Privacy Notice

1. Who we are

Passr ("Passr", "we", "us") provides a platform for driving instructors and their students. For personal data we collect about users of the Passr platform, Passr is the data controller.

2. Data we collect

Account data: name, email, role (student or instructor), login credentials.
Profile & lesson data: instructor details (hourly rate, area, vehicle, availability), student–instructor connections, lessons booked, notes added by instructors.
Support messages: content of messages you send us.
Usage & device data: log data, device identifiers, IP address, basic telemetry to keep the Service secure and reliable.
Payment metadata: we receive limited transaction information from Paddle (such as plan, status, country, last four digits). Full card data is handled by Paddle, not by us.

3. How we use your data

Create and operate your account and the Service (contract performance).
Enable bookings, notes and payments between students and instructors (contract performance).
Provide customer support (contract performance / legitimate interests).
Keep the Service secure and prevent fraud (legitimate interests / legal obligation).
Improve the Service and develop new features (legitimate interests).
Send service emails; send marketing only where you have consented (consent).
Comply with legal obligations such as tax and accounting (legal obligation).

4. Who we share data with

Service providers: hosting, database, email and analytics providers acting on our instructions.
Merchant of Record — Paddle: Paddle handles payments, subscription management, tax compliance and invoicing for our paid plans.
Other users of the Service: instructors see lessons, profile information and notes for their own students; students see their own instructor's profile, availability and lesson history.
Professional advisers: legal, accounting and similar advisers where needed.
Authorities: where required by law or to protect rights, safety or property.

5. International transfers

Some of our providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or adequacy decisions.

6. Retention

We keep personal data only as long as needed for the purposes above, to comply with legal obligations, or to resolve disputes. When data is no longer needed it is deleted or anonymised. You can request deletion of your account at any time.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and regular reviews. No system is completely secure, but we work to keep your data safe.

8. Your rights

Subject to applicable law (including UK and EU GDPR), you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request erasure of your data.
Restrict or object to processing.
Receive a portable copy of your data.
Withdraw consent at any time where processing is based on consent.
Complain to your local data protection authority (in the UK, the ICO at ico.org.uk).

We aim to respond to requests within one month.

9. Cookies

We use cookies and similar technologies that are strictly necessary to run the Service (for example to keep you signed in). Where we use optional analytics or marketing cookies, we ask for your consent first and you can change your choice at any time.

10. Contact

For any privacy questions or to exercise your rights, contact us at privacy@passr.app.