QuikSlot is a scheduling platform for driving instructors operating in the United Kingdom.
Data Controller:
[COMPANY NAME] (Georgian Virtual Zone Entity)
Registration Number: [INSERT]
Registered Address: [INSERT ADDRESS, GEORGIA]
UK VAT Registration: [INSERT VAT NUMBER]
Contact for data protection matters:
Email: privacy@quikslot.com
Postal: [INSERT ADDRESS]
Although we are based outside the United Kingdom, we process personal data of individuals in the UK and are therefore subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take our obligations under these laws seriously.
We collect different categories of personal data depending on whether you are a driving instructor or a pupil.
When you create an account and use QuikSlot, we collect:
Pupils create their own accounts — either by signing up directly or by accepting an invitation from their driving instructor. Pupils provide their own personal data, including:
Once a pupil is linked to an instructor, the instructor can view the pupil's scheduling-relevant data and may set additional scheduling preferences, including:
We process personal data for the following purposes and legal bases:
| Purpose | Legal Basis (UK GDPR) |
|---|---|
| Providing the scheduling service | Performance of a contract (Article 6(1)(b)) |
| Creating and managing your account | Performance of a contract (Article 6(1)(b)) |
| Processing payments and managing subscriptions | Performance of a contract (Article 6(1)(b)) |
| Calculating travel times and optimising schedules | Legitimate interest (Article 6(1)(f)) |
| Sending lesson reminders via SMS | Legitimate interest (Article 6(1)(f)) |
| Sending service-related communications | Legitimate interest (Article 6(1)(f)) |
| Improving our service and fixing bugs | Legitimate interest (Article 6(1)(f)) |
| Preventing fraud and abuse | Legitimate interest (Article 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c)) |
We do not:
We share personal data only with service providers who process data on our behalf (data processors), and only to the extent necessary to provide the QuikSlot service.
| Service Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Google Firebase | Database hosting, authentication, cloud functions | All account and scheduling data | London, UK (europe-west2) |
| Stripe | Payment processing | Instructor email, subscription details (Stripe handles all card data directly) | EU/UK |
| Twilio | SMS lesson reminders | Pupil phone numbers, lesson times | US (with EU data processing) |
| OpenAI | In-app voice assistant | Conversation text (no personal identifiers sent unless spoken by user) | US |
| OpenRouteService | Travel time calculations | Postcodes and coordinates only (no names or personal identifiers) | Germany |
We have Data Processing Agreements in place with each of these providers. All providers listed above maintain appropriate security measures and comply with applicable data protection laws.
We do not share data with any other third parties except where required by law (for example, in response to a valid court order).
We use Stripe to process all payments. When you subscribe to QuikSlot:
For more information, see Stripe's privacy policy.
Our company is registered in Georgia. Your personal data is primarily stored on Google Firebase servers located in London, UK (europe-west2 region) and is not routinely transferred outside the United Kingdom.
However, certain service providers process data outside the UK:
Our remote access to Firebase data from Georgia does not constitute a data transfer in the traditional sense, as the data remains stored on UK servers. Nevertheless, we maintain appropriate technical and organisational security measures to protect data during remote access, including encrypted connections and access controls.
We retain personal data only for as long as necessary for the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Active instructor accounts | For the duration of the subscription, plus 30 days after cancellation |
| Active pupil records | For as long as the pupil is linked to an active instructor |
| Unlinked or archived pupil records | 6 years after unlinking (to comply with HMRC record-keeping requirements for tax purposes) |
| Payment and invoice records | 6 years after the transaction (HMRC requirement) |
| Schedule history | For the duration of the instructor's active subscription |
| SMS delivery logs | 90 days |
| Application logs and error data | 90 days |
| Data deleted upon user request | Within 30 days of the request, except where retention is required by law |
After the retention period expires, data is permanently deleted or irreversibly anonymised.
Under the UK GDPR, you have the following rights:
Right of access — You can request a copy of all personal data we hold about you. We will provide this in a commonly used electronic format within 30 days.
Right to rectification — You can ask us to correct any inaccurate personal data. Instructors can update their own information directly in the app. Pupils can request corrections by contacting their instructor or by contacting us directly.
Right to erasure ("right to be forgotten") — You can ask us to delete your personal data. We will do so within 30 days, unless we are legally required to retain certain records (see Section 7).
Right to restrict processing — You can ask us to limit how we use your data while a concern is being resolved.
Right to data portability — You can request your data in a structured, machine-readable format so you can transfer it to another service.
Right to object — You can object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent — Where processing is based on consent, you can withdraw it at any time.
You can exercise your data rights in the following ways:
We will respond to all valid requests within 30 days. We may ask you to verify your identity before processing a request.
Pupils have their own QuikSlot accounts and can exercise their data rights directly:
Pupils control their own personal data (name, email, phone, postcode, availability). Instructors can only view and set scheduling preferences — they cannot edit a pupil's personal information.
We take the security of your data seriously and implement appropriate technical and organisational measures, including:
QuikSlot is designed for use by driving instructors (who must be at least 18 years old and hold a valid ADI licence) and their pupils (who are typically 17 years or older, as this is the minimum age for a UK provisional driving licence).
We do not knowingly collect personal data from children under the age of 17. If we become aware that we have collected data from a child under 17, we will take steps to delete it promptly.
Driving instructors are responsible for ensuring they have appropriate authority to enter pupil data into QuikSlot, particularly for pupils aged 17 who may be considered minors in some contexts.
QuikSlot is a mobile application and does not use browser cookies. We do not use advertising trackers, analytics cookies, or third-party tracking pixels.
Firebase may collect limited analytics data (such as app opens and crash reports) to help us maintain and improve the service. This data is anonymised and cannot be used to identify individual users.
We may update this privacy policy from time to time to reflect changes in our practices, service features, or legal requirements. When we make significant changes:
If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
We would appreciate the chance to address your concerns before you contact the ICO. Please reach out to us at privacy@quikslot.com first.
For clarity on the roles within QuikSlot:
Both instructors and pupils provide their own personal data directly to QuikSlot. The instructor-pupil link allows instructors to access only the scheduling information they need to build effective lesson timetables.
This privacy policy applies to the QuikSlot mobile application and associated services.
For questions about this policy, contact privacy@quikslot.com.