Privacy Policy

Effective Date: October 31st, 2024

1. Introduction

This Privacy Policy explains how RSMT Limited, UK company number: 11744436 ("we", "our", "us"), uses your personal data in connection with the Driver Codes website and mobile application ("Service"). Protecting your information is essential to us, and this Privacy Policy aims to inform you clearly about how we collect, use, and manage your personal data.

The data controller for your information is RSMT Limited, registered with the ICO under reference ZA788385.

2. Definitions

• Terms and Conditions: The terms and conditions agreed upon when using the Service.

• Data Protection Laws: Refers to the General Data Protection Regulation ((EU) 2016/679) and UK data protection regulations, as updated.

• Personal Data: Information about an identifiable natural person that could allow an individual to be identified.

• IP Address: A unique identifier for each device connected to the internet.

• Data Subjects: Service users and prospective customers whose data is collected in connection with the Service.

3. What Information Do We Collect?

We collect and process the following types of information:

• Information you provide us: Contact details (name, email address) and credentials needed for DVLA services.

• Information we collect automatically: Technical details like IP address, browser type, operating system, and activity within the Service, such as page interactions and time spent.

• Information from third parties: Data from the DVLA when you provide your vehicle registration details, such as tax due dates, MOT renewals, and results. Your Driving Licence Number and National Insurance (NI) number are stored securely in an encrypted state and are not accessible to any RSMT employee.

4. Legal Basis for Processing

We only collect and process data when we have a legal basis to do so, such as:

• Consent: With your permission for specified purposes, with the right to withdraw at any time.

• Performance of a Contract: Necessary information to deliver the Service, as outlined in our Terms and Conditions.

• Compliance with Legal Obligations: When required by law or regulation.

• Legitimate Interests: For purposes such as service improvement and communication, provided these do not override your rights.

5. How We Use Your Information

Your data may be used for the following purposes:

• To provide and maintain our Service.

• To notify you of changes to the Service.

• To communicate with you and manage our relationship.

• To provide analytics and training, including assessing and improving Service features.

• To keep our Service secure and prevent fraud.

• To ensure that the Service meets your preferences and device requirements.

What We Will Never Do: We will not sell your personal data to third parties.

6. Who Do We Share Your Data With?

We may share your information only as necessary to operate the Service effectively, including with:

• Third-party service providers: We use trusted third parties for payment processing (e.g., Stripe), hosting, and technical support.

• Regulatory and law enforcement agencies: In compliance with legal requirements.

• Prospective buyers: If our business undergoes a merger, sale, or reorganization, with notice to affected users where appropriate.

All third parties accessing your data will agree to use it only for specified purposes and to maintain confidentiality and security.

7. Data Transfers Outside the EEA

If your personal data is transferred outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place to protect it. To learn more, please contact us.

8. Data Storage and Retention

• Retention Periods: Personal data will be stored for as long as needed to provide you with services and to meet regulatory requirements, with additional information available upon request.

• Anonymized Data: After account termination, we may retain anonymized data for analysis and research purposes.

• Data Deletion: We will securely delete personal data when it is no longer necessary to retain it.

9. Use of Cookies

Our Service uses cookies to:

• Track user movements and save preferences (session cookies).

• Remember preferences and settings for each visit (persistent cookies).

• Collect analytics on user activity and behavior (third-party cookies).

If you wish to disable cookies, you can do so via your browser settings. However, some Service features may not function as intended if cookies are disabled.

10. Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights:

• Access: Request access to your data.

• Rectification: Correct any inaccurate or incomplete data.

• Erasure: Request deletion of data when it is no longer necessary or legally required.

• Restriction: Request that we limit how we process your data.

• Data Portability: Request a copy of your data in a machine-readable format.

• Objection: Object to processing based on legitimate interests.

• Withdrawal of Consent: Withdraw consent for specific processing at any time.

To exercise these rights, please contact us at hello@driver.codes. Note that these rights are not absolute and may be subject to legal exemptions.

11. Security Measures

We are committed to protecting your data. Although no online data transmission or electronic storage is fully secure, we employ strict security measures to reduce risks, including encryption and restricted access.

12. Links to Third-Party Websites

Our Service may contain links to third-party websites. We are not responsible for these sites' privacy policies or practices and recommend reviewing their policies independently.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted here, and, where appropriate, you may be notified by email or within the Service. Please check this page periodically for updates.

14. Complaints

If you have any questions or complaints about how we handle your data, please contact us at hello@driver.codes or the Data Protection Officer (DPO). If unsatisfied with our response, you also have the right to lodge a complaint with the ICO (https://ico.org.uk/make-a-complaint/).