Privacy policy
This page is for instructors, pupils and driving schools. It says what DiaryIt holds about you. It says how we look after it.
Who is in charge of your information
The data controller is [registered company name]. That is the firm in charge of your data. Its company number is [company number]. It is registered at [registered address]. You can get in touch. Ask us about this page. Ask us how we use your data. Write to [data protection contact email].
A driving school may add you as one of its instructors. If so, that school also decides how some of your information is used. So it has its own duties as well as ours.
This page sets no cookies
The marketing pages you are reading now load no analytics. They load no ad tags. They load no embedded video. They load no chat widget. They load no third-party fonts. The font comes from our own domain. Nothing here stores anything on your device. Nothing here tells anyone else about your visit.
Signing in is different. When you sign in, DiaryIt sets the cookies it needs to keep you signed in. It also sets cookies to protect forms against cross-site request forgery. Those cookies are strictly necessary. So they do not need consent. They are not used to track you between sites.
What the diary holds about you
- If you are an instructor or a school, we hold your name, email address and sign-in details. We hold your diary and the hours you publish. We hold your list of pupils. We hold the messages you send through the site. We hold the payout records for lessons you have taught.
- If you are a pupil, we hold the account your instructor made for you. We hold your lessons and requests. We hold the lessons you have paid for. If you buy a package, we hold your credit balance and the hours you have used. We hold messages between you and your instructor. We hold your progress card.
- Private notes. Your instructor can keep notes about you. You cannot see these notes in the app. They are still information about you. So you can ask to see them. We will handle that request in line with the law.
- Payment details. We use a payment provider. That is a firm that takes payments for us. It is [payment processor name]. It handles what you pay with. [say whether payment details ever reach DiaryIt servers].
Why we use it, and on what basis
- To run the diary, take bookings and keep the record of hours bought and used. This is the contract you have with us.
- To pay out to instructors for lessons that are complete and not disputed. To settle a lesson that is disputed. This is part of the contract. It is also in our legitimate interest. We need the service to work.
- To keep accounts and meet tax and record-keeping duties. This is a legal duty.
- To keep the service safe and stop misuse. This is in our legitimate interest.
Who else sees it
- Your instructor sees your bookings, what you have paid for and your progress card. You see the progress card too.
- Your instructor may belong to a driving school. If so, that school sees what it needs to run the school and pay its instructors.
- Our payment provider. That is [payment processor name]. We use it to take payments and make payouts.
- The firms that host the site and handle our email. They are [list of processors and the countries they operate in].
- Anyone the law says we must give it to.
We do not sell your information. We do not share it for anyone else’s adverts.
How long it is kept
We keep your account. We keep your lesson records. We keep both for a set time. That time is [retention period for account and lesson records]. We keep financial records too. We keep those for a set time. That time is [retention period for financial records, usually six years in the UK]. An instructor may leave. Or they may close an account. What happens to a pupil record then? [confirm what happens to a pupil record when an instructor leaves or closes an account].
Your rights
UK data protection law gives you rights. You can ask for a copy of what we hold about you. You can ask us to correct it. You can ask us to delete it. You can ask us to restrict or stop certain uses. You can ask for it in a portable format. Write to us and we will reply.
You may not be happy with how we dealt with it. If so, you can complain to the Information Commissioner’s Office. Its website is ico.org.uk.
Children
Some pupils will be under 18. We will say here what that means for them. [minimum age for an account. Whether a parent or guardian must agree for under-18s].
Changes
If we change how any of this works, we will update this page. We will also change the date below.
Last changed: [date this policy is approved].