Booking

My Crash Course

With My Crash Course, respecting your data privacy rights is a top priority. This notice explains why and how we collect personal data about you, how we may process such data, and what rights you have regarding your personal data

This notice is laid out such that the general provisions are at the top of this notice, and you can then select the data subject type that you wish to view the relevant information.
We collect and process your data based on the type of data subject that you are. Please click on the most relevant category(ies) of data subject for your situation and this will take you to the section that describes what data we collect and the reason and justification for processing for that data subject category.
Please read the General Information and then click on the Data Subject Type that you are, as set out below.

1. PRIVACY NOTICE CONTENTS

2. GENERAL INFORMATION

The information in this section is relevant to all categories of data subject.
Who controls your personal data?
My Crash Course is responsible for your personal data. You can contact a representative by sending an email to the following address:

hello@mycrashcourse.co.uk

Your rights:
You have the following rights:

  1. The right to be informed.

    You have the right to be informed about how My Crash Course processes your personal data. Typically, My Crash Course communicates this information through privacy notices such as this one.

  2. The right of data access

    You have a right to obtain a copy of the personal data we hold about you, subject to certain exceptions.

  3. The right of data rectification

    You always have a right to ask for immediate correction of inaccurate or incomplete personal data which we hold about you.

  4. The right of data erasure

    You have the right to request that personal data be erased when it is no longer needed, where applicable law obliges us to delete the data or the processing of it is unlawful. You may also ask us to erase personal data where you have withdrawn your consent or objected to the data processing. However, this is not a general right to data erasure – there are exceptions.

  5. The right to restrict data processing

    You have the right to restrict the processing of your personal data in specific circumstances. Where that is the case, we may still store your information, but not use it further.

  6. The right to data portability

    You have the right to receive your personal data in a structured, machine-readable format for your own purposes, or to request us to share it with a third party.

  7. The right to object to data processing

    You have the right to object to our processing of your personal data based on the legitimate interests, where your data privacy rights outweigh our reasoning for legitimate interests.

  8. Rights in relation to automated decision making and profiling.

    You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. Currently, My Crash Cours does not perform any automated decision making or profiling.

You may request to enforce your data privacy rights by emailing hello@mycrashcourse.co.uk

In certain circumstances, we may need to restrict the above rights to safeguard the public interest (e.g., the prevention or detection of crime) or our business interests (e.g., the maintenance of legal privilege).
Consent as a legal basis for processing

For some data processing, My Crash Cours uses consent as a legal basis. If you have consented to processing by My Crash Cours , please be aware that you have the right to withdraw this consent at any point. If you would like to withdraw consent for a particular type of data processing that My Crash Cours performs, please email the following address: hello@mycrashcourse.co.uk

Complaints to a Supervisory Authority

You have the right to lodge a complaint with a supervisory authority with regards to the way that My Crash Course processes your personal data. My Crash Course  recommends lodging a complaint with the ‘Information Commissioner’s Office (ICO)’. This is the UK’s supervisory authority .

How we share your data

We will not share your information with any third parties for the purposes of direct marketing.

We use data processors who are third parties who provide elements of services for us. Categories of third parties include: cloud services providers, software providers, governing bodies and approved driving instructors. These third parties are based in the EU/EEA and are contracted with My Crash Course as data processors. These contracts with the third-party data processors meet the contracting criteria required by the GDPR. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will hold it securely and retain it for the period we instruct.

In some circumstances we are legally obliged to share information. For example, under a court order. In any scenario, we will satisfy ourselves that we have a lawful basis on which to share the information and document our decision making and satisfy ourselves we have a legal basis on which to share the information.

How we protect your information

We implement appropriate technical and organisational measures to protect personal data that we hold from unauthorised disclosure, use, alteration, or destruction. Where appropriate, we use encryption and other technologies that assist in securing the data you provide. We also require our service providers to comply with strict data privacy requirements where they process your personal data.

