data without your consent, please contact us and we will delete it.
International transfers
Where data is transferred outside the UK/EEA (e.g., by Google), we rely on appropriate safeguards such as Standard Contractual Clauses and Google’s compliance commitments. For details, see Google’s Compliance information.
Changes to this policy
We may update this policy to reflect changes in law or our services. We’ll post the new version on this page with an updated “Last updated” date.