Privacy
Your data, and what we do with it.
This is Steero’s interim privacy notice. It describes the personal data we actually handle today and the choices you have over it. We review and update this notice as the business grows.
Who we are
STEERO is a driving-instructor booking and payments platform operating in the United Kingdom. It is operated by WHD Ltd, a company registered in England and Wales (company number 16727626) with its registered office at 45 Sutherland Grove, London, SW18 5QP, trading as Steero, which is the data controller for the information described here. WHD Ltd is registered with the Information Commissioner’s Office (ICO), registration reference C1993436. You can reach us about anything in this notice at privacy@steero.co.uk.
What we collect
- Instructor details: your name, contact details, DVSA badge number (ADI or PDI) and payout bank details.
- Pupil details: name, contact details, lessons booked, and for under-18s the consenting guardian’s details.
- Booking and payment records: lesson times, prices, fees, refunds and payouts.
- Basic usage data needed to run and secure the service.
Card details
We do not store full card numbers. Card payments are handled by Stripe, a regulated payment processor; STEERO holds only a secure token that lets us charge the card on file under the policy you set.
Why we hold it
To verify your DVSA instructor registration, take and pay out lesson payments, enforce cancellation policies, meet safeguarding duties for young pupils, and produce the HMRC-ready records you can export. We do not sell your data or your pupils’ data.
Who we share it with
We only share personal data with the service providers we need to run STEERO, and only for that purpose. These include Stripe for card payments and payouts, and the providers who host our secure database, send booking emails, and send text notifications. Each is bound to protect your data and use it only on our instructions. We do not sell data or share it for advertising.
Sending data outside the UK
Some of our service providers may process data outside the United Kingdom. Where they do, we rely on the safeguards UK data protection law requires, such as approved data transfer terms, so your data keeps the same protection.
Safeguarding data for under-18s
Where a pupil is under 18, we record verified guardian consent and mask direct contact details between instructor and pupil. This information is used only for safeguarding and delivering lessons.
How long we keep it
We keep booking, payment and payout records for at least six years, because tax and accounting law requires it. Other personal data is kept only while it is needed to run your account, and is removed when you close your account, unless the law requires us to keep it for longer.
Your rights
Under UK GDPR you can ask to see the data we hold about you, correct it, export it, or have it deleted where we are not required to keep it. You can export your records yourself at any time from settings, and closing your account removes data we are not legally obliged to retain.
Complaints
If you have a concern about how we handle your data, please contact us first at privacy@steero.co.uk and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.