Privacy Notice

Ashley Legacy Driving LTD, trading as ALD Driving School, respects your privacy and is committed to protecting your personal information.

This Privacy Notice explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights available to you. It applies when you visit our website, make an enquiry, book or receive driving tuition or other driver training, communicate with us, or otherwise deal with ALD.

We process personal information in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003, in each case as amended, including by the Data (Use and Access) Act 2025.

The data controller is:

• Ashley Legacy Driving LTD, trading as ALD Driving School
• Registered office: 190 Park Road, Dukinfield, England, SK16 5LP
• Company number: 15853268
• ICO registration reference: ZB954911
• Telephone: 07759 971182
• Email: info@alddriving.co.uk
• Website: alddriving.co.uk

“ALD”, “we”, “us” and “our” in this notice mean Ashley Legacy Driving LTD.

Depending on your relationship with us and the service you request, we may collect:

• your name, date of birth, address, collection address, postcode, email address and telephone number;
• parent, guardian, payer or emergency-contact details where relevant;
• your preferred lesson days, times and locations;
• information about your driving experience, previous tuition and the training you require;
• lesson dates, attendance, cancellations, lesson summaries, progress, training goals, mock-test information and practical-test information;
• driving-licence details, which may include your driving-licence number or the last eight characters, licence category or entitlement, validity or expiry information and the outcome of a licence check;
• where relevant to training in your own vehicle, trailer or caravan, the vehicle registration, make and model and evidence relating to insurance, roadworthiness or entitlement;
• payment information, including amounts, dates, references, balances and, where needed for a refund, bank-account details;
• messages and other communications sent by email, telephone, text message, WhatsApp, the Total Drive app or another agreed channel;
• information about complaints, accidents, incidents, insurance matters or legal claims;
• photographs, videos, reviews or testimonials where you choose to provide them;
• marketing and communication preferences;
• information you voluntarily provide about a health condition, disability or required adjustment where relevant to safe and suitable tuition;
• limited website and technical information described in section 10; and
• road and surrounding-area footage captured by our vehicle cameras, as described in section 13.

A driving-licence check may display endorsements, penalty points or disqualifications. This may amount to criminal-offence data and is subject to additional protection, as explained in section 7.

We usually obtain information directly from you when you:

• complete a website enquiry form;
• contact us by telephone, email, text message, WhatsApp or another communication service;
• create or use a pupil account;
• book, pay for or attend tuition or training;
• provide a driving-licence check code;
• provide information about your experience, health, training needs or practical test; or
• provide a review, testimonial, photograph or video.

We may also receive information from:

• a parent, guardian, payer or another person acting on your behalf;
• another driving school or instructor where you ask for or authorise a transfer;
• the Driver and Vehicle Licensing Agency (DVLA) when we use a check code supplied by you;
• banks, payment providers, insurers, claims handlers or professional advisers;
• website, communications and lesson-management providers, including our website hosting and email providers and Total Drive; or
• public authorities where permitted or required by law.

Where we obtain your information from another person, we will normally provide or make this notice available to you by our first communication and no later than one month after receiving the information, unless a legal exception applies.

We only use personal information when we have a lawful basis.

Enquiries, quotations and availability

We use contact and enquiry information to respond to you, provide prices, discuss availability and take steps you request before entering into a contract.

Lawful basis: taking steps at your request before entering into a contract. Where another person enquires on your behalf, we may also rely on our legitimate interests in responding to genuine enquiries and administering our business.

Providing and managing tuition or training

We use identity, contact, booking, licence, training, progress, test and communication information to arrange and provide lessons, tailor tuition, maintain the diary, send service reminders, record progress and manage cancellations or changes.

Lawful basis: performance of a contract or taking steps before entering into one. We may also rely on our legitimate interests in maintaining accurate training and business records and delivering a safe, organised service.

Checking driving entitlement and suitability

We may check that you hold the correct and valid driving entitlement and, where relevant, that a vehicle or trailer used for training is suitably insured and roadworthy.

Lawful basis: performance of our contract and our legitimate interests in providing lawful and safe training. Additional rules apply if a licence check reveals criminal-offence data; see section 7.

Payments, accounts and tax

We use transaction and payment information to collect fees, issue refunds, manage balances, keep accounting records and meet tax and company-law requirements.

Lawful basis: performance of a contract and compliance with legal obligations.

Safety, emergencies and safeguarding

We may use relevant contact, health, emergency-contact or incident information to protect pupils and other people, respond to an emergency and deal with safeguarding concerns.

Lawful basis: our legitimate interests in protecting people and providing safe tuition; compliance with a legal obligation where one applies; or vital interests where processing is necessary to protect someone's life.

