Privacy

Privacy and Cookies Policy

Driveline Driving School

Last updated: 30 October 2026

1. Who we are

This website, https://www.driveline.ie, is operated by Clary Binda Mayindu, a sole trader trading as Driveline Driving School, in Ireland. Driveline is not a limited company.

Data controller: Clary Binda Mayindu, trading as Driveline Driving School.

Privacy contact: hello@driveline.ie

We have not appointed a Data Protection Officer, because we are not required to. Please send any privacy question to hello@driveline.ie.

2. What we collect

When you book a lesson

  • Your name, email address and phone number.
  • Your pickup address and Eircode, or the meeting point you choose, and your area and gearbox preference.
  • The lesson or package you book, the dates and times, and the instructor assigned.
  • Lesson notes your instructor records about what was covered and what to work on next.

When you pay

Stripe handles payments. Stripe collects your card details directly; we never see or store your full card number. We receive a payment confirmation, the amount paid and any refund.

If you have an account

Your email address and sign-in details, so you can view and manage your bookings.

When you contact us

If you email us or message us on WhatsApp, we receive your message and contact details in that email inbox or WhatsApp account. The website itself does not store contact messages.

Measurement and advertising

How you use the site, and, if you arrive from a Google ad and accept advertising cookies, the Google ad click reference (section 6). See section 5 for what needs your consent.

You do not have to give us your details, but we cannot take a booking or payment without the booking and contact details above.

3. Why we use your information, and our legal basis

PurposeLegal basis under the GDPR
Taking and managing your booking, assigning an instructor, sending confirmations, reminders and changesContract: needed to provide the lessons you book
Taking payments, issuing refunds and paying instructorsContract
Keeping booking, payment and refund records for accounting and taxLegal obligation
Replying to your messagesSteps you ask us to take before a contract, or our legitimate interest in answering enquiries
Keeping you signed in, preventing double bookings, keeping the site secureLegitimate interests: running a reliable, secure booking service
Remembering your cookie choiceLegal obligation: to record and respect your consent choice
Analytics and advertising measurement, including the Google ad click referenceConsent

Where we rely on legitimate interests, you can object (section 9).

4. Cookies and similar technologies: the separate rule

Irish law (the ePrivacy Regulations, S.I. 336 of 2011) also controls storing or reading information on your device. Some storage is strictly necessary for the service you ask for and needs no consent. Everything else needs your consent. This rule sits alongside the legal bases in section 3.

Strictly necessary (no consent needed)

  • Your saved cookie choice, kept in your browser's local storage until you change it or clear your browser data.
  • Sign-in storage, if you have an account.
  • Short-lived browser storage used during booking and checkout.
  • Stripe's own cookies on its secure payment page, for payment and fraud prevention.

Needs your consent

  • Analytics: Google Analytics cookies.
  • Advertising: Google Ads cookies, the Meta Pixel, the TikTok Pixel, and keeping a Google ad click reference.

5. Measurement, advertising and your choices

When you first visit, a banner gives you three options: Accept all, Reject non-essential, or Manage preferences to choose analytics and advertising separately.

Google tag before you choose, or if you decline

We use Google Consent Mode. The Google tag loads on our public pages with analytics and advertising storage set to "denied" by default. In this state it sets no Google Analytics or Google Ads cookies, and we save no ad click reference. Google may still receive limited cookieless signals, such as that a page was viewed and your consent status, along with technical information your browser sends (for example IP address and browser type). Google uses these under its own terms to produce modelled statistics. The Google tag does not run on sign-in, account management, instructor or admin pages.

With analytics consent

  • Google Analytics cookies, to measure how the site is used so we can improve the booking experience.

With advertising consent

  • Google Ads cookies and purchase measurement.
  • Google ad click reference saved with your booking (section 6).
  • Meta (Facebook and Instagram) Pixel: page views and purchases. It is not loaded at all without advertising consent.
  • TikTok Pixel: page views and purchases. It is not loaded at all without advertising consent.

When these run, Google, Meta and TikTok receive information such as the page visited, your device and browser details, and, for purchases, the booking value. Google and Meta also receive a non-sensitive booking reference; TikTok receives the service label instead. We do not send them your name, email address or phone number. They may combine this with information they already hold to measure and show ads, under their own privacy terms.

Changing or withdrawing consent

Select "Cookie preferences" at the bottom of any page.

When you withdraw advertising consent:

  • Google is told at once to deny advertising storage and advertising use. Your separate analytics choice is preserved; if you also withdraw analytics consent, analytics storage is denied too. Limited cookieless signals may continue as described above.
  • The Meta Pixel is told at once that consent is revoked.
  • Meta and TikTok receive no new purchase events after withdrawal. Google purchase measurement continues under Consent Mode with advertising storage denied; this may include limited cookieless signals. Previously sent or in-flight requests cannot be recalled.
  • Any Google ad click reference held in your browser is deleted.
  • The TikTok Pixel is told consent is revoked. If it has already loaded, the page reloads after your choice is saved to unload its automatic listeners. TikTok is not loaded again while advertising consent is denied. This reload may clear unsaved form entries.

Withdrawing consent does not affect measurement that took place before you withdrew. Data the platforms already received is handled under their own terms, and you can manage it in your Google, Meta or TikTok account settings.

6. Google ad click references

If you arrive from a Google ad and have accepted advertising cookies, we save the Google ad click reference (an identifier Google adds to the link, such as "gclid"), the page you landed on and campaign labels with your booking. This lets us identify paid bookings with a recorded Google ad click. A recorded click does not independently prove Google Ads attribution or a conversion reported by Google.

  • It is saved only if your browser reports advertising consent when you book.
  • We do not send it back to Google from our own systems.
  • Our system records the time the click reference was captured by our website. It is deleted automatically during the next scheduled daily clean-up after 90 days from that recorded capture time.
  • If you want a reference already saved with a past booking removed sooner, email hello@driveline.ie and we will delete it.

If you decline, your booking works exactly the same and no click reference is saved.

7. Who receives your information

Service providers acting for us (processors), under contracts that protect your data:

  • Our website hosting and database provider (Lovable and its cloud infrastructure partners).
  • Our email delivery service, which sends booking and account emails.

Others who receive information to provide a service:

  • Your instructor: your name, phone number, pickup location, lesson times and lesson notes, so they can deliver your lesson.
  • Stripe: payment processing. Stripe acts partly as an independent controller under its own privacy policy.
  • Google Calendar: lesson details are added to your instructor's calendar.
  • Google (Gmail/Workspace) and WhatsApp (Meta): when you contact us by email or WhatsApp.
  • Google, Meta and TikTok: for measurement, as described in section 5, under their own terms.
  • Our accountant, professional advisers and public authorities, where needed or required by law.

We do not sell your personal information.

8. International transfers

Some of these providers, including Google, Meta, TikTok, Stripe and our hosting and email services, may process data outside the European Economic Area, including in the United States. Where they do, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework, for certified companies) or the European Commission's Standard Contractual Clauses. Contact us for more information.

9. How long we keep it

InformationRetention
Google ad click reference and related campaign detailsDeleted automatically during the next scheduled daily clean-up after 90 days from the recorded click-capture time
Booking, payment and refund records needed for accounting and taxSix years after the end of the tax year they relate to, or longer where the law requires
Lesson notesFor as long as the related booking record is kept
Account detailsWhile your account is active; deleted on request, except where the booking records above must be kept
Emails and WhatsApp messages to usReviewed monthly and deleted once 12 months have passed since our last interaction with you, unless needed for an active booking, a complaint, a dispute or a legal obligation. Messages may remain in provider or device backups after deletion from the active inbox or chat. We review backup arrangements as part of this process; provider recovery and device backup settings determine when those copies are removed. Email and WhatsApp messages are not deleted automatically.
Cookie choiceIn your browser until you change it or clear your browser data

The monthly email and WhatsApp review reminder has been established. The first review has not yet been completed, so we cannot claim that all existing messages already meet the 12-month retention target.

10. Your rights

Under the GDPR and the Irish Data Protection Act 2018 you can ask to:

  • access a copy of your information, including any ad click reference saved with your booking;
  • correct inaccurate information;
  • delete your information, where we are not legally required to keep it;
  • restrict how we use it;
  • object to processing based on legitimate interests;
  • receive the information you gave us in a portable format;
  • withdraw consent at any time, without affecting earlier processing.

Email hello@driveline.ie. We may need to confirm your identity first. We will reply within one month. In some cases the law allows up to two further months, and we will tell you if so.

You can also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28 — www.dataprotection.ie.

11. Automated decisions and profiling

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our booking system automatically matches you with an available instructor based on area, gearbox and time. It does not judge you personally, and you can contact us to change an assignment. With advertising consent, Google, Meta and TikTok may use measurement data to build advertising profiles under their own terms.

12. Changes

If how we use information changes, we will update this page and the date at the top.