1. Introduction
Wylie Driving School (“we,” “us,” or “our”) operates https://wyliedrivingschool.com and provides online driver education and related courses (the “Services”).
This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and what choices you have. Please read it carefully. By using our Services, you agree to the practices described here.
If you do not agree with this policy, please do not use our Services.
2. Who We Are
Wylie Driving School
[FULL LEGAL ENTITY NAME]
[STREET ADDRESS]
[CITY, STATE, ZIP]
[COUNTRY]
Email: privacy@wyliedrivingschool.com
Phone: [PHONE NUMBER]3. Information We Collect
3.1 Information you give us
- Account details — name, email address, password, phone number
- Enrollment details — date of birth, mailing address, driver’s license or permit number where a course requires it, and state of residence
- Payment information — billing name and address. Card numbers are entered directly into our payment processor and are never stored on our servers.
- Course activity — lessons viewed, time spent, quiz answers, and completion status
- Identity verification answers — security questions or other checks required by a course or regulator
- Communications — messages you send to support, survey responses, and reviews
3.2 Information collected automatically
- IP address and approximate location derived from it
- Browser type, operating system, and device identifiers
- Pages visited, referring URL, and time spent on each page
- Cookies and similar technologies (see Section 8)
3.3 Information from third parties
- Payment confirmation and fraud signals from our payment processor
- Sign-in details if you use a third-party login
- Analytics and advertising data from the providers listed in Section 6
4. How We Use Your Information
| Purpose | Examples |
|---|---|
| Provide the Services | Create your account, deliver course content, track progress |
| Issue certificates | Confirm completion and generate your certificate |
| Process payments | Charge for courses, handle refunds, prevent fraud |
| Meet legal obligations | Report completions to a state agency where required, retain records |
| Support you | Answer questions, resolve technical problems |
| Improve the Services | Understand which lessons cause difficulty, fix errors |
| Communicate | Send course reminders, receipts, and service notices |
| Marketing | Send offers, where you have consented or as otherwise permitted |
We do not sell your personal information for money. [If any ad-tech sharing occurs, say so plainly here — “sharing” for targeted advertising has a specific legal meaning under California law.]
5. Legal Bases (visitors in the EU and UK)
| Basis | Applies to |
|---|---|
| Performance of a contract | Delivering the course you purchased |
| Legal obligation | Regulatory record-keeping and reporting |
| Legitimate interests | Security, fraud prevention, service improvement |
| Consent | Marketing emails and non-essential cookies |
You may withdraw consent at any time. This does not affect processing carried out before withdrawal.
6. Who We Share Information With
We share personal information only with the following categories of recipients:
| Category | Purpose | Example provider |
|---|---|---|
| Payment processing | Take payment, prevent fraud | [Stripe / PayPal] |
| Hosting | Run the website and store data | [HOST NAME] |
| Email delivery | Receipts, reminders, newsletters | [PROVIDER] |
| Analytics | Understand site usage | [Google Analytics / other] |
| Customer support | Handle enquiries | [PROVIDER] |
| Regulatory bodies | Report course completion where the law requires | [AGENCY NAME] |
| Professional advisers | Legal, accounting, audit | As needed |
We may also disclose information when required by law, court order, or valid legal process, or to protect our rights, safety, or property.
If our business is sold or merged, your information may transfer to the buyer. We will notify you before your information becomes subject to a different privacy policy.
7. Minors
⚠️ This section carries the most legal risk. Do not publish it without an attorney’s review.
Many of our courses are taken by students under 18.
- We do not knowingly collect personal information from children under 13 without verifiable parental consent.
- Where a student is under 18, we may require a parent or guardian to create the account, provide consent, or verify enrollment.
- Parents and guardians may review, correct, or request deletion of their child’s information by contacting us at privacy@wyliedrivingschool.com.
- We limit collection from minors to what the course and applicable regulations require.
- We do not use a minor’s personal information for targeted advertising or sell it.
If we learn we have collected information from a child under 13 without the required consent, we will delete it promptly.
[If you operate a parent portal that shows a teen’s progress to a guardian, describe exactly what the parent can see.]
8. Cookies and Tracking
We use:
- Essential cookies — login sessions, shopping cart, security. The site does not work without these.
- Functional cookies — remember preferences such as language.
- Analytics cookies — measure traffic and usage patterns.
- Advertising cookies — measure campaign performance and show relevant ads.
You can manage non-essential cookies through our cookie banner at any time, or block cookies in your browser settings. Blocking essential cookies will break parts of the site.
