Privacy Policy

Onsiter Driving ("we", "us", "our") is committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains how we collect, use, disclose, and protect your personal information.

By using our website or booking a driving lesson, you agree to the collection and use of information in accordance with this policy.

We collect personal information that is necessary to provide our services, including:

• Your full name
• Email address
• Mobile phone number
• Pickup address
• Payment information (processed securely by Stripe — we do not store card details)
• Booking details including lesson type, date, time, and instructor

We may also collect technical information such as your IP address, browser type, and pages visited through standard web server logs and analytics tools. This information is used in aggregate and is not linked to your identity.

We collect personal information directly from you when you:

• Book a driving lesson through our website
• Contact us by email at hello@onsiter.com.au
• Communicate with us about your booking

We use your personal information to:

• Process and confirm your lesson booking
• Send booking confirmations and reminders via email and SMS
• Notify your instructor of your booking and pickup address
• Send a post-lesson review request to improve our services
• Respond to your enquiries
• Comply with our legal obligations

We will not use your personal information for direct marketing without your explicit consent, and we will not sell or rent your information to any third party.

We may share your personal information with:

• Stripe— our payment processor, for the purpose of completing your transaction securely. Stripe's privacy policy is available at stripe.com/au/privacy
• Your instructor — your name, phone number, and pickup address are shared with your instructor to facilitate your lesson
• Communication service providers — used to send SMS and email notifications related to your booking

We do not disclose your personal information to any other third parties unless required by law or with your consent.

Your personal information is stored securely using Supabase, a cloud database provider with servers located in Australia and the United States. We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, or disclosure.

Payment information is processed entirely by Stripe and is never stored on our servers. Stripe is PCI-DSS compliant.

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your data.

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. Booking records are retained for a minimum of 7 years in accordance with Australian tax and business record-keeping requirements.

Under the Privacy Act 1988 (Cth), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or outdated information
• Request deletion of your information where we are no longer required to retain it
• Complain about a breach of the Australian Privacy Principles

To exercise any of these rights, please contact us at hello@onsiter.com.au. We will respond to your request within 30 days.

Our website uses essential cookies only, including a session cookie for the admin booking log. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, though this may affect the functionality of certain pages.

Our website may contain links to third party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

If you believe we have breached the Australian Privacy Principles, please contact us at hello@onsiter.com.au in the first instance. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this privacy policy from time to time. Any changes will be published on this page with an updated "last updated" date. We encourage you to review this policy periodically.