How long we keep your personal data

We only keep your personal data for as long as necessary for the purposes described in this privacy notice, or until you notify us that you no longer wish us to process your data. After this time, we will securely delete your personal data, unless we are required to keep it to meet legal or regulatory obligations, or to resolve potential legal disputes. For further information please see our Retention Schedule located at the end of this document.

Contact and further information

If you have any questions about how we use your personal data or wish to make a complaint about how we handle it, you may contact My Crash Course at hello@mycrashcourse.co.uk

3. EMPLOYEES OR POTENTIAL EMPLOYEES

The types of information we collect and use

We collect and use personal data that concerns you in connection with your employment at My Crash Course. We may collect the following categories of personal data:

  • Personal details and identification data such as name, address, telephone number, email address or any other contact details.
  • Personal data related to family and social circumstances such as gender, date of birth, marital and family status (including the name and contact details of the next of kin).
  • Employment related personal data such as: signature, employment status, national insurance numbers, insurance number, country of residence, nationality, photo, emergency contacts, passport information, work and residence permit, immigration status and travel visa information.
  • Qualifications such as qualifications and certifications including current and previous positions, education and training courses, resume/CV, records of education and work achievements, in some cases: contact details of referees and results of capability assessments and interview assessment/feedback.
  • Job information and work metrics such as position, title, employment contract, payroll ID, line manager, job band, performance history, employment status, leave of absence information, working time logging, training records, performance targets and development goals. In some cases, we may also record results of capability assessments, safety reports and incidents, and professional feedback.
  • Compensation, allowances, benefits and expense related information such as salary data, payroll data, pension plan number and contributions, non-salary benefits, bonus, compensation, share options, dependents, beneficiaries or health benefit nomination, bank statements, expense claims and receipts, bank account details, credit card data, phone expenses and insurance data.
  • Electronic identification data and information (where employee has access or is affected by such systems or applications) such as access logs, IT and internet usage, device identifiers (mobile device ID, PC ID etc.), registration and login credentials, IP address, tracking and analytics data, recordings (e.g. voice mail/call recordings), posts on corporate platforms (e.g. Yammer), password recovery data, information obtained via IT security tools.
  • Financial and other details such as account information, credit checks, payment details and transactions, investigation information and disciplinary history.
  • Other personal data (which may include special categories of information as mentioned below) namely where you or others (such as your colleagues) may register these data on or in our systems, programs and application such as business documents containing personal information (e.g. queries, questions, complaints, orders and related records; emails; reports; contracts; presentations, minutes; work products), photos, images and/or videos.
  • The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence.
  • Special categories of personal data such as:
    • health and medical information, including disability status, special working conditions (such as use of a standing desk) and work related injury and illness information;
  • Data about criminal convictions and offences such as criminal background information and sanction list information to the extent required for the purposes of criminal background screening and Know Your Customer and Anti Money Laundering obligations.
  • To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency) such as data in public professional social media (e.g. LinkedIn), background check data.
In case you would like to be provided with information about a specific personal data processing activity, you can request that by submitting a request at

hello@mycrashcourse.co.uk

Why we use your personal data?

We may use your personal data for the following purposes:

  • human resources management including administration, workforce planning and reporting;
  • staff transfers and succession planning;
  • payroll, compensation, benefits and performance management;
  • recruitment, background checks and verification of qualifications;
  • training, development and employee assessments;
  • onboarding, internal movements and termination processes;
  • leave, sickness and vacation management;
  • health and safety programs and reporting;
  • travel and expense management including emergency support;
  • fulfilling employment-related rights and obligations;
  • internal and external communication and representation of My Crash Course;
  • organizing events, meetings and internal activities;
  • managing My Crash Course assets including photos and media;
  • finance and accounting services;
  • business restructuring and organizational changes;
  • reporting, analytics and business improvement;
  • monitoring compliance with company policies, contracts and laws;
  • audits, regulatory checks and compliance reviews;
  • risk management, fraud prevention and legal protection;
  • customer and supplier relationship management where relevant;
  • security systems including access control and monitoring;
  • IT systems management including support, security, backups and maintenance.

We only collect the personal data necessary for these purposes. Some data may include emergency contact details, and you should inform those individuals accordingly.

