Privacy Policy – DoopL Apps

In this Policy:

• “Account” means a registered account on the Platform.
• “Us” or “DoopL” refers to DOOPL PTY LTD ACN 676 797 943 trading as DoopL.
• “Terms” or “Terms and Conditions” refer to each of the Learner and the Driving Instructor terms, or such of them as apply in the specific circumstance, and which are available on our website.
• “On Demand Bookings” refers to driving lesson bookings made by Learners through the app for immediate or near-immediate scheduling, subject to the availability of a Driving Instructor.
• “Platform” means the DoopL application, as available on iOS and Android platforms, and the website at https://www.doopl.com, and any other domain registered by DoopL from time to time.

1.    This Privacy Policy explains ourpractices relating to the collection, use and disclosure of information,including personal information which we may collect.

2.    We are committed to ensuring thatyour information is stored, shared and accessed safely and responsibly. We arecommitted to complying with applicable Privacy Laws, and take the issue ofprivacy seriously.

3.    This Privacy Policy forms part ofour Terms and Conditions, and agreement to those Terms and Conditions isconsidered acknowledgement of this Policy.

4.    You may contact us at any time fordetails regarding this policy -  if youhave any questions concerning your account or your personal information pleasesend us a support request at support@doopl.com.

Collection of Information - From Learner Drivers

5. We collect the personal information of Learner Drivers which are provided to us including your:a. Name;
   b. Date of Birth;
   c. Pickup address;
   d. Billing address (which is stored through Stripe and not through the DoopL server);
   e. Email address;
   f. Location details;
   g. Details of bookings made by you;
   h. Any additional information you provide to us through use of our website, submitting an enquiry via email, or via telephone with one of our representatives;
   i. Telephone number;
   j. Drivers Licence number, and an image thereof (noting that image will also contain personal information, including licence number and residential address).
6. We may pass these details on to Driving Instructors for the purpose of delivering driving lessons and contacting you with regard to proposed or scheduled driving lessons.

Collection of Personal Information from Driving Instructors

7. We collect the personal information of Driving Instructors, or persons applying to hold a Driving Instructor account on our Platform, including your:a. Name;
   b. Date of Birth;
   c. Billing address (which is stored through Stripe and not through the DoopL server);
   d. Email address;
   e. Telephone number;
   f. Driver's Licence details;
   g. Driving Instructor’s Licence details;
   h. WWCC numbers; and
   i. Vehicle Registration Number and Vehicle details.
8. We may pass on details to Learner Drivers for the purpose of undertaking driving lessons including but not limited to a Driving Instructor's name, email address and telephone number, and vehicle description/registration details.

How We Collect Your Personal Information

9. Personal Information is collected in a number of ways including through:a. Creating an account on our Platform, including the website and/or the App, or applying to create an account on our Platform;
   b. Updating an account on our Platform;
   c. Facilitating On-Demand Bookings;
   d. Contacting us via our website;
   e. Making an enquiry with us;
   f. Submitting a review for publication on the Platform; and
   g. Signing up to receive newsletters or similar.
10. Personal information is also collected when:a. We receive the results of any criminal checks or interactions with law or regulatory enforcement;
    b. We receive performance or conduct feedback;
    c. We receive any complaint from or about you in your interaction with us or any Learner or Driving Instructor.
11. When you provide us information about a third party, you warrant that you have the consent of that third party before providing us with that information. If you are providing information about a minor, for example, to schedule a driving lesson for your child, you authorise you are entitled to provide that information on behalf of the minor.
12. Our website and mobile application are not directed at minors and we cannot distinguish the age of persons who access and use these. If a minor has provided us with personal data without parental or guardian consent, the parent or guardian should contact us. If we become aware that personal data has been collected from a minor without parental or guardian consent, we will terminate the minor’s account, where that minor has an account with us.
13. We may also gather information from both online and offline data providers which could include internet browsing behaviour, demographic data or interest-based data.
14. We do not collect and we are not responsible for the collection or security of payment details. Payment information is processed and stored using a third-party company: This company can be contacted at info@stripe.com. We do not store this information.
15. When you browse our website, we may automatically collect your computer’s IP address to help us understand your browser and operating system. We may also gather information such as device IDs, connection details, software data, page view statistics, advertisement interactions, referral URLs, and other IP-related data. This helps us determine your general location so we can provide you with relevant, location-specific content.

