This Privacy Policy explains how DRYVR collects, uses, stores and protects your personal data when you use our website and the DRYVR mentorship service. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
DRAFT FOR REVIEW: This policy must be reviewed and completed by a qualified UK solicitor and, where required, a data protection adviser before launch.
1. Data controller
The data controller responsible for your personal data is:
- Business name: [TO BE COMPLETED]
- Registered address: [TO BE COMPLETED]
- Company number: [TO BE COMPLETED]
- VAT number: [TO BE COMPLETED]
- Contact email: support@dryvr.example
2. What data we collect
- Identity and contact data: name, email address, mobile number, billing address and town/city.
- Transaction data: the fact and status of your DRYVR fee payment, your Stripe checkout session reference and amount. We do not store card numbers — card data is handled entirely by Stripe.
- Onboarding data: the answers you provide in the onboarding questionnaire (experience, available capital, vehicle preferences, logistics and objectives).
- Technical data: anonymised, aggregate analytics via Vercel Analytics and Speed Insights. These use no advertising cookies.
3. How and why we use it (lawful bases)
- To perform our contract with you — to provide the mentorship service, arrange sessions and communicate with you.
- Legitimate interests — to operate, secure and improve our website and prevent fraud and abuse.
- Legal obligation — to keep records required for tax, accounting and consumer-law purposes.
4. Payment processing
Payments are processed by Stripe. When you pay, your card details are submitted directly to Stripe and are never received or stored by DRYVR. Stripe acts as an independent controller/processor of that payment data under its own privacy terms.
5. Email
We use Resend to send transactional emails (payment confirmation and onboarding follow-up). These emails are necessary to deliver the Service.
6. Data retention
We keep purchase and onboarding records for as long as necessary to provide the Service and to meet legal, tax and accounting requirements (typically up to six years for financial records). We then delete or anonymise the data.
DRAFT FOR REVIEW: Confirm exact retention periods with your accountant and solicitor.
7. Sharing your data
We share data only with processors that help us run the Service (such as our database host, Stripe and Resend) and where required by law. We do not sell your personal data.
8. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. You can exercise these rights by contacting us via our contact page. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
This site uses only privacy-friendly, cookieless analytics (Vercel Analytics and Speed Insights) and essential functionality. We do not use advertising or tracking cookies, so no cookie-consent banner is required. If we introduce non-essential cookies in future, we will add a consent mechanism.
10. Changes
We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.