Instructor Privacy Notice

• We got your name, ADI number and contact details from the Road Safety Authority's public "Find an ADI" register on rsa.ie. Nobody gave them to us, we did not buy a list, and we did not get them from another instructor or a driving school.
• We use them for one thing: to write to you about supplying driving lessons through Drivzu.
• We contact you by email only, no more than three times, and then we stop.
• Reply STOP to any email and you are off the list permanently. You do not have to give a reason and it costs you nothing.
• If you never reply, we delete your details 24 months after we last contacted you.

Everything below is the same thing said properly.

If you already use Drivzu, this notice is not the one that applies to you — see our Privacy Policy instead.

The data controller is:

• Company: DRIVZU LIMITED, trading as Drivzu
• Company registration number (CRO): 816371
• Registered office: 59 Newtown Manor, Kilmurry Road, Limerick, V94 2Y86, Ireland
• Contact: hello@drivzu.com
• Website: drivzu.com

We are a small Irish company. Drivzu is a platform that connects learner drivers with RSA-approved driving instructors. If you email hello@drivzu.com about anything on this page, a person reads it — there is no ticketing system and no bot.

We have not appointed a Data Protection Officer, because we are not required to. Send anything you would send a DPO to hello@drivzu.com.

From the Road Safety Authority's public "Find an ADI" register, published at rsa.ie.

That register lists every Approved Driving Instructor in Ireland along with the contact details you gave the RSA, so that people can find and contact an instructor. It is open to anyone — no login, no payment, no request to the RSA. We take a copy of it automatically, overnight, so that our copy stays current with yours.

We want to be plain about three things, because they are the things people ask:

• We did not buy your details from a list broker or a lead-generation company.
• No other instructor, driving school, insurer or third party passed them to us.
• We hold only what the RSA publishes. We have not added anything from anywhere else, and we have not looked you up on social media or anywhere else to fill in gaps.

Because we got your details from the RSA rather than from you, data protection law (Article 14 of the GDPR) requires us to tell you all of this. It also requires us to tell you at the latest within one month, or when we first contact you, whichever comes first. That is why the very first email you get from us links to this page.

Exactly what the register publishes about you:

• Your name
• Your ADI number
• Your trading or business name, where the register lists one
• Your phone number(s) as published
• Your email address as published
• Your business address as published — we keep only the town and county, not the street line
• Your website, where the register lists one
• The counties you cover
• The vehicle categories you are approved for (B, BE, C, D and so on)
• Your EDT, IBT and quality-approved status flags
• The link to your RSA profile page, and the date the RSA last updated it

And a record of our own contact with you

• The dates we emailed you
• Whether you replied, and what you said
• If you invited us to phone you, the date and the exact wording of that invitation — we are required to be able to prove we had your permission before ringing you
• Any notes from a call, if we had one
• Whether you have asked us to stop

We hold no other information about you. No financial details, no bank details, no PPS number, no identity documents, no health information, and nothing at all about your private life.

What for: to contact you about supplying driving lessons through the Drivzu platform — what the platform does, what it costs, and whether you would like to join. That is the only purpose. If you join, a different set of terms takes over (see section 11).

The legal basis: our legitimate interests, under Article 6(1)(f) of the GDPR.

In plain terms, the interest is this. Drivzu is a marketplace, and a marketplace with no instructors is no use to anybody. Recruiting instructors is a necessary part of running it, and the RSA register is the only complete list of the professionals who could supply the service — published, by design, so that people can contact you.

Using legitimate interests as a basis is not a free pass. It requires us to weigh our interest against your rights and to write that assessment down before we do anything. We have done that, and it is a real document with the arguments against us in it, not a formality. You can ask us for a copy of it at hello@drivzu.com and we will send it to you.

The short version of the assessment: the details are ones you published for professional contact, the message concerns only your work and not your private life, we contact you a maximum of three times on one channel, we do not track whether you open anything, we never share your details with anyone, and you can stop it permanently with a one-word reply.

We do not use consent as the basis for contacting you by email, because we do not have your consent — you have not dealt with us before. That is precisely why the right to object in section 8 is unconditional.

Email only, up to three times. The first email, and at most two follow-ups over about twelve days. After that we close the file and do not contact you again about this.

