Privacy Policy
This Privacy Policy explains how Philip's Drive Time collects, uses, and protects your personal data when you use our platform.
1. Who We Are
Philip's Drive Time is a driving instruction portal operated by Philip Hughes, a licensed Approved Driving Instructor (ADI) based in Northern Ireland. The platform is built and maintained by Ardvio.
Data Controller: Philip Hughes, Philip's Drive Time
Data Processor: Ardvio (Patrick Hughes)
Contact: contact@ardvio.com
ICO Registration: C1925568
2. What Data We Collect
Pupil data
- Full name
- Email address
- Phone number
- Date of registration
- Lesson history and dates
- Driving skill progress (NI DVA syllabus)
- Lesson notes recorded by your instructor
- Theory test status and mock test results
Parent / guardian data (if progress sharing is enabled)
- Name and email address
- Access to pupil progress reports only — no lesson notes or messages
Technical data
- Browser type and device information (collected by Supabase for authentication)
- Login timestamps and session tokens
3. Why We Collect It
We collect and process your data on the following legal bases under UK GDPR:
- Contract performance — to provide the driving instruction management service you have registered for
- Legitimate interests — to allow your instructor to track your progress and deliver a better learning experience
- Consent — for optional parent/guardian progress sharing, which you can disable at any time
4. How Long We Keep Your Data
We retain your personal data for the duration of your active lessons, plus 12 months after your last lesson date. After this period your data will be permanently deleted. You may request early deletion at any time.
5. Who Has Access
- Philip Hughes (your instructor) — full access to lesson records and skill progress
- Ardvio (Patrick Hughes) — platform maintenance and technical support only, under a Data Processing Agreement
- Your parent or guardian — only if you have enabled progress sharing, and only to progress data
We do not sell, rent, or share your personal data with any third parties for marketing purposes.
Third-party services:
- Supabase (database and authentication) — data stored on EU-region servers
- GitHub Pages (website hosting) — no personal data stored
- Gmail SMTP (email notifications) — used for system emails only
6. Your Rights
Under UK GDPR you have the right to access, correct, erase, restrict, or port your data, and to object to processing. To exercise any right contact us at contact@ardvio.com. We will respond within 30 days.
7. Data Security
- Encrypted connections (HTTPS/SSL) across the entire platform
- Supabase Row Level Security — pupils can only access their own data
- Access control — instructor access restricted to registered accounts
- No sensitive financial data is stored on our systems
8. Cookies
We use only essential authentication cookies required for the platform to function. We do not use tracking, advertising, or analytics cookies. See our Cookie Notice for full details.
9. Data Breaches
In the event of a personal data breach that is likely to risk your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.
10. Complaints
You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
11. Changes
We may update this policy from time to time. Significant changes will be notified by email to registered users.