[List each cookie, its provider, purpose, and lifespan in a table if you serve EU or UK visitors.]
9. Data Retention
We keep personal information only as long as necessary:
| Data | Retention |
|---|---|
| Account and course records | [X] years after your last activity |
| Completion certificates | [X] years, or as regulations require |
| Payment records | [X] years for tax and accounting purposes |
| Support messages | [X] years |
| Marketing contacts | Until you unsubscribe |
Some records must be retained for a fixed period by law or by a state regulator, even after you ask us to delete your account.
10. Security
We protect your information using:
- Encryption in transit (TLS/HTTPS) across the entire site
- A PCI-compliant payment processor — we never store full card numbers
- Access controls limiting staff access to what their role requires
- Regular software updates and security monitoring
- Encrypted backups
No system is completely secure. We cannot guarantee absolute security, but we take these safeguards seriously and will notify you and the relevant authorities of a breach where the law requires it.
11. Your Rights
Depending on where you live, you may have the right to:
- Access — request a copy of the information we hold about you
- Correct — ask us to fix inaccurate information
- Delete — ask us to erase your information, subject to legal retention duties
- Portability — receive your data in a machine-readable format
- Opt out — of marketing, targeted advertising, or the sale or sharing of personal information
- Object or restrict — limit how we process your information
- Withdraw consent — where processing is based on consent
- Non-discrimination — we will not treat you differently for exercising these rights
To exercise any right, email privacy@wyliedrivingschool.com. We will respond within the period the applicable law requires, typically 30 to 45 days. We may need to verify your identity first.
California residents
Under the CCPA/CPRA you have the rights above, including the right to opt out of the sale or sharing of personal information and to limit the use of sensitive personal information. Use the “Do Not Sell or Share My Personal Information” link in our footer.
Texas residents
Under the Texas Data Privacy and Security Act you may access, correct, delete, or obtain a copy of your personal data, and opt out of targeted advertising, sale, and certain profiling.
EU and UK residents
You have the rights above under the GDPR and UK GDPR, and may lodge a complaint with your national supervisory authority.
[Add or remove state sections to match where you actually operate. Do not list a law you have not implemented.]
12. International Transfers
Our servers are located in [COUNTRY]. If you access the Services from elsewhere, your information will be transferred to and processed in [COUNTRY], which may have different data protection laws.
Where required, we use appropriate safeguards such as Standard Contractual Clauses.
13. Third-Party Links
Our site links to other websites, including insurance providers and government agencies. We are not responsible for their privacy practices. Read their policies before providing information.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The revision date at the top will change. Material changes will be announced by email or a prominent notice on the site at least [X] days before they take effect.
15. Contact Us
Questions, requests, or complaints about this policy:
Email: privacy@wyliedrivingschool.com
Phone: [PHONE NUMBER]
Mail: Wylie Driving School
[FULL ADDRESS][If you serve the EU or UK, name your Data Protection Officer or EU/UK representative here.]
Implementation Notes
Related pages you also need
| Page | Why | Priority |
|---|---|---|
| Terms of Service | Required before you can take payment | 🔴 Critical |
| Refund Policy | Payment processors require a clear one | 🔴 Critical |
| Cookie Policy | Separate page if you serve EU/UK | 🟡 Important |
| Accessibility Statement | Reduces ADA exposure in the US | 🟡 Important |
| Do Not Sell or Share | Required for California residents | 🟡 Important |
Where to link it
- Footer, on every page
- Checkout, next to the pay button
- Registration form, beside the consent checkbox
- Any form that collects an email address
Technical setup
- Set the page to noindex? No — keep it indexed. Search engines treat a visible privacy policy as a trust signal.
- Add a cookie consent banner if you have any EU, UK, or California visitors. Free options: CookieYes, Complianz.
- Record consent — store the timestamp and policy version when a user agrees.
- Keep a changelog of every version. If a dispute arises you must be able to prove what the policy said on a given date.
- Make the email address in Section 15 a real, monitored inbox. An unanswered rights request is itself a violation.
Three things that most often go wrong
- Copying another school’s policy. It describes their vendors, their retention periods, and their jurisdictions. It is also copyrighted. Regulators have fined businesses for policies that did not match their actual practices.
- Listing laws you have not implemented. Claiming GDPR compliance without a lawful basis, a consent mechanism, and a rights workflow is worse than saying nothing.
- Ignoring the minors problem. Teen drivers ed puts you squarely in child-privacy territory. This is the section an attorney is genuinely worth paying for.