Complaints, incidents, insurance and legal claims

We use relevant records to investigate and answer complaints, manage accidents or incidents, notify or deal with insurers, recover debts and establish, exercise or defend legal claims.

Lawful basis: our legitimate interests in protecting our business and legal rights, compliance with legal obligations and, where applicable, the establishment, exercise or defence of legal claims.

Photographs, testimonials and promotional material

We may use an identifiable photograph, video, testimonial or similar promotional material only where we have an appropriate lawful basis and, where required, your separate consent.

Lawful basis: consent where we ask for it. You may withdraw consent as explained in section 18.

Website operation, security and analytics

We use limited technical information to operate, protect and improve the website and understand general website use.

Lawful basis: our legitimate interests in maintaining a secure, reliable and effective website. Website analytics runs only with your consent, as explained in section 10 and our Cookie Policy.

Optional direct marketing

Service messages about lessons, payments, cancellations or changes are not marketing. If we send optional marketing, we will do so only where permitted by data-protection law and the Privacy and Electronic Communications Regulations. Every electronic marketing message will provide a simple way to opt out.

Lawful basis: consent, or legitimate interests where the law permits us to use the existing-customer “soft opt-in”. We will not rely on the soft opt-in unless all of its legal conditions have been met.

Where we rely on legitimate interests, those interests may include:

• operating and administering ALD;
• responding to genuine enquiries;
• maintaining an accurate diary and appropriate pupil, training and business records;
• providing safe, suitable and effective tuition;
• confirming entitlement to drive and protecting our vehicle, pupils and other road users;
• preventing misuse, fraud and security incidents;
• improving our services and website;
• managing complaints, accidents, debts and insurance matters; and
• establishing, exercising or defending legal claims.

We consider whether the use of information is necessary and balance our interests against your rights and reasonable expectations. You may object to processing based on legitimate interests as explained in section 18.

You are not normally required to provide health or other sensitive information through our website enquiry form.

You may choose to tell us about a health condition, disability or required adjustment where it is relevant to safe and appropriate tuition. We will ask only for information that is reasonably necessary and will not seek a detailed medical history.

Where we record health information to make an adjustment or tailor tuition, our Article 6 lawful basis will normally be contract or legitimate interests and our Article 9 condition will normally be your explicit consent. We will make clear what information we propose to record and why. You may withdraw that consent at any time, although this will not affect processing already carried out lawfully and may limit our ability to provide a requested adjustment.

Where health information is necessary in connection with an accident, complaint or legal claim, we may instead rely on the condition for the establishment, exercise or defence of legal claims. In a genuine emergency, the vital-interests condition may apply.

Please do not include medical information in a general website message unless it is genuinely relevant. You may instead ask us to discuss an adjustment privately.

We may ask to see your driving licence and may ask you to provide a one-time DVLA check code so that we can confirm your entitlement to drive.

The DVLA check may display endorsements, penalty points or disqualifications. Before using a check code, we will explain the purpose and seek a separate, affirmative indication that you agree to the check and to our viewing any criminal-offence information it displays. For criminal-offence data revealed during that check, we rely on the consent condition in paragraph 29 of Schedule 1 to the Data Protection Act 2018. Where such information is necessary for a legal claim, paragraph 33 of Schedule 1 may also apply.

We minimise what we retain. We will normally record only that a valid entitlement was checked, the date and the outcome. We do not normally retain the one-time check code, a screenshot of the DVLA record or details of endorsements unless there is a specific, lawful and documented need.

You are not legally obliged to make an enquiry or book with ALD.

We need sufficient identity, contact, booking and payment information to arrange and provide training. We must also be able to confirm that you have the correct entitlement to drive. If you do not provide information reasonably required for those purposes, we may be unable to accept a booking or continue providing tuition.

Health information, publicity consent and optional marketing preferences are not generally required to receive tuition. However, without relevant information we may be unable to provide a particular adjustment safely.

We do not sell or rent personal information.

Where necessary and proportionate, we may share information with:

• Lovable Labs Incorporated, which provides the platform that builds and hosts this website and delivers it through its content-delivery network;
• the transactional email provider used to deliver website enquiry messages to our inbox, and our email provider;
• Total Drive Software Ltd, where used to provide pupil records, the lesson diary, reminders, communications and the pupil app;
• other IT, cloud-storage, communications, email and technical-support providers;
• WhatsApp or other communication providers where you choose to use those services;
• banks and payment providers;
• our accountant, bookkeeper, insurer, claims handler, solicitor or other professional adviser;
• the DVLA, Driver and Vehicle Standards Agency (DVSA), emergency services, police, courts, HM Revenue & Customs, the Information Commissioner's Office or another authority where disclosure is authorised or required;
• another driving school or instructor where you request or authorise a transfer;
• social-media or review platforms where you separately agree to publication; and
• a prospective purchaser or professional adviser in connection with a genuine sale or reorganisation of the business, subject to appropriate confidentiality and legal safeguards.

