Privacy Policy
Drive Smart Driving School · Last updated: September 2026 · Aligned with the Privacy Act 2020 (New Zealand)
1. Introduction
Drive Smart Driving School (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under New Zealand law.
This policy applies to all users of the DriveSmart Portal and our website at drivesmart.co.nz, and has been prepared in accordance with the Privacy Act 2020 (New Zealand).
2. Who We Are
Drive Smart Driving School is the agency responsible for your personal information, as defined under the Privacy Act 2020. We are based in Papakura, South Auckland, New Zealand and operate the DriveSmart Portal, a private, invitation-only platform for enrolled students and their instructors.
Business name: Drive Smart Driving School
Location: Papakura, Auckland, New Zealand
Website: drivesmart.co.nz
Privacy enquiries: Contact us
3. Acceptance of This Policy
Access to the DriveSmart Portal is by invitation only. When you are enrolled and provided with access to the portal by Drive Smart Driving School, you are deemed to have read and accepted this Privacy Policy as a condition of that access.
If you do not agree with any part of this policy, please contact us before using the portal so we can address your concerns.
4. Information We Collect
We only collect personal information that is necessary to provide our driving instruction services and to run our website. This includes:
4.1 Information you provide
a) Students: your full name, email address, and contact details provided at enrolment.
b) Instructors: your full name, email address, and professional details.
c) Contact form: your name, email address, phone number, and the subject and content of your message.
d) Quick booking form: your name, phone number, and the type of lesson you are interested in.
e) WhatsApp: if you message us on WhatsApp, your WhatsApp name, phone number, and the content of your messages, such as the lesson type and the date and time you would like. See section 11.
4.2 Information created through your use of the portal
a) Lesson records, including dates, times, and statuses.
b) Performance feedback and progress notes recorded by your instructor.
c) Messages sent between students and instructors through the portal.
4.3 Information collected automatically
a) Basic access information (such as your IP address) collected to keep the portal secure and prevent unauthorised access.
b) Session information to keep you logged in during your visit.
c) Website usage information collected by Google Analytics on our public website (not the portal): the pages you view, the website or search that referred you, the links and buttons you click, your device and browser type, and your approximate location (such as city or region). See section 10.
5. Why We Collect Your Information
In accordance with Information Privacy Principles 2 and 3 of the Privacy Act 2020, we will always tell you why we are collecting your information. We use your personal information for the following purposes:
5.1 Delivering our service: to manage your enrolment, schedule lessons, and provide driving instruction.
5.2 Communication: to send you login codes, lesson reminders, booking confirmations, and other service notices.
5.3 Progress tracking: to maintain records of your lessons and feedback to support your learning.
5.4 Security: to protect your account and the portal from unauthorised access.
5.5 Legal compliance: to meet our obligations under applicable New Zealand law.
5.6 Improving our website: to understand, in aggregate, how visitors use our public website, so we can improve its content and make it easier to book a lesson. We do not use this information to identify you or for advertising.
We will not use your personal information for any other purpose without your consent.
6. How We Protect Your Information
We take all reasonable steps to protect your personal information from loss, unauthorised access, use, modification, or disclosure, as required by Information Privacy Principle 5 of the Privacy Act 2020.
6.1 All data transmitted between your device and our servers is encrypted.
6.2 Access to the portal is secured, and we do not store passwords. Login is handled through secure one-time codes sent to your email.
6.3 Each school's data is kept strictly separate so that only authorised users within your school can access your information.
6.4 Access to personal information is limited to those who genuinely need it to deliver our service.
While we take robust steps to protect your information, no online system can guarantee absolute security. If you suspect any unauthorised access to your account, please contact us immediately.
7. How Long We Keep Your Information
We keep your personal information only for as long as it is needed for the purpose it was collected, or as required by law (Information Privacy Principle 9).
7.1 Active student records (profile, lessons, feedback) are kept for the duration of your enrolment and for a reasonable period afterwards for record-keeping purposes.
7.2 Login session information expires automatically after each session ends.
7.3 Security and access logs are retained for up to 12 months to support the investigation of any security incidents.
7.4 Website analytics data is kept by Google Analytics at the event level for no more than 14 months. After that, only aggregated statistics remain, which do not identify individual visitors.
7.5 When your information is no longer needed, it is securely deleted or de-identified.
8. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We only share it where necessary to operate our service, or where required by law (Information Privacy Principles 10 and 11).
8.1 Service providers
We use a small number of trusted third-party providers to help run the portal and our website:
a) Email delivery provider: used to send you login codes and service notices. Only your email address is shared for this purpose.
b) Database and hosting providers: your information is stored and served through reputable cloud infrastructure providers. These providers are contractually obligated to protect your data.
c) Website analytics provider: Google Analytics, used on our public website only (not the portal). See section 10.
d) Messaging provider: WhatsApp, if you choose to message us there. See section 11.
