LPlate

Privacy Policy

Last updated: 2 June 2025

This Privacy Policy explains how LPlate ("we", "us", or "our") collects, uses, and protects your personal information when you use our driving lesson booking platform. We are committed to protecting your privacy in accordance with UK GDPR and the Data Protection Act 2018.

1. Data Controller Information

LPlate Ltd is the data controller for the personal information we collect and process. You can contact us about this Privacy Policy or your data rights at:

  • Email: Staff@LPlateApp.com
  • Address: L Plate Ltd, Paintworks, Bristol, BS4 3AQ, United Kingdom
  • Company Number: 14735301
  • Data Protection Officer: Staff@LPlateApp.com

2. Information We Collect

Student Information

  • Name, email address, and address
  • Date of birth and provisional driving licence details
  • Lesson preferences and learning progress
  • Payment information (processed securely)
  • Communication history and feedback

Instructor Information

  • Full name, email address, and address
  • ADI certification and vehicle details
  • Availability schedules and location preferences
  • Bank details for payments (securely encrypted)
  • Professional qualifications and insurance documentation

2.2 Information We Collect Automatically

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, time spent, features used)
  • Location data (with your permission, for instructor matching)
  • Cookies and similar tracking technologies
  • App performance and crash reports

2.3 Information from Third Parties

  • Payment processing data from Stripe Connect
  • Identity verification data from third-party services
  • Social media information (if you choose to connect accounts)
  • Customer support interactions

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

3.1 Contract Performance

  • Creating and managing your account
  • Facilitating lesson bookings and payments
  • Providing customer support
  • Processing instructor applications and verifications

3.2 Legitimate Interests

  • Improving our platform and user experience
  • Preventing fraud and ensuring platform security
  • Marketing our services to existing users
  • Conducting analytics and research

3.3 Legal Compliance

  • Meeting financial reporting requirements
  • Complying with tax obligations
  • Responding to legal requests and court orders
  • Maintaining records as required by law

3.4 Consent

  • Marketing communications (where required)
  • Location tracking for enhanced features
  • Optional data processing for new features

4. How We Use Your Information

4.1 Core Platform Services

  • Matching students with suitable instructors
  • Processing lesson bookings and payments
  • Facilitating communication between users
  • Managing user accounts and preferences
  • Providing customer support

4.2 Safety and Security

  • Verifying instructor qualifications and eligibility
  • Monitoring for fraudulent activity
  • Protecting against security threats
  • Investigating and resolving disputes

4.3 Platform Improvement

  • Analysing usage patterns to enhance features
  • Conducting user research and surveys
  • Testing new functionalities
  • Optimising platform performance

4.4 Communications

  • Sending booking confirmations and reminders
  • Providing important account and service updates
  • Marketing relevant services (with appropriate consent)
  • Responding to inquiries and support requests

5. Information Sharing and Disclosure

5.1 With Other Users

We share limited information to facilitate the service:

  • Students see: Instructor name, photo, ratings, location, availability
  • Instructors see: Student name, pickup location, contact details for booked lessons
  • Both parties can communicate through our platform messaging system

5.2 With Service Providers

  • Stripe Connect: Payment processing and fraud prevention
  • Cloud providers: Data hosting and backup services
  • Communication services: Email and SMS delivery
  • Analytics providers: Platform usage analysis
  • Customer support tools: Helpdesk and live chat services

5.3 Legal Requirements

We may disclose information when required by law or to:

  • Comply with court orders or legal processes
  • Respond to government requests or investigations
  • Protect our rights and property
  • Ensure user safety and prevent harm

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business. We will notify you before your information becomes subject to a different privacy policy.

6. International Data Transfers

Your data is primarily processed within the UK and EU. When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Standard Contractual Clauses (SCCs) with service providers
  • Adequacy decisions for certain countries
  • Certification schemes and codes of conduct
  • Regular monitoring of transfer security

7. Data Retention

We retain your information for different periods based on its purpose:

7.1 Account Data

  • Active accounts: While your account remains active
  • Closed accounts: Up to 7 years for legal and tax purposes
  • Student records: 3 years after last lesson
  • Instructor records: 7 years after ceasing services

7.2 Transaction Data

  • Payment records: 7 years for tax and accounting purposes
  • Lesson history: 3 years for dispute resolution
  • Communication logs: 2 years for quality assurance

7.3 Technical Data

  • Usage analytics: 2 years in aggregated form
  • Security logs: 1 year for incident investigation
  • Cookie data: As specified in our Cookie Policy

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

8.1 Right of Access

Request a copy of the personal data we hold about you, including details of processing activities and data recipients.

8.2 Right to Rectification

Ask us to correct inaccurate or incomplete personal data. You can update most information directly in your account settings.

8.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data when it's no longer necessary for our legitimate purposes, subject to legal retention requirements.

8.4 Right to Restrict Processing

Ask us to limit how we use your data in certain circumstances, such as when you dispute its accuracy or object to processing.

8.5 Right to Data Portability

Receive your personal data in a structured, machine-readable format for transfer to another service provider.

8.6 Right to Object

Object to processing based on legitimate interests, including marketing communications and profiling activities.

8.7 Rights Related to Automated Decision-Making

Request human review of automated decisions that significantly affect you, such as instructor-student matching algorithms.

9. Exercising Your Rights

To exercise your data protection rights:

We will respond to your request within one month and may ask for identification verification.

10. Data Security

We implement comprehensive security measures to protect your data:

10.1 Technical Safeguards

  • Encryption in transit and at rest
  • Regular security assessments and penetration testing
  • Multi-factor authentication for sensitive operations
  • Secure coding practices and regular updates

10.2 Organisational Measures

  • Staff training on data protection principles
  • Access controls and principle of least privilege
  • Regular audits and compliance monitoring
  • Incident response and breach notification procedures

10.3 Third-Party Security

  • Due diligence on all service providers
  • Contractual data protection obligations
  • Regular monitoring of third-party security practices

11. Children's Privacy

Our service is designed for users aged 16 and above. Students under 18 require parental consent. We implement additional protections for younger users:

  • Parental consent verification for users under 18
  • Enhanced safety measures for young drivers
  • Limited data processing for minors
  • Special procedures for handling young user data

12. Marketing Communications

We may send you marketing communications about:

  • New features and platform updates
  • Special offers and promotions
  • Educational content about driving
  • Survey and feedback requests

You can opt out of marketing communications at any time by clicking unsubscribe links in emails or updating your preferences in your account settings.

13. Cookies and Tracking

We use cookies and similar technologies to improve your experience. For detailed information about our cookie practices, please see ourCookie Policy.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated via:

  • Email notification to registered users
  • Prominent notice on our platform
  • Push notifications in our mobile app

Continued use of our services after changes take effect constitutes acceptance of the updated policy.

15. Contact and Complaints

If you have any concerns about our privacy practices, you can contact us or file a complaint with the Information Commissioner's Office (ICO):

  • Contact us directly at: Staff@LPlateApp.com
  • File a complaint with the Information Commissioner's Office
  • Website: ico.org.uk
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

16. Contact Information

For any questions about this Privacy Policy or our data practices: