Privacy Policy

Fly High Driving Academy

Last updated: 17 May 2026

1. Who We Are

This Privacy Policy explains how Alan Hayward trading as Fly High Driving Academy (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website, enquire about or book driving tuition, or otherwise interact with us.

We are the Data Controller for the personal data described in this policy.

Trading name: Fly High Driving Academy

Data Controller: Alan Hayward

Address: Flat 105 Eclipse Court, 1 Barnard Square, Ipswich, Suffolk, IP2 8FD, United Kingdom

Email: info[at]flyhighdriving[dot]academy

Website: https://flyhighdriving.academy

2. Legal Framework

This policy is drafted in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Privacy and Electronic Communications Regulations 2003 (PECR)
  • The Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013

Where we refer to ‘data protection law’ in this policy, we mean the above legislation collectively.

3. What Personal Data We Collect

3.1 Learner Drivers & Full Driving License Holders

When you enrol as a learner driver, full driving license holder or enquire about driving tuition we may collect:

  • Identity data: full name, driving licence number
  • Contact data: email address, telephone number, home address
  • Next of kin data: name and telephone number of your nominated next of kin
  • Licensing & qualification data: theory test certificate number, eyesight test result, DVSA-related information
  • Health data (special category): medical conditions that may affect your ability to drive safely, and whether you are subject to a driving ban * (* see 3.2.)
  • Financial data: payment records processed via Stripe (we do not store card details)
  • Communications data: records of correspondence between us
  • Payment and invoice information

3.2 PDI & ADI Clients

If you are a PDI or ADI client engaging us for the purpose of Non – ORDIT professional instruction or training, we may collect:

  • Identity data: full name, driving licence number
  • Contact data: email address, telephone number, home address
  • Next of kin data: name and telephone number of your nominated next of kin
  • Licensing & qualification data: eyesight test result, DVSA-related information
  • Health data (special category): medical conditions that may affect your ability to drive safely, and whether you are subject to a driving ban*
  • Financial data: payment records processed via Stripe (we do not store card details)
  • Communications data: records of correspondence between us
  • Payment and invoice information

* Important note on health data: Information about medical conditions and driving bans is classified as special category data under UK GDPR Article 9. We collect this data only where it is necessary for reasons of public safety and to fulfil our legal obligations as a driving instructor, and we treat it with the highest level of care.

3.3 Website Visitors

When you visit https://flyhighdriving.academy, we may automatically collect:

  • Browser type and version
  • Pages visited and time spent on site
  • IP address (anonymised where possible)
  • Referring website

4. How We Collect Your Personal Data

We collect personal data through the following means:

  • Directly from you: via telephone, email, or in person when we meet you for the first time in the car
  • Booking platform: through Moxie / WithMoxie, our scheduling and client management software
  • Payment processing: through Stripe when you pay for driving courses online
  • Email communications: when you contact us by email or respond to our communications sent via MailerLite
  • Automatically: via essential cookies when you browse our website (see Section 8)

5. Lawful Basis for Processing

Under UK GDPR Article 6, we rely on the following lawful bases:

Contract (Article 6(1)(b))

Processing pupil and client data is necessary to provide driving instruction services, manage bookings, and process payments.

Legitimate Interests (Article 6(1)(f))

We may process contact and communications data to respond to enquiries, manage our business relationship with you, and send service-related updates. Our legitimate interests do not override your rights and freedoms.

Legal Obligation (Article 6(1)(c))

We may be required to retain certain records for tax, financial, or regulatory compliance purposes.

Consent (Article 6(1)(a))

We rely on your explicit consent to send marketing emails and newsletters via MailerLite. You may withdraw consent at any time by clicking ‘Unsubscribe’ in any marketing email or contacting us at info@flyhighdriving.academy.

Vital Interests / Public Task — Special Category Data (Article 9(2)(c) and (g))

Where we process health data (medical conditions, driving bans), we do so because it is necessary for reasons of public safety and to comply with our professional obligations as a DVSA-registered driving instructor.

6. How We Use Your Personal Data

We use the personal data we collect to:

  • Provide, manage, and schedule driving tuition and assessments
  • Process payments securely via Stripe
  • Communicate with you about your driving tuition, bookings, and progress
  • Send booking confirmations, invoices, receipts, and administrative notices
  • Send marketing emails and newsletters (with your consent)
  • Comply with our obligations as a DVSA-approved driving instructor
  • Maintain accurate records for tax and accounting purposes
  • Respond to enquiries from you or your nominated next of kin in the event of an emergency
  • Improve our website and services

7. Third-Party Service Providers

We share your data with the following trusted third-party processors who act on our behalf and are bound by data processing agreements:

7.1 Stripe (Payment Processing)

Stripe Payments Europe, Ltd processes card payments on our behalf. We do not store your card details. Stripe is PCI-DSS compliant. For details, see stripe.com/gb/privacy.