Some recipients act as processors on our instructions and others, including WhatsApp, social-media and review platforms and certain payment and communication services, act as independent controllers under their own privacy information. We require processors to protect information and use it only for agreed purposes.

Our website is built and hosted on the Lovable platform and is served through its content-delivery network. As part of normal, secure operation, the hosting and network infrastructure processes technical request information such as the IP address, the requested page or file, the referring page where available, browser type and version, operating system, device type and the time of access. This information is used to deliver pages, protect the site against abuse and diagnose faults.

This website does not use advertising cookies, tracking pixels or third-party marketing tags. Fonts are served from our own website rather than a third-party font service, and we do not embed third-party media or social-media widgets in our pages. Links to our social-media profiles are ordinary links: nothing is loaded from those platforms until you choose to follow a link, after which the relevant platform's own privacy information applies.

Website analytics and cookies

ALD Driving School uses Lovable Visitor Analytics to understand general website use and improve the website's content and navigation. Analytics operates only after you accept analytics cookies. Until then, and if you reject analytics, the analytics script is blocked from running.

When you accept, analytics may process a random short-lived session identifier (the session-id cookie), the page URL or path, the pages you visit, the referring page, the time of your visit, your approximate country or locale and browser or user-agent information. Analytics is not intended to collect names, email addresses, telephone numbers, pickup addresses, enquiry messages or other enquiry-form contents. Technical analytics information of this kind may still be personal data.

Storing or accessing analytics cookies on your device is based on your consent, and our use of the resulting statistics is based on that consent. You can refuse analytics, or withdraw your consent at any time, using the Cookie settings link in the footer of every page. Rejecting analytics does not restrict your use of the website or any of the ways to contact or enquire with us.

Lovable and the relevant hosting and analytics infrastructure providers act as our processors or service providers where applicable. We will only state specific analytics retention periods and international-transfer arrangements once they are confirmed in the provider's documentation or configuration. Full details of the cookies and similar technologies used are in our Cookie Policy.

Strictly necessary storage is also used to deliver the website securely, including security protection provided by our hosting network and a cookie that remembers your analytics choice. These do not require consent.

Any additional features or embedded content added in future may use cookies or similar technologies. Where consent is legally required, those features will not activate until the visitor has made a valid choice.

When you submit an enquiry form on this website, the information is sent securely to our website server and forwarded to our ALD email inbox using a transactional email provider acting as our processor. Form information is not published in the page address, is not stored in a public database and is not shared with advertising services. We apply basic anti-spam and rate-limiting measures to protect the form; these do not profile you or track you across websites.

We may retain relevant communications where needed to respond to an enquiry, provide training, manage bookings, maintain records or deal with a complaint or dispute.

If you choose to use WhatsApp or another third-party communication service, the provider will process information under its own privacy terms and as an independent controller for its own purposes. You are not required to use WhatsApp and may contact us by telephone or email instead.

Where Total Drive is used, ALD is the controller of the pupil information entered for ALD's purposes and Total Drive Software Ltd generally acts as our processor for that information. Total Drive may also act as an independent controller for information it collects for its own account, security or service-administration purposes. Its own privacy information will apply to that separate processing.

Some pupils may be under 18. We use clear language and take account of the higher level of protection that children's personal information requires.

A parent or guardian may arrange or pay for tuition, in which case we may process that person's contact and payment information. Payment or involvement by a parent or guardian does not automatically entitle that person to receive all of the pupil's progress records or private communications. We will handle disclosures fairly, take account of the pupil's age and understanding and, where appropriate, agree with the pupil what information may be shared.

For identifiable promotional photographs or videos involving a pupil under 18, we will seek the pupil's agreement and, as a matter of ALD policy, written permission from a parent or guardian before publication.

ALD uses front- and rear-facing dashcams in its tuition vehicle. They record the road and surrounding area outside the vehicle only. They do not record the vehicle interior, and audio recording is disabled.

The cameras may capture vehicles, number plates, pedestrians and other road users. We use the footage for vehicle and personal security, to help establish what happened in an accident or incident, and to assist with insurance or legal claims. We do not use routine dashcam footage to assess or score a pupil's lesson performance.

Lawful basis: our legitimate interests in protecting pupils, other road users, the vehicle and ALD, and in establishing, exercising or defending legal claims.

