Privacy Policy

Last updated: 27 July 2026

This Privacy Policy explains how DrivingSchool CRM, operated by Andreas Neofytou, a sole trader based in Cyprus ("we", "us"), collects and uses personal data through our website and platform.

Who We Are

Andreas Neofytou, a sole trader based in Cyprus, is the data controller for this website and for driving schools' own account and billing data. Contact: [email protected].

Controller & Processor

When your driving school enters your students' personal data into the platform, your school is the data controller for that data, and we act only as your data processor, on your instructions. A Data Processing Agreement is available on request. For your own school-admin account details and billing information, and for visitors to our marketing website, we act as the data controller.

What We Collect

  • Website visitors: general usage statistics (pages viewed, approximate location) via Matomo, a privacy-respecting analytics tool we self-host — we don't share this with ad networks or other third parties.
  • Contact form: school name, your name, email, phone (optional), and message — used only to respond to your enquiry.
  • School accounts: admin name, email, and phone; instructor and vehicle records; the customer/student records and lesson and exam schedules your school enters; SMS delivery logs; and audit/security logs recording who did what, when, and from which IP address.
  • Payment data: handled directly by Stripe — we never see or store full card numbers.

Why We Process It

To perform our contract with you (running your account, billing, sending SMS reminders); our legitimate interest in keeping the Service secure, auditable, and in responding to enquiries; and to meet legal obligations such as invoicing and tax records.

Who We Share It With

We use the following providers to run the Service, and don't sell your data or share it with anyone else except where required by law:

  • Stripe — payment processing
  • GatewayAPI — SMS delivery (EU-based)
  • Resend — transactional email delivery
  • DigitalOcean — hosting; our application and database run in Frankfurt, Germany, within the EU
  • Matomo — website analytics, self-hosted on our own EU server

International Transfers

Our infrastructure and most of our providers operate within the EU/EEA. Some providers, such as Stripe, may process data outside the EEA under Standard Contractual Clauses or an equivalent safeguard.

How Long We Keep It

For as long as your subscription is active. If you cancel and your account is deleted, your operational data is permanently deleted, except that audit and security log records are kept for up to 7 years for security and accountability purposes. Our live demo's data is automatically wiped roughly every four hours and isn't meant to hold real personal data at all.

Your Rights

You can ask to access, correct, delete, restrict, or receive a copy of your personal data, and object to certain processing. School admins can self-serve a full export of their school's data, in CSV or JSON format, at any time from account settings. If you're a student or customer whose data was entered by a driving school, please contact that school directly; you can also email us at [email protected] and we'll help or direct your request appropriately.

Cookies

Our website uses a small number of cookies: one to remember your language choice (English/Greek), and analytics cookies from our self-hosted Matomo instance. The platform application uses essential cookies required to keep you securely logged in — none of our cookies are used for advertising.

Security

We use encrypted connections (HTTPS) throughout, isolate each school's data from every other school's, hash passwords, and keep a full audit trail of account activity.

Children's Data

The Service is intended for use by driving schools and their adult staff. Some student records may relate to minors (Cyprus allows moped and motorcycle learners from age 16); such records are entered and controlled by the driving school, which is responsible for its own legal basis for processing that data.

Changes to This Policy

We may update this Policy from time to time. The current version is always posted on this page, with the date above.

Contact

Questions or requests about your personal data? Email us at [email protected].