8.2 Legal disclosures
We may disclose your personal information if required to do so by law, a court order, or to prevent serious harm to you or others.
9. Overseas Storage and Disclosure
Some of our service providers store and process data in countries outside New Zealand. This includes Google Analytics, which we use on our public website (see section 10), and WhatsApp, if you message us there (see section 11). Where this occurs, we take reasonable steps to ensure those providers maintain privacy protections comparable to the Privacy Act 2020, in line with Information Privacy Principle 12.
By using our website or portal, you acknowledge that your information may be stored or processed outside New Zealand.
11. Messaging Us on WhatsApp
Our public website has a “Message us on WhatsApp” button. Using it is optional: you can also call us, or use our contact or quick booking form.
11.1 What happens when you use the button
The button opens WhatsApp with a message to us already written, asking for your name, the type of lesson you want, and your preferred date and time. Nothing is sent to us until you press send in WhatsApp, and you can change or delete any part of the message first.
11.2 What we receive
When you message us, we receive your WhatsApp profile name, your phone number, and anything you send us, such as messages, photos, or voice notes. Please only send what we need to arrange your lesson.
11.3 How we use it
We use it to reply to you and to arrange and deliver your lessons, as described in section 5. We will not use your WhatsApp number or messages for any other purpose without your consent.
11.4 WhatsApp and Meta
WhatsApp is run by WhatsApp LLC, part of Meta. Meta handles your WhatsApp account and messages under WhatsApp's own terms and privacy policy, which we do not control, and may process them outside New Zealand (see section 9). You can read WhatsApp's privacy policy at whatsapp.com/legal/privacy-policy.
11.5 Keeping your messages
Your conversation with us is kept in our WhatsApp account for only as long as we need it to arrange and deliver your lessons (see section 7). Deleting the chat on your own phone does not delete our copy. You can ask to see or correct what you have sent us in the same way as any other information we hold (see section 12).
11.6 Analytics
When you click the button, Google Analytics records that it was clicked and on which page, unless you have opted out (see section 10.2). It does not record your phone number or anything you write in WhatsApp.
12. Your Rights
Under the Privacy Act 2020, you have the right to:
12.1 Access your information
You may request a copy of the personal information we hold about you. We will respond within 20 working days, as required by the Privacy Act 2020. In some cases a reasonable fee may apply if the request requires significant effort to fulfil.
12.2 Correct your information
If you believe any information we hold about you is inaccurate, incomplete, or out of date, you may ask us to correct it. We will take reasonable steps to do so, or attach a note of your correction request if we disagree.
12.3 How to exercise your rights
To request access or correction, please contact us. We may need to verify your identity before we can respond.
12.4 Opt out of website analytics
You can stop Google Analytics from collecting information about your visits at any time, without affecting your use of our website or portal. Section 10.2 explains how.
13. Privacy Breaches
If a privacy breach occurs that poses a risk of serious harm, we are required under Part 6 of the Privacy Act 2020 to notify both the Office of the Privacy Commissioner and the affected individuals as soon as practicable.
We monitor for and investigate potential breaches and have procedures in place to contain, assess, and respond to any incidents promptly.
14. Privacy of Young People
Some of our students may be aged 16 or 17 (the minimum age for a New Zealand learner licence). We handle the personal information of young people with additional care. We recommend that parents or guardians of students under 18 review this Privacy Policy.
We do not knowingly collect personal information from anyone under 16 without the consent of a parent or guardian.
15. Privacy Complaints
If you believe we have not handled your personal information appropriately, you have the right to make a complaint.
15.1 Complain to us first
Please contact us in the first instance. We will acknowledge your complaint within 5 working days and aim to resolve it within 20 working days.
15.2 Office of the Privacy Commissioner
If you are not satisfied with our response, you may refer your complaint to the Office of the Privacy Commissioner (OPC):
Website: www.privacy.org.nz
Phone: 0800 803 909
Post: PO Box 10094, Wellington 6143, New Zealand
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. Where changes are significant, we will notify you by email or through a notice on the portal.
Continued use of the portal after an update constitutes acceptance of the revised policy.
17. Contact Us
For any questions or requests relating to this Privacy Policy or your personal information, please get in touch:
Drive Smart Driving School
Location: Papakura, Auckland, New Zealand
Contact: drivesmart.co.nz/contact
This Privacy Policy is prepared in accordance with the Privacy Act 2020 (New Zealand) and the 13 Information Privacy Principles contained within it. For more information about your privacy rights in New Zealand, visit www.privacy.org.nz.