Privacy Policy
Last updated: 14 July 2026
Who we are
Lessonly (lessonly.io) is a scheduling platform built for driving instructors. We help instructors manage bookings and send WhatsApp reminders to students. We are the data controller for personal information collected through our platform.
Questions about this policy can be sent to lessonly.io@gmail.com.
What data we collect
We collect only what is needed to run the service:
- ·Instructors: email address, name, WhatsApp phone number, weekly availability, and lesson settings.
- ·Students: name and WhatsApp phone number, provided at the time of booking. Students do not create accounts.
- ·Bookings: date, time, and status of each lesson.
- ·Usage data: basic server logs (IP address, page requests) for security and debugging. These are not linked to individual profiles.
We do not collect payment card numbers directly — payments are handled by Stripe, which has its own privacy policy.
How we use your data
- ·To operate the platform: managing bookings, showing availability, and sending WhatsApp confirmations and reminders.
- ·To communicate with you about your account or bookings.
- ·To improve the service through aggregated, anonymous usage analysis.
We do not use your data for advertising. We do not sell your data to third parties.
WhatsApp messages
Lessonly sends WhatsApp messages via the Meta Business Platform (WhatsApp Cloud API). Your phone number is shared with Meta solely to deliver messages you or your instructor have requested (booking confirmations and reminders). Meta's own privacy policy governs how they handle this data.
Students opt in to WhatsApp contact by entering their number on the booking form. You can ask us to stop messaging you at any time by emailing lessonly.io@gmail.com.
Data storage and security
- ·Data is stored on servers within the UK/EEA using Vercel and Supabase, both of which are GDPR-compliant.
- ·All connections are encrypted in transit (TLS). Passwords are hashed and never stored in plain text.
- ·We retain booking and student data for as long as the instructor account is active, plus 90 days after cancellation.
Your rights (GDPR)
Under UK GDPR you have the right to:
- ·Access a copy of the personal data we hold about you.
- ·Rectify any inaccurate data.
- ·Erase your data (right to be forgotten).
- ·Port your data in a common format.
- ·Object to or restrict certain types of processing.
To exercise any of these rights, email us at lessonly.io@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Cookies
We use a single session cookie to keep you signed in as an instructor. We do not use advertising cookies or third-party tracking pixels. No cookie consent banner is needed beyond this disclosure.
Changes to this policy
We may update this policy as the product evolves. Material changes will be communicated by email to active users. The date at the top of this page always reflects the most recent version.