Legal

Privacy policy

Last updated: October 27, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Who we are

Lesson Diary is a trading name of CROWN STUDENT CONSULTANCY (CSC) UK LTD, a company registered in England and Wales (company number 14324057), whose registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC265399. We are the controller of the personal data described in this policy, except where We act as a processor for an instructor (see "Pupils" below).

This policy reflects Our obligations under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025, as amended or replaced from time to time. We do not make solely automated decisions that produce legal or similarly significant effects about You.

For any question about this policy, or to exercise Your rights, email support@lessondiary.co.uk. If You are not satisfied with Our response, You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We ask that You raise any concern with Us first so that We can try to resolve it.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.

  • Application refers to Lesson Diary, the software program provided by the Company.

  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to CROWN STUDENT CONSULTANCY (CSC) UK LTD, trading as Lesson Diary.

  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

  • Country refers to: United Kingdom

  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.

  • Personal Data is any information that relates to an identified or identifiable individual.

  • Service refers to the Application or the Website or both.

  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

  • Website refers to Lesson Diary, accessible from https://lessondiary.co.uk/

  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address

  • First name and last name

  • Phone number

  • Address and postcode

  • Location data, only when You choose to record a lesson route in the mobile application (see below)

  • Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Information Collected while Using the Application

While using Our Application, in order to provide features of Our Application, We may ask for Your prior permission to access:

  • Your device calendar. If You grant calendar access, We create a dedicated calendar on Your device and write Your booked lessons to it, so they appear alongside Your other events. We do not read or collect any other events already on Your device's calendar.
  • Your camera. If You grant camera access, You can take a photo of a receipt to add to an expense. The camera is used only while You take that photo, and We receive only the photo You keep.
  • Your photos. If You grant photo library access, You can choose a picture to add to Your booking page or a receipt to add to an expense. We only receive the pictures You choose. A receipt photo is resized and its embedded data, including any location, is removed before it is stored.
  • Push notifications. If You grant notification permission, We send You reminders about upcoming lessons and other account-related alerts. We do not use this permission to collect data from Your device.
  • Your device location, to record lesson routes. If You choose to record the route of a lesson, the Application uses Your Device's location from the moment You tap "Start drive" until You tap "End drive", including while the Application is in the background or Your Device is locked. If You pause the drive, location is not read until You resume it. To do this it needs Your location permission set to "Always" (on iOS) or background location access (on Android). We do not collect Your location at any other time, and We do not track You between lessons.

We do not access or collect Your device's location unless You are recording a lesson route in this way.

What We do with a lesson route

A recorded route is saved against that lesson in Your Account, together with its distance and duration. You can add notes to it, name it, and delete it at any time. If You have chosen to log mileage automatically, the distance is also added to Your Money records.

To draw the route on a map and snap it to the road, the coordinates of the route are sent to Our mapping provider, Mapbox. We do not use location data for advertising and We do not sell it.

By default, the pupil the lesson was for can see a map of that lesson's route, its distance and its name in their pupil portal. They cannot see Your notes on the route. You can switch this off for all lessons in Your ADI details settings, or for a single lesson on the lesson itself.

You can enable or disable access to Your calendar, notifications or location at any time, through Your Device settings. Turning location off stops any route being recorded.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We use both Session and Persistent Cookies for the purposes set out below:

  • Necessary / Essential Cookies

    Type: Session Cookies

    Administered by: Us

    Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.

  • Cookies Policy / Notice Acceptance Cookies

    Type: Persistent Cookies

    Administered by: Us

    Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

  • Functionality Cookies

    Type: Persistent Cookies

    Administered by: Us

    Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

  • Analytics Cookies

    Type: Persistent Cookies

    Administered by: Third-Party (Mixpanel)

    Purpose: We use Mixpanel to understand how You use the Service, including which features You interact with, pages You visit, and actions You take (such as creating a lesson or subscribing to a plan). We also use Mixpanel's session recording feature to review how the Website is used so we can identify and fix usability issues; recordings capture interactions such as clicks and navigation, not the content You enter. This data is collected both through Your browser and from Our servers as part of the normal operation of the Service, and is used to improve the product and understand customer engagement. It is not sold to third parties.

For more information about the cookies we use and your choices, see our Cookie policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service.

  • To manage Your Account: to manage Your registration as a user of the Service. The Personal Data You provide can give You access to different functionalities of the Service that are available to You as a registered user.

  • For the performance of a contract: the development, compliance and undertaking of the purchase contract for the products, items or services You have purchased or of any other contract with Us through the Service.

  • To contact You: To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication, such as a mobile application's push notifications regarding updates or informative communications related to the functionalities, products or contracted services, including the security updates, when necessary or reasonable for their implementation.

  • To provide You with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about unless You have opted not to receive such information.