If you work at a third-party location, that organisation may also process your personal data under their own privacy policies.

What happens if you do not provide your data?

If required personal data is not provided, My Crash Course may not be able to establish or continue employment or provide related services. This may affect your rights, benefits or contractual relationship.

The legal basis we rely on

  • fulfilment of employment or contractual obligations;
  • legitimate interests including:
    • compliance with legal and internal policies;
    • fraud prevention and security;
    • internal administrative data sharing.
  • legal obligations such as labour law, tax and reporting requirements;
  • consent where required (e.g. media, communications or events).

For any data-related requests, contact us at hello@mycrashcourse.co.uk

.

4. CONTRACTORS OR POTENTIAL CONTRACTORS OR WORKERS WORKING UNDER A SERVICE CONTRACT

The types of information we collect and use

We collect and use personal data that concerns you in connection with your work assignment and the services you are providing under the work assignment/statement of work directly to My Crash Course. We may collect the following categories of personal data:

  • Identification data and business contact information, you share with us such as first name, last name, email address, address, telephone number, mobile telephone number, gender, date of birth, ADI number.
  • Additional information you provide to us in the course of your work assignment such as data concerning the fulfilment of your work assignment, our contractual obligations and pre-contractual measures including correspondence data, offers, tenders, resume/CV, background check data, conditions, qualifications/certificates, contract and order data, invoices, payments, business partner history, records relating to queries/questions/complaints/orders, working time logging, and training and education records, car registration number, insurance data.
  • Expense related information such as bank statements, payment details, transactions, expense claims and receipts, bank account details, credit card data.
  • Electronic identification data and information collected by the communications systems, IT applications and website browser (where contractor has access or is affected by such systems or applications and in accordance with the applicable law) such as information technology usage (system access, IT and internet usage), device identifier (mobile device ID, PC ID), registration and login credentials, IP address, login data and log files, Analytics ID, digital alias/signature, time and URL, searches, website registration and cookie data recordings (e.g. voice mail/phone recordings, Skype recordings).
  • Other personal data namely where you or others (such as your colleagues) may register these data on or in our systems, programs and application such as business documents containing personal information (e.g. queries, questions, complaints, orders and related records, emails, reports, contracts, presentations, minutes, work products),
  • photos, images and/or videos.

The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence and where relevant depending on your work assignment. 

  • Special categories of personal data such as data for travel emergency support (blood type, medical history, allergies).
  • Data about criminal convictions and offences such as criminal background information for the purposes of criminal background screening.
  • To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency) such as data transferred to My Crash Course by your employer or the company through which you are assigned to My Crash Course, commercial register data, creditworthiness data.

In case you would like to be provided with information about a specific personal data processing activity, you can request that by submitting a request at

In case you would like to be provided with information about a specific personal data processing activity, you can request that by submitting a request at

hello@mycrashcourse.co.uk

Why we use your personal data?

We may use your personal data for the following purposes:

  • human resources and administrative management related to services and assignments;
  • supplier and service provider management including procurement, orders, invoicing and contracts;
  • staff coordination, transfers and succession planning;
  • training and development of staff and contractors;
  • health and safety programs and compliance;
  • travel and expense management including emergency support and insurance;
  • financial services including accounting, reporting and payment processing;
  • use of work outputs and documentation such as invoices, reports and orders;
  • business restructuring, acquisitions and organizational changes;
  • monitoring compliance with My Crash Course policies, contracts and legal requirements;
  • audits, reviews and regulatory compliance checks;
  • security management including fraud prevention and system protection;
  • IT systems management including support, backups, maintenance and security.

We only collect the personal data necessary for these purposes. For analytics and service improvement, anonymised data may be used that cannot identify you.

What happens if you do not provide your data?

If required personal data is not provided, My Crash Course may not be able to establish or maintain a business relationship or provide services effectively.

The legal basis we rely on

  • fulfilment of contractual obligations or pre-contractual steps;
  • legitimate interests including:
    • business operations and development;
    • compliance with laws and internal policies;
    • fraud prevention and security;
    • internal administrative data sharing.
  • legal obligations such as tax, reporting and regulatory requirements;
  • explicit consent where required by law.

For any data-related requests, contact us at hello@mycrashcourse.co.uk.

5. SUPPLIERS OR POTENTIAL SUPPLIERS OR INSTRUCTORS OR POTENTIAL INSTRUCTORS

The personal data we collect about you and how we use it

We collect and use personal data in connection with agreements with our suppliers and business partners.

  • Identification and contact data: name, job title, email address, business address, phone numbers;
  • Business-related data: contracts, invoices, payments, correspondence, orders and service history;
  • Technical data: IP address, login details, system usage, device information, cookies and analytics data;

In some cases, we may also process:

  • Compliance data: criminal background checks or sanction list screening where legally required;
  • Public data: information from public registers or third-party sources such as credit agencies.
What we use your personal data for
  • supplier and contract management;
  • processing orders, invoices and payments;
  • business reporting, analytics and service improvement;
  • quality management and documentation;
  • compliance, audits and regulatory requirements;
  • fraud prevention and risk management;
  • security of systems, networks and business operations;
  • IT systems management including support, maintenance and backups.

We only collect the personal data necessary for these purposes and may use anonymised data for analytics and improvement.

What happens if you do not provide your data?

If required personal data is not provided, My Crash Course may not be able to establish or maintain a business relationship with you or your company.

The legal basis we rely on
  • contractual obligations or pre-contractual measures;
  • legitimate interests including:
    • business operations and development;
    • compliance with laws and internal policies;
    • fraud prevention and security;
    • internal administrative data sharing.
  • legal obligations such as tax, reporting and regulatory compliance.

Personal data related to criminal records will only be processed where permitted by applicable law.

6. CUSTOMERS/CLIENTS OR POTENTIAL CUSTOMERS/CLIENTS

The personal data we collect about you and how we use it

We collect the following categories of personal data:

  • Contact information: name, title, email address, home address, pick-up address, telephone number and mobile number;
  • Driving lesson and test information: date of birth, provisional licence number, theory test booking number, practical test booking number, home address and pick-up address;
  • Financial information: debit or credit card details and billing address for payments and refunds;
  • Additional information: preferences, interests in My Crash Course services, marketing preferences, registration data, contracts, invoices, payments and communication history;
  • Website and technical data: IP address, browser type, pages visited, time spent on the website, links clicked and other analytics data.

What we use your personal data for

  • processing and managing your bookings and orders;
  • providing and administering our driving courses and services;
  • customer support and responding to inquiries;
  • conducting customer satisfaction surveys;
  • contacting driving instructors (ADIs) and DVSA to arrange or modify bookings;
  • marketing and promotional activities including newsletters and offers;
  • data analysis to improve services and customer experience.

We only collect the personal data necessary for these purposes and share only essential data using secure communication methods such as phone, email, APIs and messaging systems.

We may anonymise your data so it no longer identifies you and use it for service improvement and system testing.

What happens if you do not provide your data?

Some personal data is required to provide our services. Without it, My Crash Course may not be able to process bookings, enter into contracts or deliver services to you.

The legal basis on which we use your personal data

  • to fulfil contractual obligations or take pre-contractual steps;
  • to comply with legal obligations such as tax and reporting requirements;
  • with your consent, where required (e.g. marketing communications);
  • based on legitimate interests, including:
    • business operations and service improvement;
    • fraud prevention and security protection;
    • compliance with legal and internal policies;
    • internal administrative data sharing;
    • employee training, quality assurance and business improvement.

For any questions or requests regarding your personal data, contact us at hello@mycrashcourse.co.uk.

7. OTHER DATA SUBJECT TYPES

Unsolicited Personal Information

If you send My Crash Course unsolicited personal information, for example a CV, My Crash Course reserves the right to immediately delete that information without informing you or to decide which category of data subject that you appear to be and manage your personal data within the remit of that category as described elsewhere in this Privacy Notice.

