Privacy Policy

Privacy Policy (UK)

Galaxy Driving Academy (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share and protect your personal information when you use our website, contact us, or book driving lessons/services.

This policy is intended to meet the requirements of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and where relevant the Privacy and Electronic Communications Regulations (PECR).

Last updated: 23 December 2025

1) Who we are (Data Controller)

Data Controller: Galaxy Driving Academy
Address: 8–12 Rhodfa Hughes, Cardiff, CF3 6YY, United Kingdom
Email: admin@galaxydriving.co.uk
Phone: 07748 005552
Website: galaxydriving.co.uk

If you have any questions about this policy or your rights, please contact us using the details above.

2) What personal data we collect

We may collect and process the following categories of personal data:

A) Contact and identity data

• Name, email address, phone number

• Address or postcode (to plan pick-up locations)

• Communication preferences

B) Booking and service data

• Lesson/package bookings, lesson history, instructor allocation

• Notes relevant to providing lessons (e.g., preferred times, pick-up point)

• Messages you send us (email, forms, WhatsApp, social media messages)

C) Payment and transaction data

• Payment status, invoices/receipts, package details
  We do not usually store full card details. Card payments are handled by payment providers.

D) Website usage data

• IP address, browser type, device information, pages visited, referral source (typically collected via cookies/analytics)

E) Special category data (only if needed)
In limited cases, we may receive information about health or accessibility needs (e.g., a disability affecting lesson delivery). We will only use this where necessary and with appropriate lawful basis and safeguards.

3) How we collect your data

We collect data when you:

• Fill in forms on our website (contact/booking)

• Call, email, message, or otherwise communicate with us

• Book or purchase lessons/packages

• Use our website (cookies and similar technologies)

4) How we use your data (purposes)

We use your personal data to:

• Provide driving lessons and related services

• Manage bookings, schedules, instructors, and customer support

• Process payments and keep financial records

• Communicate with you about your lessons, changes, and important updates

• Improve our website, services, and customer experience

• Send marketing messages only where permitted (see section 8)

• Comply with legal obligations and handle complaints or disputes

5) Our lawful bases for processing (UK GDPR)

We process personal data under one or more of these lawful bases:

• Contract: to provide lessons/services you request and manage bookings/payments

• Legal obligation: accounting, tax, responding to lawful requests

• Legitimate interests: running and improving our business, preventing fraud, ensuring service quality (balanced against your rights)

• Consent: where required (e.g., certain marketing/cookie activities; or where we process special category data when consent is the appropriate basis)

6) Sharing your data

We may share your data only where necessary with:

• Driving instructors working with/for Galaxy Driving Academy (to deliver lessons)

• Payment providers (to process payments)

• Website/IT providers (hosting, maintenance, email services, security)

• Analytics providers (e.g., traffic measurement) where enabled

• Professional advisers (accountants, insurers, legal advisers) when necessary

• Authorities where we must comply with law or protect rights/safety

We do not sell your personal data.

7) International transfers

Some of our service providers may store/process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual safeguards.

8) Marketing communications (PECR)

We may contact you with service messages that are necessary (e.g., lesson updates).

For marketing (offers, promotions):

• We will only send marketing emails/SMS where permitted by law (e.g., your consent, or “soft opt-in” where applicable).

• You can opt out at any time by using the unsubscribe link (if provided) or contacting us at admin@galaxydriving.co.uk.

9) Cookies and similar technologies (PECR)

Our website may use cookies and similar technologies to:

• Make the website work properly (essential cookies)

• Remember preferences

• Measure and improve performance (analytics)

• Support marketing/advertising (if enabled)

Where required, we will request your consent before placing non-essential cookies. You can manage cookie preferences through our cookie banner (if available) or your browser settings.

10) Data retention (how long we keep your data)

We keep personal data only as long as necessary for the purposes described above. We may keep invoices/financial records for up to 6 years to meet UK tax/accounting requirements. We may keep booking/contact records for a reasonable period to handle queries, disputes, or legal claims.

11) Your data protection rights (UK)

You have rights under UK GDPR, including:

• The right to access your personal data

• The right to correct inaccurate data

• The right to request deletion (in certain circumstances)

• The right to restrict or object to processing (in certain circumstances)

• The right to data portability (in certain circumstances)

• The right to withdraw consent at any time (where processing is based on consent)

• The right to complain to the Information Commissioner’s Office (ICO)

ICO website: ico.org.uk

12) Security

We use appropriate technical and organisational measures to protect your personal data. However, no online service is completely secure, so you should also take care when sharing information online.

13) Third-party links

Our website may include links to third-party websites. We are not responsible for their privacy practices. Please review the privacy policies of any third-party sites you visit.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be published on our website with an updated “Last updated” date.

15) Contact us

If you have questions or want to exercise your rights, contact us at:
admin@galaxydriving.co.uk
8–12 Rhodfa Hughes, Cardiff, CF3 6YY, United Kingdom
07748 005552