Privacy Policy

1. Who We Are

DriveBook Pty Ltd ("DriveBook", "we", "us") operates the DriveBook platform at drivebook.com.au. We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using DriveBook, you acknowledge and agree to this Privacy Policy and our Terms and Conditions.

Questions about this policy? Contact us at privacy@drivebook.com.au.

2. Information We Collect

Information you provide (Learners):

• Name, email address, and phone number
• Pickup address and lesson preferences
• Payment information (processed by Stripe — we do not store card numbers)
• Reviews and feedback you submit

Information you provide (Instructors):

• Name, email address, and phone number
• Base address, service radius, hourly rate, and vehicle type
• Driver's licence number and insurance number
• Compliance documents (WWCC, police check, vehicle registration, certifications) uploaded during onboarding
• Service areas, availability, and pricing
• Profile photo and vehicle images

Information collected automatically:

• IP address, browser type, and device information
• Pages visited, actions taken, and session data
• General geographic location derived from IP address (used to show relevant content)
• Referral URLs and advertisement interaction data
• Cookies and similar tracking technologies (see Section 5)

Where you provide information about a third party, you warrant that you have that person's consent to do so.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process bookings and payments
• Share booking details between matched Learners and Instructors (name, phone number, email, and pickup address) to facilitate lessons
• Send booking confirmations, reminders, and receipts via email and SMS
• Verify instructor credentials and qualifications
• Resolve disputes and provide customer support
• Improve the platform and detect fraud or illegal activity
• Comply with legal obligations
• Send marketing communications where you have consented (you may opt out at any time)

We do not sell your personal information to third parties.

4. Sharing Your Information

We share your information only as necessary to operate the platform:

• Between Learners and Instructors: When a booking is confirmed, the Learner's name, phone number, and pickup address are shared with the Instructor. The Instructor's name, phone number, and email are shared with the Learner.
• Stripe: Payment processing. We do not store or process credit card details directly. Stripe is PCI-DSS Level 1 certified. By using DriveBook, you also accept Stripe's Privacy Policy.
• Twilio: SMS delivery for booking notifications and reminders. SMS opt-in data and consent is not shared with any third party for marketing or promotional purposes.
• Google Maps API: Address lookup and location services. Only the address string is sent — no personal identifiers.
• Cloudinary: Profile and vehicle image storage.
• Law enforcement / regulators: Where required by law, court order, or to protect the safety of users or the public.

All third-party service providers are bound by confidentiality obligations and may only use your data to perform services on our behalf.

4.1 Third-Party Service Disclaimer

DriveBook integrates with third-party services including Stripe, Twilio, Google, and Cloudinary. While we take care in selecting reliable providers, DriveBook is not responsible for outages, security breaches, or data losses caused by these third-party services. We recommend reading their respective privacy policies before use.

4.2 International Data Transfers

Some of our third-party providers (including Stripe and Twilio) may process or store data outside Australia. Where this occurs, we take reasonable steps to ensure your data is handled in accordance with the APPs and applicable international standards. By using DriveBook, you consent to this transfer where necessary for service delivery.

5. Cookies

We use the following types of cookies:

• Necessary cookies: Authentication (keeping you logged in), security, and essential platform functionality.
• Preference cookies: Remembering your settings and preferences.
• Analytics cookies: Understanding how the platform is used to improve our services (e.g. Google Analytics). This data is aggregated and anonymised where possible.
• Advertising cookies: Serving relevant DriveBook ads on other platforms and measuring engagement.

You can control or disable cookies through your browser settings. Disabling necessary cookies may affect platform functionality. Some third parties (e.g. Google) may use their own cookies — we recommend reading their privacy policies.

6. Data Security

We take reasonable steps to protect your personal information from misuse, loss, and unauthorised access. Our measures include:

• HTTPS / SSL-TLS encryption for all data in transit
• Passwords stored using bcrypt hashing (never in plain text)
• Payment data handled exclusively by Stripe (PCI-DSS Level 1 certified — we do not store card numbers)
• Access controls limiting which staff can access personal data
• Regular security reviews and updates

6.1 Your Responsibilities

You are responsible for:

• Maintaining a strong, unique password for your account
• Not sharing your login credentials with others
• Enabling two-factor authentication (2FA) where available
• Reporting any suspected unauthorised access immediately to security@drivebook.com.au

No system is 100% secure. By providing us with your personal information, you acknowledge this inherent risk.

7. Data Retention

• Account data is retained while your account is active.
• Booking and transaction records are retained for 7 years for financial and legal compliance.
• If you close your account, personal data is deleted or anonymised within 30 days, except where retention is required by law (e.g. tax records, fraud prevention, or active disputes).
• Wallet credits expire after 365 days of account inactivity (see Wallet Terms in our Terms of Service).

8. SMS Communications

By providing your mobile number and creating an account, you consent to receive SMS messages from DriveBook for booking confirmations, reminders, and account notifications.

• Reply STOP to opt out of SMS at any time. Reply HELP for assistance.
• Message and data rates may apply.
• SMS messages are delivered via Twilio. SMS opt-in data and consent is not shared with any third party for marketing or promotional purposes. Twilio acts solely as a delivery provider.
• DriveBook's SMS practices comply with the Spam Act 2003 (Cth).

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or outdated information
• Request deletion of your account and personal data (subject to legal retention requirements)
• Opt out of marketing communications at any time

To exercise these rights, email privacy@drivebook.com.au. We will respond within 30 days.

10. Children's Privacy

DriveBook is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email of material changes. The updated policy will be posted on this page with a revised date. Continued use of DriveBook after an update constitutes acceptance of the revised policy.

12. Complaints

If you have a complaint about how we handle your personal information, contact us first at privacy@drivebook.com.au. We will respond within 30 days. If we cannot resolve your complaint, you may contact the Office of the Australian Information Commissioner (OAIC).

13. Governing Law

This Privacy Policy is governed by the laws of Western Australia. Any disputes are subject to the non-exclusive jurisdiction of the courts of Western Australia.

14. Contact