Users of our website that do not fall under the specifically stated Data Subject Types

The personal data we collect about you and how we get it

We collect the following categories of personal data:

  • The business contact information you share with us:name, title, job title, email address, business address, telephone number, mobile telephone number, etc.
  • Information your browser makes available when you visit My Crash Course website: IP address, the source of your site visit, time spent on the website or a particular page, links clicked, comments shared, browser type, date and time of visit, etc.

What we use your personal data for

  • We use your personal data to:
  • respond to your specific request that you make, for example request a demonstration, whitepapers, newsletters, or other information.
  • provide customer support and process, evaluate and respond to requests and inquiries;
  • conduct and facilitate customer satisfaction surveys;
  • conduct marketing and sales activities (including generating leads, pursuing marketing prospects, performing market research, determining and managing the effectiveness of our advertising and marketing campaigns and managing our brand);
  • send you marketing communications (such as alerts, promotional materials, newsletters, etc.);
  • perform data analytics (such as market research, trend analysis, financial analysis, and customer segmentation).
  • We only collect the personal data from you that we need for the above purposes. We may also anonymise your personal data, so it no longer identifies you and use it for various purposes, including the improvement of our services and testing our IT systems.

The legal basis on which we use your personal data

We use your personal data for the purposes described in this notice based on one of the following legal bases, as applicable:

  • Legitimate interest as by using our website it is understood that there is potential for you to be a potential customer, contractor, employee, or supplier.

8. RETENTION PERIODS FOR ALL DATA SUBJECTS

DATA RETENTION SCHEDULE
PROCESSCATEGORIESMAY INCLUDERETENTION TRIGGERPERIOD
Processing Transaction/Booking including contact formsIdentityName
Surname
Title
Date of birth
Provisional Licence Number		Last Action6 years
ContactAddress(es)
Phone
Email		Last Action6 years
FinancialDebit/Credit card detailsLast Action6 years
PaymentFinancialDebit/Credit card detailsLast Action6 years
ContactAddress(es)
Phone
Email		Last Action6 years
DVSA Course BookingIdentityName
Surname
Title
Date of birth
Provisional Licence Number
Theory Test Booking Number
Practical Test Booking Number		Last Action6 years
MarketingIdentityName
Surname
Title
Date of birth
Screen Name		Last Action2 years
ContactEmailLast Action2 years
Recruitment InterviewingIdentityName
Surname
Title		Last Action OR End of Employment1 year
ContactPhone
Email		Last Action OR End of Employment1 year
DocumentCVLast Action OR End of Employment1 year
Recruitment OnboardingIdentityName
Surname
Title
Date of birth
Gender
Marital Status		End of Employment6 years
ContactAddress(es)
Phone
Email
Emergency Contact		End of Employment6 years
DocumentsPassport (or Right to Work equivalent)
P45		End of Employment6 years
FinancialBank Account detailsEnd of Employment6 years
HR and StaffingIdentityName
Surname
Title
Date of birth
Gender

Marital Status

Job Title

Car Registration Number

End of Employment6 years
ContactAddress(es)
Phone
Email
Emergency Contact		End of Employment6 years
DocumentsPassport (or Right to Work equivalent)
P45
Medical Documents
Employment Contract		End of Employment6 years
FinancialBank Account details
Salary and Pension details		End of Employment6 years
Job Information and Work MetricPosition
Job Title
Line Manager
Job Band
Performance History
Employment Status

Working Time Log
Leaves of Absence
Training Records
Performance Targets
Development Goals

End of Employment6 years
Suppliers and ADIsIdentityName
Surname
Title

Gender
Date of Birth

Car Registration Number

Last Action OR End of Collaboration6 years
ContactAddress(es)
Phone
Email		Last Action OR End of Collaboration6 years
DocumentsADI BadgeLast Action OR End of Collaboration6 years
FinancialBank Account detailsLast Action OR End of Collaboration6 years
Website CookiesIdentityPlease see our Cookie StatementPlease see our Cookie Statement 
Data Subject Request (DSR)IdentityName
Surname
Title		Last Action1 years
ContactPhone
Email
Address		Last Action1 years
Call Recordings Call Recording AudioCall End Date6 months