7.2 MailerLite (Email Marketing)

MailerLite is used to send marketing newsletters and transactional emails. MailerLite stores your email address and communication preferences on servers located in the EU/EEA. For details, see mailerlite.com/legal/privacy-policy.

7.3 Moxie / WithMoxie (Booking & Client Management)

We use Moxie (withmoxie.com) to manage bookings, scheduling, and client records. Your pupil data, including contact details and lesson history, is stored within this platform. For details, see withmoxie.com/privacy.

We do not sell your personal data to any third party. We do not use any third-party analytics or advertising trackers on our website.

8. Cookies

Our website uses only essential (strictly necessary) cookies. These cookies are required for the website to function correctly and cannot be switched off. They do not track you for marketing purposes and do not require your consent under PECR.

Examples of essential cookies we may use include:

  • Session cookies that remember your progress through a booking or contact form
  • Security cookies that help protect the website from fraudulent activity

We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.

9. International Data Transfers

Our services are directed at users based in the United Kingdom. Where any of our service providers (such as MailerLite, Stripe and Moxie) process data outside the UK, they do so under appropriate safeguards including:

  • UK Adequacy Regulations (for transfers to countries deemed adequate by the UK Government)
  • Standard Contractual Clauses (SCCs) approved for use under UK GDPR

We will not transfer your personal data internationally without ensuring appropriate safeguards are in place.

10. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes set out in this policy, unless a longer retention period is required by law.

  • Driving student and other client records: retained for 7 years after your last lesson, in line with HMRC requirements and potential liability considerations
  • Health and special category data: retained only for the duration of active instruction, then securely deleted unless a longer period is required by law
  • Financial records and invoices: retained for 7 years in accordance with HMRC guidelines
  • Marketing contact list: retained until you unsubscribe or withdraw consent
  • Website enquiries: retained for 2 years from the date of last contact

When data is no longer required, it is securely deleted, anonymised or shredded.

11. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of Access (Article 15): you may request a copy of the personal data we hold about you (a Subject Access Request)
  • Right to Rectification (Article 16): you may ask us to correct inaccurate or incomplete data
  • Right to Erasure (Article 17): you may request that we delete your personal data where there is no lawful reason for us to continue processing it
  • Right to Restrict Processing (Article 18): you may ask us to pause processing of your data in certain circumstances
  • Right to Data Portability (Article 20): you may request your data in a structured, machine-readable format where processing is based on consent or contract
  • Right to Object (Article 21): you may object to processing based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
  • Rights relating to Automated Decision-Making: we do not make decisions about you based solely on automated processing

To exercise any of these rights, please contact us at:  info[at]flyhighdriving[dot]academy 

We will respond within one calendar month. We may need to verify your identity before processing your request.

12. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:

  • Use of reputable, security-certified third-party processors (Stripe, MailerLite, Moxie)
  • Secure HTTPS connections on our website
  • Access controls limiting who can view sensitive pupil data
  • Regular review of the data we hold and the platforms we use

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms inform you without undue delay where required by law.

13. Learners Under 17

Driving instruction may lawfully be provided to learners from the age of 17 (or younger on private land). Where we provide instruction to or collect data about individuals under the age of 18, we will:

  • Where appropriate, seek consent from a parent or guardian
  • Collect next of kin information as a matter of course
  • Take additional care in how we handle and protect that data

We do not knowingly collect data from children under the age of 13 via our website.

14. Direct Marketing

We send marketing emails only where you have provided explicit consent, in compliance with PECR. Each marketing email will include a clear and easy option to unsubscribe.

You can withdraw your consent at any time by:

  • Clicking ‘Unsubscribe’ at the bottom of any marketing email
  • Emailing us at info[at]flyhighdriving[dot]academy

Withdrawing consent will not affect transactional emails necessary to fulfil your booking or provide your tuition.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or business practices. The current version will always be available on our website at https://flyhighdriving.academy. We encourage you to review this policy periodically. Where changes are significant, we will notify you by email.

16. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Name: Alan Hayward (Data Controller)

Trading as: Fly High Driving Academy

Address: Flat 105 Eclipse Court, 1 Barnard Square, Ipswich, Suffolk, IP2 8FD, UK

Email: info[at]flyhighdriving[dot]academy

Website: https://flyhighdriving.academy