Privacy and Data Requests

• Access
• Correction
• Deletion
• Restriction
• Objection
• Portability or export
• Withdraw consent
• Complaint or concern
• Other

Privacy requests are currently handled through support@drivefino.com. The link prepares fields for request type, name, contact and account emails, requester type, country, relevant instructor/business and a description.

Prepare privacy-request email

Do not email passwords, payment-card data, medical records, unnecessary student information or full identity-document scans. If stronger identity evidence is necessary, Drivefino should arrange a proportionate secure method.

Drivefino acts as controller for account, billing, support, security and website data and will handle verified requests for those records. The product has no complete self-service export or erasure workflow, so requests are handled manually under an approved procedure.

The relevant instructor is generally controller of instructor-managed student records. Students should normally contact that instructor. Drivefino may route the request to the instructor and assist with verified instructions. Parents/guardians may be asked to show their relationship and authority proportionately.

A representative should identify the person represented and provide evidence of authority. Drivefino may also confirm the request directly with that person where lawful and appropriate.

Drivefino may ask for information necessary to confirm identity, authority, account and scope. Requests are normally free. A fee or refusal is possible only where applicable law permits it, such as for manifestly unfounded or excessive requests.

Under GDPR/UK GDPR, the normal period is generally one month after receipt/required verification, with a possible extension for complex or multiple requests and notice of the extension. Canadian and other rules can differ. Drivefino will apply the legally required period; counsel must confirm the operating procedure for each launch jurisdiction.

Deletion may not remove records that must be retained for accounting, legal claims, security or another lawful reason. Archive or soft deletion is not erasure. Removal from active systems may not immediately remove protected backup copies, which remain until they expire through the applicable backup cycle.

You can raise a concern with Drivefino and complain to the relevant supervisory authority, including an EU/EEA authority, Ireland’s Data Protection Commission, the UK ICO, or the applicable Canadian federal/provincial authority. See the Privacy Policy and Contact.