Privacy Policy

1. Introduction

DriveSense Ltd ("we", "us", "our") operates the DriveSense ADI Academy website at adi.drivesense.com ("the Site"). This Privacy Policy explains what personal data we collect when you register your interest in our ADI training programme, why we collect it, who we share it with, and what your rights are under UK GDPR and the Data Protection Act 2018.

2. Data We Collect

Information You Provide via the Registration Form

• First name and last name
• Email address
• Phone number
• Postcode
• Current occupation
• UK or EU driving licence status
• Indicated timeframe for starting training

Information Collected Automatically

• Pages visited on the Site and time of visit
• Anonymised analytics data (only after explicit consent — see Section 8)
• Standard server log information from our hosting provider (Netlify)

We do not collect special category data (health information, biometric data, etc.) through the registration form. We do not record IP addresses for marketing or profiling purposes.

3. Lawful Basis for Processing

• Consent (Art. 6(1)(a)) — by submitting the registration form, you consent to us using your details to contact you about the ADI Academy programme
• Legitimate interests (Art. 6(1)(f)) — basic server logs and security monitoring to keep the Site running safely
• Legal obligation (Art. 6(1)(c)) — records retained as required by applicable law

You may withdraw consent at any time by emailing privacy@drivesense.com and we will delete your data within 30 days unless we are legally required to retain it.

4. Who Can See Your Data

5. Third-Party Processors

We do not sell your personal data. The following processors handle data on our behalf, all bound by appropriate Data Processing Agreements (DPAs).

6. Marketing & Advertising

If you arrive at the Site by clicking a Meta (Facebook or Instagram) advertisement, the Meta Pixel tracks the click as a conversion event so we can measure ad effectiveness. Your form submission data is hashed (one-way encrypted) before being shared with Meta for optimisation purposes only. We do not share unhashed personal data with Meta or any other advertising platform.

You can opt out of Meta Pixel tracking at any time through your Meta account ad preferences, or by using browser-level tracking protection.

7. Data Retention

• Registration form submissions: 24 months from submission date, or until you request deletion (whichever is sooner)
• Email communications: 24 months from last contact
• Server logs: 30 days
• Anonymised aggregate data: retained indefinitely for service improvement

After the retention period expires, your data is permanently deleted from our active systems.

8. Cookies & Analytics Consent

The Site uses essential cookies required for the form to function. Where the Meta Pixel is loaded (only on visits originating from a Meta advertisement), it places a single first-party cookie used to track the conversion event. We do not currently use Google Analytics or any other behavioural tracking cookies. You can withdraw consent and clear all cookies at any time using your browser's settings.

9. Eligibility

The DriveSense ADI Academy is for adults aged 21 or over who hold a full UK or EU driving licence and meet DVSA eligibility requirements for ADI candidates. We do not knowingly collect data from individuals under 21 through this Site.

10. Your Rights Under UK GDPR

• Access — request a copy of all data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your registration and all associated data
• Restriction — request we pause processing of your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — withdraw consent for marketing communications at any time
• Automated decisions — we do not make solely automated decisions that produce legal effects on you

Contact us at privacy@drivesense.com — we respond within 30 days. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113.

11. Security

• TLS 1.2+ encryption for all data in transit
• Form submissions handled by Netlify Forms with industry-standard security controls
• Access to registration data limited to named authorised DriveSense personnel only
• Regular security reviews of our infrastructure and processors

12. International Data Transfers

Some of our processors (Netlify, Meta, Google) operate from or via the United States. All transfers are protected by Standard Contractual Clauses (SCCs) recognised under UK GDPR, supplemented by a UK Addendum where required. We continuously review the adequacy of these protections.

13. Changes to This Policy

Material changes will be notified by email to all registered candidates. The current version is always available on this page. Minor wording or clarification updates do not constitute material changes.

14. Contact