Who is responsible
Driving Sorted is responsible for the personal information it collects through this service. Use the contact and correction form linked below for privacy requests and include “Privacy request” so it can be identified. The instructor or business you contact is separately responsible for the information it uses to answer you or provide lessons.
What we collect
Account information includes your email address, display name and selected audience. A private workspace stores the records you choose to save, such as lesson reflections, practice hours, CPD and training plans. Enquiries include the name, collection area, service request and message you provide. Claim and correction submissions include your statements and supporting public business evidence. Hosting and security services process technical request and authentication logs.
How information is used
We process account and workspace information to provide the service you request, and use submitted enquiries to enable the selected provider to respond. We use legitimate interests to protect the service, review public business listings and correct errors, considering the interests of the people concerned. We process information to meet legal obligations where those apply. Optional marketing or non-essential tracking requires a separate choice; account registration does not subscribe you to marketing.
Who can see it
Your private records are accessible through your account. Enquiries and replies are visible to you, the authorised owner of the selected provider listing and authorised support administrators where needed. Public provider listings may include an instructor’s public business identity and sourced service information. We do not publish pupil records, personal performance uploads, medical documents or private account email addresses.
Service providers and transfers
Netlify provides hosting and Identity authentication. Supabase provides our London-region database and server functions. Their infrastructure, support and subprocessors may involve processing outside the UK; relevant contractual and transfer safeguards apply through those providers. Where Spotlight subscriptions are enabled, Stripe processes checkout, billing and subscription management under its own privacy notice. We store a customer reference and subscription status, not your card details. We do not sell personal information.
Retention and deletion
Workspace records remain until you delete them or your account. Account deletion removes private records, ownership links, claims and conversations you started, including replies to those conversations. It does not remove independently sourced public business information. Messages you sent in another user’s conversation are removed when you delete your account. A minimal account tombstone prevents old tokens restoring deleted data. Billing records, if any, may need to be retained for accounting obligations. Security logs and database backups follow service-provider retention and rotation.
Your choices and rights
You can download your workspace information and delete individual records or your account in Account & privacy. You can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Some requests depend on the legal basis and circumstances. You can complain to the Information Commissioner’s Office at ico.org.uk. We may need to verify that a request comes from the person concerned.
Children and sensitive information
Accounts are intended for people aged 16 or over. A parent or guardian should manage information for a younger learner. Avoid entering diagnoses, medical documents, criminal-record information or identifying details about pupils into free-text fields. Use general teaching adjustments or learning goals instead.
Cookies and browser storage
Authentication cookies and related browser storage maintain a secure sign-in session. They are necessary when you use an account. The public site does not load advertising pixels or optional third-party analytics by default. Calculations run in the browser; a tool only sends a record when you explicitly choose to save it.