Last updated: June 2026. Leader Driving School, lider.school.
1General provisions
This Privacy Policy describes how Leader Driving School (the «Administrator») collects, processes and protects personal data of users of lider.school and related services. By submitting a request form you confirm you have read this Policy and consent to processing your personal data as described herein.
2Data controller
The data controller is the business entity «Leader Driving School», providing driver preparation and retraining services. Personal data is processed in accordance with Ukrainian law, including the Law of Ukraine «On Personal Data Protection» (No. 2297-VI of 01.06.2010). Privacy contact: [email protected].
3What data we collect
To deliver services and respond to enquiries we may collect the following categories of data:
- Contact details: name, phone number, email address (optional)
- Request data: city, chosen branch, licence category, contact method, message
- Documents: scans or photos of ID/passport, tax code, medical certificate — only at your initiative
- Telegram: username and start parameter
- Technical data: hashed IP address, User-Agent, UTM parameters, referral source, device type
4Purpose of processing
Your personal data is processed exclusively for these purposes:
- Responding to your enquiry and providing initial consultation
- Enrolling you at your chosen branch and confirming your group
- Reviewing and processing submitted documents
- Communicating about your application status
- Improving site quality using aggregate analytics
- Protecting against spam, abuse and unauthorised access
5Legal basis for processing
Processing of personal data is carried out on the following legal grounds:
- Consent — confirmed by checkbox when submitting a request form
- Performance of a request — to provide consultation or enrolment
- Legitimate interests — service security and protection against abuse
- Ukrainian legal requirements — where required by applicable law
6Storage of documents and files
Files uploaded through the request form are stored in Firebase Storage (Google Cloud) at path lead-documents/{leadId}. Access is restricted to authorised school managers only. Public reading is disabled at the Firebase Storage rules level. Direct download links are not generated or shared with third parties without your request.
7Sharing with third parties
We do not sell or share personal data with third parties for commercial purposes. Technical processors engaged to operate the service:
- Firebase / Google Cloud — request and document file storage
- Vercel — website hosting
- Telegram API — manager notifications for new requests
- Resend / SMTP provider — email notifications
- Google Analytics 4 — aggregate site analytics
- Meta Pixel / TikTok Pixel — advertising analytics (when enabled)
- OpenAI — AI assistant processing (no personal data stored by OpenAI)
8Data security
We implement reasonable organisational and technical measures to protect your personal data:
- IP addresses are stored in hashed form only — recovery is not possible
- Access to leads is role-restricted (admin / manager) via Firebase Auth custom claims
- Documents are protected by Firebase Storage rules with no public read access
- Connections to the site and API are secured by HTTPS
- Keys and passwords are stored via environment variables, not in source code
9Your rights
Under the Law of Ukraine «On Personal Data Protection» you have the right to:
- Know what data we hold about you and how it is used
- Request correction of inaccurate or outdated data
- Withdraw consent at any time (without affecting prior lawful processing)
- Request deletion of your personal data
- Receive a copy of your data in a structured format
10Cookies and analytics
The site may use cookies and analytics tools:
- Technical (session) cookies — for correct operation of forms and navigation
- Google Analytics 4 — aggregate visit statistics without passing personal data
- Meta Pixel / TikTok Pixel — behavioural analytics (when enabled)
11Retention periods
Personal data is not retained longer than necessary for the processing purpose:
- Applications (leads) — up to 2 years or until deleted on request
- Uploaded documents — until training completion + 6 months, or deleted on request
- Analytics data — per platform settings (typically 26 months for GA4)
- Audit records — in accordance with internal security requirements
12Changes to this Policy
We may update this Policy without prior notice. The current version is always available at /privacy. Continued use of the site after changes constitutes acceptance of the updated Policy. We recommend reviewing this page periodically.
13Contact
For all privacy and personal data enquiries: [email protected] (subject: «Personal Data — Request»). We respond during business hours (Mon–Sat 09:00–18:00).