Ordinary footage is recorded on a rolling basis and is normally overwritten automatically as storage fills. If an accident, complaint, allegation, insurance claim, legal claim or legal requirement makes it necessary, we may preserve the relevant footage for longer. Preserved footage may be shared with insurers, claims handlers, legal advisers, the police, courts or another authority where necessary and lawful.

CCTV and dashcam warning signage is displayed on the vehicle and directs people to information about the recording. The camera settings and this notice will be reviewed if the equipment or the way it is used changes.

We may ask whether you would like to provide a review, testimonial, pass photograph or video. Agreeing is voluntary and is never a condition of receiving tuition.

Any consent request will be separate from the lesson contract and will identify where the material may appear, for example on the ALD website or named social-media pages. You may withdraw consent by contacting us. We will then stop future use and remove the material from platforms under our control where reasonably practicable.

We cannot guarantee deletion of copies that other people have already shared, downloaded or cached, or material independently submitted by you to a public review platform.

Some technology, cloud, hosting, communications, social-media or payment providers may process information outside the United Kingdom.

Where our use of a provider involves a restricted international transfer, we will ensure that an appropriate transfer mechanism is in place. Depending on the destination and provider, this may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard or exception.

You may contact us for further information about the safeguards relevant to your information and how to obtain a copy, subject to the protection of confidential or commercially sensitive information.

We keep information only for as long as reasonably necessary for the relevant purpose. Our normal retention periods are:

• enquiries that do not result in a booking: up to 12 months after the last meaningful communication;
• routine pupil contact, lesson and progress records: while training is active and normally up to 3 years after the last lesson;
• signed terms, key booking or cancellation records and records needed to evidence the contract: normally up to 6 years after the relationship ends;
• driving-licence checks: the check code is not normally retained; the date and outcome may be kept with the pupil record for up to 3 years after the last lesson;
• health or adjustment information: only while relevant to tuition and normally deleted within 3 months after the last lesson, unless needed for an accident, complaint or legal claim;
• complaints, accidents, incidents, insurance records and legal claims: normally up to 6 years after the matter is closed, or longer where proceedings, an insurer or the law requires it;
• accounting, payment and tax records: normally 6 years from the end of the company financial year to which they relate, and longer where legally required;
• routine vehicle-camera footage: automatically overwritten on a rolling basis; preserved incident footage is kept only for as long as necessary to deal with the incident, insurance matter or legal claim, taking account of applicable limitation periods;
• photographs and testimonials: while we have a valid basis to use them, subject to withdrawal of consent where consent is the basis, and reviewed periodically; and
• marketing suppression records: for as long as reasonably necessary to ensure that we continue to respect an opt-out.

We may retain information for longer if required by law, where an investigation or dispute is continuing, or where necessary to establish, exercise or defend a legal claim. Information held in secure backups may remain for a limited period until it is overwritten in the ordinary backup cycle.

We use appropriate technical and organisational measures designed to protect personal information from unauthorised access, accidental loss, unlawful disclosure, alteration, destruction or misuse. Measures include limiting access, using suitable account and device security, keeping systems updated and selecting service providers that provide appropriate safeguards. The website is served over an encrypted HTTPS connection and enquiry information is submitted securely rather than in the page address.

No internet, email or electronic-storage system is completely secure. If a personal-data breach occurs, we will assess it promptly and notify affected people and the Information Commissioner's Office where the law requires us to do so.

Depending on the circumstances and the lawful basis used, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• receive certain information in a portable format where processing is automated and based on consent or contract;
• withdraw consent at any time where consent is the basis; and
• complain about our use of personal information.

These rights are not absolute and legal exemptions may apply. To exercise a right, email info@alddriving.co.uk or use the contact details in section 1. We may ask for information reasonably needed to verify your identity. We will normally respond within one month, subject to any lawful extension.

Your right to object

You have the right to object at any time to our use of your personal information for direct marketing. If you object, we will stop using it for that purpose.

You may also object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is needed for legal claims.

You can make a data-protection complaint to ALD by emailing info@alddriving.co.uk, calling 07759 971182, or writing to the registered office in section 1. Please mark an email or letter “Data Protection Complaint” and explain what you believe has gone wrong and, if possible, what outcome you are seeking.

We will:

• acknowledge receipt of a data-protection complaint within 30 days;
• take appropriate steps to investigate it without undue delay;
• keep you informed where appropriate; and
• tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO). You do not lose that right by complaining to us and you are not required to obtain our permission.

• Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
• Telephone: 0303 123 1113
• Website: https://ico.org.uk/make-a-complaint/

ALD does not use personal information to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

We may update this Privacy Notice when our services, systems, suppliers or legal obligations change. The current version will be published on our website and the “Last updated” date will be changed.