Privacy Policy

Express Pass Driving School provides manual and automatic driving lessons, intensive driving courses, fast-track test booking assistance, and related driver training services across Greater Manchester and surrounding areas.

For the purposes of UK data protection law, we are the data controller responsible for your personal information.

• Trading name: Express Pass Driving School
• Website: expresspass.co.uk
• Phone / WhatsApp: 07587 867373
• Email: info@expresspass.co.uk

By using our website or services, you agree to the terms of this Privacy Policy.

We may collect the following categories of information when you contact us, book lessons, or use our website:

Identity & Contact Details

• Full name
• Phone number and email address
• Home or pickup address

Driving & Training Information

• Driving licence number and category
• Theory and practical test details (dates, results, test centre)
• Lesson progress notes and instructor observations
• Previous driving experience or training history

Payment & Transaction Data

• Payment amounts and dates
• Transaction references from payment processors
• Outstanding balances or refund records

Communication Data

• Messages sent via WhatsApp, SMS, Facebook, Instagram, or contact forms
• Enquiry content and booking correspondence

Technical Data

• IP address, browser type, and device information
• Cookie data and website usage statistics

We use your personal information to:

• Arrange, schedule, and manage driving lessons and courses
• Contact you regarding bookings, cancellations, or rescheduling
• Process payments and issue receipts or confirmations
• Monitor lesson progress and tailor training to your needs
• Assist with DVSA test bookings and related administration
• Provide customer support and respond to enquiries
• Send lesson reminders, test updates, and course information
• Improve our services, website, and internal processes
• Meet legal, insurance, and regulatory obligations
• Detect and prevent fraud or misuse of our services
• Send occasional marketing updates where you have consented

We do not sell your personal data to third parties.

Under the UK GDPR, we rely on the following lawful bases to process your personal data:

• Contractual necessity — to deliver lessons, courses, and services you have booked with us
• Legitimate interests — for internal business administration, fraud prevention, and service improvement (where these do not override your rights)
• Legal obligation — to comply with UK law including HMRC, insurance, and DVSA-related requirements
• Consent — for marketing communications and any optional data processing we ask you to agree to

We may share your information with trusted third-party service providers who assist us in operating our business. All third parties are required to keep your data secure and to use it only for the specific purpose we have authorised.

We do not share your data with unrelated third parties or sell your information for advertising purposes.

Some of our instructor vehicles are fitted with dashcam or in-car recording equipment for safety, training, and insurance purposes.

• You will be informed if a dashcam is in operation in the vehicle before your lesson begins
• Recordings are used solely for safety review, insurance evidence, and driver training feedback
• Footage is stored securely and deleted when no longer required, unless needed for an insurance or legal matter
• Footage is not shared publicly or used for marketing without your explicit written consent

We love celebrating our students' success! When a student passes their driving test, a congratulatory photo is typically taken at the test centre.

• Pass photos will be uploaded to our official social media platforms (Instagram, Facebook, and others) to celebrate your achievement and inspire other learners
• Photos may include your name and the test centre location in the accompanying post
• If you do not wish your photo to be shared, please inform your instructor or contact us before or after your test — we will not upload it
• If you would prefer your face to be covered or blurred before posting, please let us know and we will respect that request without question
• You may also request removal of a previously uploaded pass photo at any time by contacting us

Payments for lessons and courses may be made via:

• Secure online payment links (Stripe, PayPal, Google Pay, Apple Pay)
• Bank transfer (sort code and account number provided on request)
• Cash (receipt issued upon request)

We do not store full card details on our website or systems. All card payments are handled by PCI-DSS compliant third-party payment processors.

Transaction records are retained for a minimum of 6 years in line with HMRC requirements.

We may contact you with course offers, availability updates, or news about our services where you have consented or where we have a legitimate interest as an existing or prospective customer.

• We will not bombard you with unsolicited messages
• Marketing may be sent via WhatsApp broadcast, SMS, email, or social media
• You can opt out at any time by replying STOP, contacting us directly, or using the unsubscribe option in emails

Opting out of marketing will not affect your ability to receive service-related communications (e.g., lesson reminders, booking confirmations).

Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how visitors use our site.

Types of cookies we use:

• Essential cookies — required for the website to function correctly (e.g., contact form security, session handling)
• Analytics cookies — help us understand visitor traffic and popular pages (e.g., Google Analytics). Data is anonymised where possible
• Advertising cookies — set by Google Ads to measure the effectiveness of our advertising campaigns
• Preference cookies — remember your settings or preferences for a better experience on return visits
• Third-party cookies — set by embedded content such as Google Maps, YouTube videos, or social media feeds

You can manage or disable cookies at any time through your browser settings. Disabling certain cookies may affect website functionality.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.

• Active student records — retained for the duration of the training relationship
• Lesson and test records — retained for up to 6 years for insurance and dispute purposes
• Payment records — retained for a minimum of 6 years in line with HMRC requirements
• Marketing data — deleted promptly upon opt-out request
• Dashcam footage — deleted within 30 days unless required for an active claim or investigation
• Website enquiry data — retained for up to 12 months unless a booking is made

When data is no longer needed, it is securely deleted or anonymised.

In the unlikely event of a personal data breach, we will:

• Assess the breach promptly upon discovery
• Notify the Information Commissioner's Office (ICO) within 72 hours where the breach is likely to result in a risk to individuals' rights and freedoms
• Inform affected individuals directly where the breach poses a high risk to their rights and freedoms
• Take immediate steps to contain and remediate the breach
• Document all breaches internally, even where ICO notification is not required

Under UK data protection law, you have the following rights regarding your personal information:

To exercise any of these rights, please contact us through our website, by email, or via WhatsApp. We will respond within one calendar month of receiving your request.

We will not charge a fee for reasonable requests, though we may charge for manifestly unfounded or excessive requests.

Driving lessons in the UK may begin from the age of 17. Where we provide services to learners under 18, we handle all personal data responsibly and in line with UK data protection law.

• For learners under 18, a parent or guardian may be involved in the booking and payment process
• We do not knowingly collect data from individuals under 17 in the context of driving lessons
• We will not use the personal data of under-18 learners for marketing purposes without appropriate consent

If you believe we have inadvertently collected data relating to a minor without appropriate consent, please contact us immediately so we can address the matter.

We take your data security seriously and implement reasonable technical and organisational measures to protect your personal information from:

• Unauthorised access or disclosure
• Accidental loss, alteration, or destruction
• Unlawful processing

These measures include password-protected devices and accounts, limited staff access to personal data on a need-to-know basis, and use of reputable, secure third-party platforms for payments and communications.

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our data practices. All updates will be published on this page with a revised effective date.

We encourage you to review this page periodically. Continued use of our services following any changes constitutes acceptance of the updated policy.

For significant changes, we may notify you directly via WhatsApp, email, or a notice on our website.

For any questions, requests, or concerns about how we handle your personal data, please contact us:

• Email: info@expresspass.co.uk
• WhatsApp / Phone: 07587 867373
• Website: expresspass.co.uk/contact

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UK's data protection authority: