DoopL Apps Privacy Policy

1. Definitions

In this Policy:

• “Account” means a registered account on the Platform.
• “Us” or “DoopL” refers to DOOPL PTY LTD ACN 676 797 943 trading as DoopL.
• “Terms” or “Terms and Conditions” refer to each of the Learner and the Driving Instructor terms, or such of them as apply in the specific circumstance, and which are available on our website.
• “On Demand Bookings” refers to driving lesson bookings made by Learners through the app for immediate or near-immediate scheduling, subject to the availability of a Driving Instructor.
• “Platform” means the DoopL mobile application and the website at www.doopl.com, and any other domain registered by DoopL from time to time.

2. Introduction

This Privacy Policy explains our practices relating to the collection, use and disclosure of information, including personal information which we may collect.

We are committed to ensuring that your information is stored, shared and accessed safely and responsibly. We are committed to complying with applicable Privacy Laws, and take the issue of privacy seriously.

This Privacy Policy forms part of our Terms and Conditions, and agreement to those Terms and Conditions is considered acknowledgement of this Policy.

You may contact us at any time for details regarding this Policy. If you have any questions concerning your account or your personal information please send us a support request at support@doopl.com.

3. Collection of Information – Dooplers (Drivers)

We collect the personal information of Dooplers (drivers, including learners, Red Ps, Green Ps, full licence holders and overseas licence holders) that is provided to us, including your:

• name
• date of birth
• pickup address
• billing address (which is stored through Stripe and not through the DoopL server)
• email address
• location details
• details of bookings made by you
• any additional information you provide to us through use of our website, through submitting an enquiry via email, or via telephone with one of our representatives
• telephone number
• driver’s licence number, and an image thereof (noting that image will also contain personal information, including licence number and residential address)

We may pass these details on to Driving Instructors for the purpose of delivering driving lessons and contacting you with regard to proposed or scheduled driving lessons.

4. Collection of Personal Information – Driving Instructors

We collect the personal information of Driving Instructors, or persons applying to hold a Driving Instructor account on our Platform, including your:

• name
• date of birth
• billing address (which is stored through Stripe and not through the DoopL server)
• email address
• telephone number
• driver’s licence details
• Driving Instructor’s licence details
• WWCC numbers
• vehicle registration number and vehicle details
• location data, but only when and as required to:
  • match Learners with nearby drivers; and
  • to show drivers’ location, such that Learners may track their arrival.

We may pass on details to Learner Drivers for the purpose of undertaking driving lessons including but not limited to a Driving Instructor’s name, email address and telephone number, and vehicle description/registration details.

5. How We Collect Your Personal Information

Personal information is collected in a number of ways including through:

• creating an account on our Platform, including the website and/or the app, or applying to create an account on our Platform
• updating an account on our Platform
• facilitating On-Demand Bookings
• contacting us via our website
• making an enquiry with us
• submitting a review for publication on the Platform
• signing up to receive newsletters or similar

Personal information is also collected when:

• we receive the results of any criminal checks or interactions with law or regulation enforcement
• we receive performance or conduct feedback
• we receive any complaint from or about you in your interaction with us or any Learner or Driving Instructor

Providing information about others and minors

When you provide us information about a third party, you warrant that you have the consent of that third party before providing us with that information. If you are providing information about a minor, for example, to schedule a driving lesson for your child, you warrant that you are entitled to provide that information on behalf of the minor.

Our website and mobile application are not directed at minors and we cannot distinguish the age of persons who access and use these. If a minor has provided us with personal data without parental or guardian consent, the parent or guardian should contact us. If we become aware that personal data has been collected from a minor without parental or guardian consent, we will terminate the minor’s account, where that minor has an account with us.

We may also gather information from both online and offline data providers which could include internet browsing behaviour, demographic data or interest-based data.

Payment details

We do not collect and we are not responsible for the collection or security of payment details. Payment information is processed and stored using a third-party company. This company can be contacted at support@stripe.com. We do not store this information.

When you browse our website, we may automatically collect your computer’s IP address to help us understand your browser and operating system. We may also gather information such as device IDs, connection details, software data, page view statistics, advertisement interactions, referral URLs, and other IP-related data. This helps us determine your general location so we can provide you with relevant, location-specific content.

6. Why We Collect This Information

We will use our best endeavours to only collect such data from you as is reasonably necessary for our records or to ensure functionality of the Platform or for any other purpose specified in this Policy. The personal information you provide will be used to:

• facilitate the provision of driving lessons in accordance with our Terms, including sharing information between Driving Instructors and Learner Drivers or parties scheduling driving lessons on behalf of Learner Drivers
• schedule bookings for driving lessons
• provide geographic location details to enable collection for driving lessons
• provide contact details, such that Learners and Driving Instructors may contact each other concerning driving lessons
• investigate and respond to complaints or similar
• publish information about available drivers on the Platform
• verify your entitlement to drive, either as a Learner or a Driving Instructor
• investigate or act upon any breach or suspected breach of our Terms
• provide offers, information and our Platform to you

7. Your Access to Information

You have the right to inspect, access or alter your personal information. We will delete your personal information on request, subject to any legal record keeping requirements and similar.

Your personal information will not be shared, sold, rented or disclosed other than as described in this Privacy Policy.

8. Disclosure

We may collect, hold, use and disclose your information for purposes which are within reasonable expectations or where permitted by law, enforce applicable terms of use or protect against infringements to the rights, property of DoopL, our other customers and the public.

We may share your information with other companies, employees, or independent contractors of DoopL for purposes such as customer support, service improvement, development, processing, storage, and providing access to our products.

We may disclose feedback from Learner Drivers to Driving Instructors, or vice versa.

We may disclose personal information collected for purposes which are incidental to the sale and promotion of our products to you.

We work with other companies, contractors, and agents to provide services such as delivery, marketing, communications, legal support, debt collection, administration, customer service, IT services, and payment processing. These third parties may be located within or outside Australia.

9. Data Storage

Your data is stored through the www.doopl.com data storage and databases.

Stripe stores any information relating to payments. We do not store this information.

Cloud services

In cases where we use cloud computing services we will take reasonable steps to ensure that:

• disclosure of your personal information to the cloud service provider is consistent with our disclosure obligations under Australian law. This may include ensuring that we have obtained your consent, or that the disclosure is for purposes within your reasonable expectations
• disclosure is consistent with any other legal obligations that apply
• our cloud computing services provider’s terms of service recognise that we are bound by obligations to protect the privacy of your personal information and that they will not do anything that would cause us to breach those obligations

10. Payment

If you choose a direct payment gateway to complete your purchase, Stripe stores your credit card data, which is encrypted in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Your transaction data is only stored for as long as necessary to complete the purchase and is then deleted.

All direct payment gateways follow PCI-DSS standards, which are managed by the PCI Security Standards Council, a collaboration between major payment brands like Visa, MasterCard, American Express, and Discover. We will only use payment gateways that comply with this standard.

11. Third-Party Services

The third-party providers we use will only collect, use, and disclose your information as needed to perform their services for us. However, certain providers, such as payment gateways (including Stripe) and transaction processors, have their own privacy policies governing the information we provide for purchase-related transactions.

We recommend reviewing their privacy policies to understand how your personal data will be handled. Some providers may be located outside Australia, meaning your information could be subject to the laws of those jurisdictions.

Once you leave our website or are redirected to a third-party site or application, our Privacy Policy and Terms of Service no longer apply.

12. Google Calendar Sync (DoopL Instructors Only)

Scope: Calendar sync is available only to verified Driving Instructors who enable it voluntarily.

Data accessed:DoopL accesses only event start and end times to detect scheduling conflicts – not titles, descriptions, attendees, or other metadata.

Data use: Event time data is used solely to prevent double bookings. It is not used for profiling or advertising.

Storage and deletion:Synced times are stored in accordance with DoopL’s data retention policy and removed when calendar sync is disabled.

Revoking access:Instructors can revoke calendar access anytime through Google Account → Security → Third-Party Apps. Deletion requests may also be made via support@doopl.com.

13. Third Party Websites

When you click on links on our website, they may direct you away from our site.

We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements and terms and conditions prior to finalising any transaction.

14. Security

We take reasonable precautions and follow industry best practices to protect personal information from being lost, misused, accessed, disclosed, altered, or destroyed.

Security measures we may use

• data encryption
• access control and authentication, including role-based active control and multi-factor authentication to restrict data access
• database integrity constraints – we implement referential integrity, unique constraints, and validation rules in our database to prevent duplicate or inconsistent entries
• API security
• data validation and sanitisation
• other security measures as determined by us from time to time

We will use our best endeavours to ensure the safety of your personal information. However, we cannot guarantee that our systems will not be compromised or interfered with by any third party. You acknowledge that by providing us with your personal information you do so at your own risk. You agree that, to the extent permitted by law, you will not hold us liable for any loss or damage caused by or contributed to by any interference with our Platform.

15. Marketing

Remarketing and analytics

We reserve the right to use remarketing with Google Analytics to advertise online. Should we elect to use this service, then:

• third-party vendors, including Google, may show you our ads on sites across the internet
• DoopL and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party cookies together to inform, optimize, and serve ads based on users’ past visits to our website and to report how ad impressions, other uses of ad services, and interactions with these ad impressions and ad services are related to visits to this site

16. Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time so please review it frequently. Notification of updates may be provided to users.

Changes and clarifications will take effect immediately upon their posting on the website.

If our Platform is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to provide products and services to you.

17. Questions and Contact Information

If you would like to access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information please send us a support request at support@doopl.com or, alternatively, follow the process outlined here www.doopl.com/account-deletion.

Privacy Officer – DoopL Pty Ltd
Australia
Email: support@doopl.com
Website: www.doopl.com