Skip to main content
Guidance

Report driving test resellers, cancellation finders or booking services: privacy notice

Updated 24 July 2026

© Crown copyright 2026

This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: psi@nationalarchives.gov.uk.

Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.

This publication is available at https://www.gov.uk/government/publications/dvsa-privacy-notices/report-driving-test-resellers-cancellation-finders-or-booking-services-privacy-notice

About this service

The Driver and Vehicle Standards Agency (DVSA) provides the service to report misuse of the driving test booking service.

DVSA is an executive agency of the Department for Transport (DfT).

We carry out enforcement activity in Great Britain to make sure that people follow:

  • the law about booking driving tests
  • the terms and conditions for using the driving test booking service

This service lets you report cases where people, websites, social media accounts or websites are breaking these rules.

The data controller for DVSA is DfT - a data controller determines the reasons and how personal data is processed. For more information, see the Information Commissioner’s Office (ICO) Data Protection Public Register. DfT’s registration number is Z7122992.

What data we need

We need to collect data about:

  • you - unless you want to make a report anonymously
  • the activity you’re reporting

Your data

You can make a report anonymously - you do not have to give your name or contact details unless you want to.

If you agree to give your name and contact details, we will collect:

  • your name
  • your choice of your email address or telephone number

We will not share your data with the person or organisation you’re reporting.

The person or company’s data

The personal data we collect from you about the incident will include:

  • what type of misuse is involved, for example, reselling driving test appointments
  • where you saw it happening
  • when you saw it

Lawful basis

The lawful basis for processing this data is ‘public task’ under the:

  • Police and Criminal Evidence Act 1984
  • Criminal Procedure and Investigations Act 1996
  • Regulation of Investigatory Powers Act 2000
  • Fraud Act 2006
  • Road Traffic Act 1988

Why we need it

We need the personal data (including about the person or company) we collect from you to:

  • investigate your report
  • use as evidence in any case against the person or company
  • detect and prevent crime
  • contact you for more information to help us investigate the incidents (if you did not make an anonymous report)

What we do with it

We collect, use and store the data you give us for the reasons set out in this policy.

We will review the information you’ve sent and decide what to do next. This may include:

  • sharing the data with our Counter-Fraud and Investigations team and asking them to investigate the case
  • asking you for more information if you did not make the report anonymously
  • working with other government departments and law enforcement agencies such as the police, local councils and Trading Standards

We will share your data if required to do so by law - for example, by court order, or to prevent fraud or other crime.

We will not:

  • sell or rent your data to third parties
  • share your data with third parties for marketing purposes

How long we keep your data

We’ll only keep your personal data for as long as it is needed for the reasons set out in this notice, or as long as it’s required by law.

We will hold your personal data for up to 6 months from the date of your last contact with us.

Where it might go

All investigation data is held on DVSA servers based in the UK or hosted within cloud services based in the European Economic Area (EEA). They meet security safeguards equivalent to those required by data protection legislation.

Protecting your data and your rights

The DVSA personal information charter sets out what steps are taken to protect your data, and the rights you have over your data.

Automated decision making and profiling

Your data is not subject to automated decision making or profiling as defined in data protection legislation.

Changes to this notice

We may change this privacy notice at our discretion at any time.

When we change this notice, the date on the page will be updated. Any changes to this privacy notice will be applied to you and your data as of the revision date.

We encourage you to periodically review this privacy notice to be informed about how your data is protected.

How to contact us

If you have any questions about anything in this document or if you consider that your personal data has been misused or mishandled you can contact the DVSA data protection manager

DVSA data protection manager

Data Protection Manager
DVSA
1 Unity Square
Nottingham
NG2 1AY

Contact DVSA customer service if you have a query that is not about how your personal data is used.

You may also make a complaint to the Information Commissioner, who is an independent regulator.

Back to top