Why We Collect This Information

16. The personal information you provide will be used to:
    a. Facilitate the provision of driving lessons in accordance with our Terms, including sharing information between Driving Instructors and Learner Drivers or parties scheduling driving lessons on behalf of Learner Drivers;
    b. to Schedule bookings for driving lessons;
    c. to Provide geographic location details to enable collection for driving lessons;
    d. to Provide contact details, such that Learners and Driving Instructors may contact each other concerning Driving Lessons;
    e. to Investigate and respond to complaints or similar;
    f. to Publish information about available drivers on the Platform;
    g. to Verify your entitlement to drive, either as a Learner or a Driving Instructor;
    h. to Investigate/act upon any breach or suspected breach of our Terms; and
    i. to Provide offers, information and our Platform to you.

Your Access to Information

17. You have the right to inspect, access or alter your personal information. We will delete your personal information on request, subject to any legal record-keeping requirements and similar.
18. Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy.

Disclosure

19. We may collect, hold, use and disclose your information for purposes which are within reasonable expectations or where permitted by law, enforce applicable terms of use or protect against infringements to the rights, property of DoopL, our other Customers and the public.
20. We may share your information with other companies, employees, or independent contractors of DoopL for purposes such as customer support, service improvement, development, processing, storage, and providing access to our products.
21. We may disclose feedback from Learner Drivers to Driving Instructors, or vice versa.
22. We may disclose personal information collected for purposes which are incidental to the sale and promotion of our Products to you.
23. We work with other companies, contractors, and agents to provide services such as delivery, marketing, communications, legal support, debt collection, administration, customer service, IT services, and payment processing. These third parties may be located within or outside Australia.

Data Storage

24. Your data is stored through the www.DoopL.com.au data storage and databases.
25. Stripe stores any information relating to payments. We do not store this information.
26. In cases where we use cloud computing services we will take reasonable steps to ensure that:
    a. Disclosure of your personal information to the cloud service provider is consistent with our disclosure obligations under the Australian law. This may include ensuring that we have obtained your consent, or that the disclosure is for purposes within your reasonable expectations.
    b. Disclosure is consistent with any other legal obligations that apply; and
    c. Our cloud computing services provider’s terms of service recognise that we are bound by obligations to protect the privacy of your personal information and that they will not do anything that would cause us to breach those obligations.

Payment

27. If you choose a direct payment gateway to complete your purchase, Stripe stores your credit card data, which is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is only stored for as long as necessary to complete the purchase and is then deleted. All direct payment gateways follow PCI-DSS standards, which are managed by the PCI Security Standards Council, a collaboration between major payment brands like Visa, MasterCard, American Express, and Discover. We will only use payment gateways that comply with this standard.

Third-Party Services

28. The third-party providers we use will only collect, use, and disclose your information as needed to perform their services for us. However, certain providers, such as payment gateways (including Stripe) and transaction processors, have their own privacy policies governing the information we provide for purchase-related transactions. We recommend reviewing their privacy policies to understand how your personal data will be handled. Some providers may be located outside Australia, meaning your information could be subject to the laws of those jurisdictions. Once you leave our website or are redirected to a third-party site or application, our Privacy Policy and Terms of Service no longer apply.

Third-Party Websites

29. When you click on links on our website, they may direct you away from our site.
30. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements and terms and conditions prior to finalising any transaction.

Security

31. We take reasonable precautions and follow industry best practices to protect personal information from being lost, misused, accessed, disclosed, altered, or destroyed.
32. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements as apply to us and implement additional generally accepted industry standards. In particular, we may use:
    a. Data encryption;
    b. Access control and authentication, including role-based active control and multi-factor authentication to restrict data access;
    c. Database integrity constraints - we implement referential integrity, unique constraints, and validation rules in our database to prevent duplicate or inconsistent entries;
    d. API Security;
    e. Data validation and sanitization; and
    f. Other security measures as determined by us from time to time.
33. We will use our best endeavours to ensure the safety of your personal information. However, we cannot guarantee that our systems will not be compromised or interfered with by any third party. You acknowledge that by providing us with your personal information you do so at your own risk. You agree that, to the extent permitted by law, you will not hold us liable for any loss or damage caused by or contributed to by any interference with our Platform.

Marketing

34. We reserve the right to use remarketing with google analytics to advertise online.
35. Should we elect to use this service, then third-party vendors, including Google, may show you our ads on sites across the internet.
36. DoopL and third-party vendors, including Google use first-party cookies (such as the Google Analytics cookie) and third-party cookies together to inform, optimize, and serve ads based on users past visits to our website and to report how ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to visits to this site.

Changes To This Privacy Policy

37. We reserve the right to modify this privacy policy at any time so please review it frequently. Notification of updates may be provided to Users.
38. Changes and clarifications will take effect immediately upon their posting on the website.
39. If our Platform is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products to you.

Questions and Contact Information

40. If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information please send us a support request at privacy@doopl.com.