  • To record lesson routes: To record, show and share the routes of Your lessons where You choose to use that feature, and to log mileage where You have switched that on.

  • To keep Your receipts: To store the receipt photos and files You add to Your expenses in private storage, show them only to You, and include them in the records You download. A receipt is deleted when You remove it or delete its expense.

  • To manage Your requests: To attend and manage Your requests to Us.

  • For service administration, support and security: authorised Company personnel may access Your account and information, including by viewing or operating the Service in the context of Your account, where reasonably necessary to provide support, troubleshoot and diagnose technical issues, administer and maintain the Service, investigate suspected fraud, misuse or abuse, investigate or respond to security incidents, protect the security and integrity of the Service, or comply with legal or regulatory obligations.

  • For business transfers: We may use Your information to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by Us about our Service users is among the assets transferred.

  • For other purposes: We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.

We may share Your personal information in the following situations:

  • With Service Providers: We share Personal Data with Service Providers who process it on Our behalf to run the Service. These fall into the following categories: hosting and infrastructure, payment processing (Stripe), email delivery, push notifications, maps and address lookup, product analytics (Mixpanel), website analytics and advertising measurement (only where You have accepted analytics cookies), error and performance monitoring, spam filtering, and customer feedback tools.
  • For debt recovery: where amounts owed to Us are overdue, We may share Your contact and debt details with debt collection agencies, credit reference agencies and professional advisers, and may contact You by email, telephone or post, in order to recover the debt.
  • For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With other users: when You share personal information or otherwise interact in the public areas with other users, such information may be viewed by all users and may be publicly distributed outside.
  • With Your consent: We may disclose Your personal information for any other purpose with Your consent.

Lawful Basis for Processing

We process Your Personal Data on the following bases under UK data protection law:

  • Contract: to create and run Your Account and provide the Service You have signed up for.
  • Legitimate interests: to keep the Service secure, prevent fraud and spam, provide support, recover amounts owed to Us, and understand how the Service is used so We can improve it.
  • Consent: for analytics cookies and marketing emails, and for using Your Device's location to record a lesson route, which You give by allowing location access and tapping "Start drive". You can withdraw consent at any time through the cookie banner, the unsubscribe link in any marketing email, or Your Device's location settings.
  • Legal obligation: where We must keep or disclose information by law, such as financial records.

Retention of Your Personal Data

We keep Your Account data while Your Account exists. We may delete an Account that has no active subscription and has not been used for 90 days. We usually email You before We do. You can delete Your Account at any time in Your account settings, or ask Us to delete it by emailing support@lessondiary.co.uk.

A recorded lesson route is kept with its lesson until You delete the route, the lesson or Your Account.

Records of payments and invoices are kept for 6 years after the end of the tax year they relate to, as required for tax purposes.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Where We transfer Personal Data to a country outside the United Kingdom that is not the subject of UK adequacy regulations, We put in place an appropriate safeguard for the transfer, such as the UK International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's standard contractual clauses, or another mechanism permitted under UK data protection law.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy, and that adequate safeguards are in place before any transfer of Your Personal Data to a country outside the United Kingdom.

Your Rights

You have the right to access the Personal Data We hold about You, to have it corrected, deleted or restricted, to object to Our processing of it, and to receive a copy of it in a portable format. To exercise any of these rights, email support@lessondiary.co.uk. Where We rely on Your consent, You may withdraw it at any time; this does not affect processing carried out before You withdrew it. You can also complain to the ICO (see "Who we are" above).

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service.

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Administrative and Support Access

Access to Your account by Company personnel is restricted to authorised personnel and is permitted only for the operational, support, security, fraud-prevention and legal-compliance purposes described in this Privacy Policy. It is not an unrestricted right to access accounts for any reason.

Administrative and support access sessions may be logged — including the identity of the personnel involved, the account accessed and the time of access — for security, auditing and accountability purposes. Company personnel do not have access to Your account password.

Payments

Where You use the Service to take payments from Your pupils or customers, or to pay for a subscription, payment processing is provided by Stripe. Stripe processes payment card and related personal data under its own terms and privacy policy (https://stripe.com/privacy). Payments from Your pupils are made to Your own connected Stripe account. The Company does not receive or store full payment card details.

Pupils

If You are a pupil of a driving instructor who uses Lesson Diary, including when You use the pupil portal or an online booking page, Your instructor decides what information about You is recorded and how it is used. Your instructor is the controller of that data and Lesson Diary is a processor acting on their instructions. This includes the route of a lesson if Your instructor records it: You may see a map of it in the pupil portal, and it shows where Your lesson started and finished. Lesson Diary does not record Your own location, only the location of Your instructor's device while they record a lesson route. For any request about Your data, such as access, correction or deletion, please contact Your instructor first. If You cannot reach them, email support@lessondiary.co.uk and We will pass Your request on and help where We can.

Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers.

If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: