Out of Hours XYZ Ltd is a company registered in England and Wales, company number 16087213.

For data protection purposes, we are the data controller of your personal data.

We only collect data necessary to provide and improve our Service. This includes:

a) Personal Data You Provide:

• Full name
• Email address
• Profile photo (optional)
• Business or location info (optional)
• Payment information (processed via Stripe)
• Any messages or content submitted via the app
  
  

b) Automatically Collected Data:

• Device information (e.g. OS, browser)
• IP address and log data
• Usage data (e.g. which features are used and how often)
• Cookie data (see Section 6)

We process your data to:

• Provide access to the Pedal platform
• Manage subscriptions and payments
• Track pupil progress and financial records
• Improve user experience and feature relevance
• Send important updates or service communications
• Respond to support requests
• Comply with legal obligations

We only process personal data on a lawful basis, such as:

• Performance of a contract (e.g. app access and billing)
• Legitimate interests (e.g. improving features, analytics)
• User consent (e.g. for marketing emails)

We do not sell your personal data. We may share data with trusted third parties that help us run our service, including:

• Stripe (payment processing)
• Analytics services (e.g. Google Analytics, Mixpanel)
• Cloud infrastructure providers (e.g. AWS, Firebase)
• Communication tools (e.g. email providers)
  
  

All third parties are bound by contractual obligations to keep your data secure and only use it for specified purposes.

We use appropriate technical and organisational measures to secure your data, including:

• Encrypted connections (SSL/TLS)
• Access controls and authentication
• Encrypted storage of sensitive data

We store your data in secure UK or EU-based data centres. Where data is transferred outside the UK/EU, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

We use cookies and similar technologies to:

• Keep you signed in
• Understand how the app is used
• Improve performance and features

You can manage cookie preferences in your browser or via our cookie banner (on web).

Under the UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (“right to be forgotten”)
• Object to or restrict certain processing
• Withdraw consent (e.g. marketing emails)
• Data portability (if applicable)
  
  

To exercise your rights, email: support@pedaldriving.co.uk

We may request proof of identity before fulfilling a data request.

We retain your data only as long as necessary to provide the Service, comply with legal obligations, or resolve disputes.

Inactive or deleted accounts may have data anonymised or permanently deleted after a defined period (usually 12–24 months).