Privacy Policy
Last updated: 6 October 2025
1. Who we are and how to contact us
DrewMatic Automatic Driving School (“DrewMatic”, “we”, “us”, “our”) is committed to protecting your privacy. We act as a data controller for enquiries, bookings, customer service, marketing (where permitted), and franchise administration.
Contact: drewmaticsom@gmail.com • Phone: 07752 043 000 / 07870 809 373
This policy explains how we process personal data under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
2. Personal data we collect
We collect personal data you provide to us, for example via our website contact forms, phone enquiries, email, or through the Total Drive App when you have an active DrewMatic instructor or trainer.
Typical data includes: name, address, postcode, phone number, email address, preferred transmission, lesson/training location, availability, communications with us, and where relevant booking details, payments history, progress reports, reflective logs, and test information.
We do not intentionally collect special category data. If you choose to share medical information that may affect driving (e.g. for lesson planning), we will handle it with extra care and only as necessary for tuition safety and compliance.
3. How we use your personal data (purposes & lawful bases)
We process personal data only where we have a lawful basis:
- Contract: to provide services you request, such as driving lessons, instructor training, bookings, scheduling, and customer support.
- Legitimate interests: to manage our business, allocate instructors, maintain records, improve services, prevent misuse, and send essential service messages. We balance these interests against your rights.
- Consent: for optional activities such as marketing communications or inviting reviews via third parties, where required. You can withdraw consent at any time.
- Legal obligations: to comply with UK law and regulatory requirements, including responding to lawful requests and safeguarding matters.
4. Sharing your data (instructors, trainers, service providers)
We share only what is necessary for the purpose:
- Self-employed instructors and trainers: We provide your details to a DrewMatic instructor/trainer to deliver your lessons or training. They are bound by confidentiality and must protect your data. For their own records and statutory obligations, they may act as independent controllers for the tuition they deliver.
- Service providers: IT hosting, email, communications, scheduling, analytics, review platforms, advertising/retargeting partners (e.g. Google, AdRoll), and payment processors. These providers process data under contracts that protect your information.
- Legal/safety: We may disclose data to competent authorities where required by law or to protect rights, safety, or prevent fraud/abuse.
5. Total Drive App
When using the Total Drive App with a DrewMatic instructor or trainer, the following may be processed: appointments, payments, progress reports, reflective logs, and communications between you and your instructor/trainer. DrewMatic may review these records for service delivery, quality assurance, safeguarding, and dispute resolution.
6. Marketing, reviews, and your choices
We contact you about offers or promotions only where permitted by law: either with your consent, or where a legitimate interest applies and you have not opted out. We may send review invitations through partnered third-party platforms about your experience with DrewMatic.
You can opt out of marketing at any time by emailing drewmaticsom@gmail.com Service and transactional messages are not marketing and will still be sent when needed.
7. Cookies, analytics, and retargeting
We use cookies and similar technologies to run our website, understand usage, and show relevant ads on other sites through partners such as Google and AdRoll. These partners use cookie/ID data for retargeting based on your visits to our site. They do not collect your name, email, postal address, or phone number via these cookies.
You can manage or withdraw cookie consent using your browser settings and by clearing stored cookies. Some features may not function without certain cookies.
8. Payment information
Online and phone payments are processed securely by our payment providers. Card details are handled by the processor and are not stored by DrewMatic. On request we can provide links to our payment providers’ privacy policies.
9. Data security
We use appropriate technical and organisational measures to protect personal data, including secure servers, access controls, encryption in transit where applicable, and staff or contractor confidentiality obligations. While no system is completely secure, we work to prevent unauthorised access, use, alteration, or disclosure.
10. How long we keep your data (retention)
We retain personal data for up to six years after your last interaction with us to meet legal, tax, and business record requirements, unless a longer period is required due to a complaint, dispute, or legal obligation. Where consent is the basis, we keep data until you withdraw consent or the purpose ends, whichever is sooner.
11. Your rights
Under UK GDPR you have the right to:
- Access your personal data and receive a copy.
- Request correction of inaccurate or incomplete data.
- Request deletion in certain circumstances.
- Object to processing based on legitimate interests or direct marketing.
- Request restriction of processing in certain cases.
- Request data portability for information you provided, where processing is by consent or contract and automated.
- Withdraw consent at any time where consent is our lawful basis.
To exercise these rights, email drewmaticsom@gmail.com. We will respond without undue delay and within statutory time limits.
12. International transfers
Some service providers may store or access data outside the UK. Where this occurs, we use legally recognised safeguards, such as UK adequacy regulations or standard contractual clauses, to protect your information.
13. Children
Our services are primarily for individuals aged 17+. Where a learner is under 18, a parent or guardian should provide consent for marketing and handle contractual matters. We do not knowingly market to children.
14. Links to other websites
Our site may contain links to other websites. We are not responsible for their privacy practices. Review the privacy notices of any external sites you visit.
15. How to complain
If you believe your information has been misused or you are unhappy with how we process your data, contact us first at drewmaticsom@gmail.com . If you are not satisfied, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
16. Changes to this policy
We may update this policy from time to time. We will post the updated version here and adjust the “Last updated” date. We encourage you to review this page periodically.