If you reply to say no, or STOP, or "not interested", the remaining emails are cancelled the same day.

We will not ring you or text you unless you tell us to. Irish law (the ePrivacy Regulations 2011) says an unsolicited marketing call or text to a mobile needs your permission first, and we agree with that rule. If you reply and say "give me a ring", we will ring you — and we will write down the date and your exact words, because the law puts the burden on us to prove you asked. If you never say it, we never ring.

We also do not:

• put a tracking pixel in our emails, so we genuinely do not know whether you opened one;
• use tracked links;
• post you anything;
• add you to any advertising audience or retargeting list;
• make any automated decision about you, and we do not profile you. Putting your name, town and ADI number into an email is a mail-merge, not a profile.

And one thing worth saying plainly, because scams in this trade are real: we will never ask you by email for your bank details, your PPS number, or a photo of any document. If you ever join Drivzu, the payment side runs through Stripe and your bank details go to Stripe, never to us. Anyone emailing you asking for those things is not us.

Almost nobody, and this is deliberate.

That is the whole list. Specifically, we do not:

• sell, rent, licence or share your details with anyone;
• upload them to a CRM, sales tool, marketing platform or data-enrichment service;
• give them to advertisers or social media platforms;
• transfer them outside the European Economic Area for this purpose.

If that ever changed, we would update this page and tell you before it happened.

These are your rights under the GDPR and the Data Protection Act 2018. To use any of them, email hello@drivzu.com or just reply to any message we have sent you. No form, no account, no reason needed, no charge.

The right to object to direct marketing — this one is absolute

If you tell us to stop, we stop. Full stop.

There is no balancing exercise here, no exception, and nothing for us to weigh up. Article 21(2) of the GDPR gives you an unconditional right to object to direct marketing, and we act on it the same day it arrives. We will not ask why, we will not send you a "sorry to see you go" email, and we will not come back to you in six months.

One thing to know, because it sounds contradictory: when you tell us to stop, we keep a minimal record — your ADI number, your email address and the date — on a suppression list. We keep it precisely so that we can leave you alone. Our copy of the register refreshes from the RSA overnight, and without that record the refresh would simply add you back. We use it for nothing else, ever.

Your other rights

• The right to be told where we got your details — that is what section 3 is.
• The right of access (Article 15): you can ask for a copy of everything we hold about you, including where it came from and what we have done with it.
• The right to rectification (Article 16): if what we hold is wrong, tell us and we will fix it. Note that we can only fix our copy — the register itself belongs to the RSA, so if the entry on rsa.ie is out of date you will need to update it with them, and our copy will pick it up.
• The right to erasure (Article 17): you can ask us to delete what we hold. We will, keeping only the minimal suppression record described above so that we do not re-add you.
• The right to restrict processing (Article 18): you can ask us to hold your details but stop doing anything with them.
• The general right to object (Article 21(1)): because we rely on legitimate interests, you can object to the processing generally. Our position is simple — we do not argue.
• The right to complain (Article 77): see section 10.

Data portability (Article 20) does not apply here. It only covers data you gave us under a contract or with your consent, and this is neither. We are saying so rather than listing it and quietly not honouring it.

How long we take: we act on objections and STOP requests the same day. For anything else, within one month. If a request is unusually complex we can extend that by two months, and if we ever do, we will tell you why. We may ask you to confirm your identity first, so that we are not handing your details to somebody else.

If you are unhappy with how we have handled your details, please tell us first at hello@drivzu.com — we would rather fix it than have you find out we could not be bothered.

You do not have to come to us first, though, and you have every right to go straight to the regulator:

• Name: Data Protection Commission
• Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
• Website: dataprotection.ie

Contacting the DPC costs nothing, and doing so does not affect any other right you have.

This notice covers the period before you have anything to do with us. If you go on to create an instructor account, your data is then handled under our Privacy Policy and the Instructor Agreement, which cover bookings, payments, reviews, tax reporting and everything else that comes with actually using the platform.

If we change how any of this works, we will update this page and change the "Last updated" date at the top. If the change is significant and we still hold your details, we will tell you.

Questions about anything on this page: hello@drivzu.com
Post: DRIVZU LIMITED, 59 Newtown Manor, Kilmurry Road, Limerick, V94 2Y86, Ireland