Privacy Notice

Effective August 16, 2026

1. Who we are and how this Notice applies

Coastline Academy is a trade name used by separate affiliated legal entities. This Privacy Notice describes how the following entities collect, use, disclose, retain, and protect personal information:

All The Coasts, LLC (the "Site Operator"), which operates the Coastline Academy website, mobile application, Account platform, and related national technology and online features; and
the Coastline Academy operating company identified by its full legal name as the Service Provider in your final Order Summary and Order Confirmation or receipt (your "Service Provider"), which sells and provides the driving instruction, driver education, or other paid instructional services in your Order.

We refer to the Site Operator and the Service Providers collectively as the "Coastline Entities."

The Coastline entity responsible for a particular processing activity depends on which entity determines why and how the personal information is processed. In this Notice, "Responsible Coastline Entity" means the Coastline entity or entities responsible for the processing activity being described.

In general:

the Site Operator is the Responsible Coastline Entity for the public website, mobile application, Account platform, authentication, website and app security, and the national analytics, product-development, and marketing activities that it controls;
your Service Provider is the Responsible Coastline Entity for enrollment, payment, scheduling, instruction, student progress, safety, certificates, refunds, and state regulatory records relating to your Order; and
for some shared activities, such as centralized customer support, payment administration, safety investigations, analytics, or marketing, more than one Coastline Entity may be responsible, or one Coastline Entity may process information only on behalf of another.

The Coastline privacy team receives and coordinates privacy requests on behalf of the Responsible Coastline Entities. This Notice does not determine which legal entity provides Instructional Services; that entity is identified in your Order Summary and Order Confirmation or receipt.

This Notice applies to information collected online and offline through the Coastline Academy website, app, Accounts, enrollment and scheduling processes, lessons, vehicles, customer support, communications, events, and related services (collectively, the "Services"). It does not apply to workforce information handled under a separate employee, instructor, or applicant notice.

2. Information we collect

We collect information from you, from a parent or guardian, automatically through the Services, from instructors and Service Providers, and from vendors and other lawful sources.

Information you or another person provides

Depending on how you use the Services, we may collect:

name, email address, telephone number, mailing address, date of birth, and Account credentials;
parent, guardian, Purchaser, and Student contact and relationship information;
permit, license, identity, eligibility, school, course, attendance, progress, certificate, and regulatory information;
Order, booking, payment, refund, cancellation, and transaction information;
payment-card and bank information collected directly by our payment processors;
communications with customer support, instructors, and other Coastline personnel, including call, email, chat, survey, and feedback content;
marketing and communications preferences;
information you provide in a privacy request, complaint, claim, safety report, or other inquiry; and
any other information you choose to provide.

Please do not provide sensitive information that we do not request.

Information collected when you use the website, app, or Account

We may collect:

pages and screens viewed, links selected, search and study activity, quiz responses, feature usage, session duration, and interaction events;
device type, operating system, browser, app version, language, IP address, device and advertising identifiers, and internet service provider;
approximate location derived from IP address;
login, authentication, security, crash, diagnostic, and fraud-prevention information;
cookie, pixel, software-development-kit, and similar technology data; and
inferences about preferences, likely interests, or how you use the Services.

Precise location and drive information

Some Services use precise location, route, speed, duration, mileage, or similar drive information.

Instructional lessons and vehicles. During a paid lesson, the Service Provider may collect location, route, speed, mileage, vehicle, or telematics information through an instructor device, a training vehicle, or another system. That collection is separate from the permission settings on the Student's own device. We will provide any additional notice or obtain consent required by applicable law.

We do not use precise location for targeted advertising.

Audio and video during lessons

A Service Provider may use interior or exterior cameras, microphones, or other recording systems during a lesson for safety, incident investigation, quality assurance, instructor coaching, dispute resolution, legal or insurance matters, and development or testing of driving-safety and automated-coaching features.

Before recording begins, we will provide any notice and obtain any consent required by law.

Access to recordings is limited to authorized personnel and service providers with a need to use them for the disclosed purposes. We may also disclose recordings to insurers, professional advisers, law enforcement, regulators, courts, or other persons as described in Section 5. We do not disclose lesson recordings to advertising partners.

Cookies and similar technologies

We and our analytics, advertising, security, communications, and technology partners use cookies, pixels, software-development kits, local storage, and similar technologies. These technologies may collect identifiers, device information, browsing or app activity, approximate location, and information about interactions with our advertisements and communications.

You can manage nonessential cookies and targeted-advertising choices through our https://coastlineacademy.com/profile/privacy-choices page. We also process legally recognized universal opt-out preference signals, including Global Privacy Control, as described in Section 7.

A current list of material analytics, advertising, and technology partners is available at https://coastlineacademy.com/article/privacy-partners. The partner list is part of this Notice and will be dated and archived.

Information from other sources

We may receive information from:

a parent, guardian, Purchaser, Student, school, or other person involved in enrollment;
instructors, Service Providers, and other Coastline Entities;
payment processors, identity and fraud-prevention providers, communications providers, and customer-support vendors;
advertising, analytics, and attribution partners;
state licensing agencies, schools, courts, law enforcement, insurers, and other authorized organizations; and
publicly available sources or corporate transaction counterparties.

3. How we use information

The Responsible Coastline Entities use personal information for the following purposes:

Provide and administer the Services

create and maintain Accounts;
authenticate users and protect Accounts;
process Orders, payments, refunds, credits, and receipts;
enroll Students, confirm eligibility, schedule lessons, and communicate logistics;
provide instruction, study tools, drive logging, and customer support;
track attendance, progress, practice, and completion;
issue certificates and make required or authorized reports to schools or government agencies; and
maintain records required by driving-school, education, tax, accounting, and other laws.

Safety, security, fraud prevention, and legal compliance

protect Students, instructors, vehicles, Accounts, and the Services;
investigate crashes, complaints, safety events, suspected fraud, abuse, or security incidents;
verify permits, identity, eligibility, and payment information;
enforce our agreements and policies;
establish, exercise, or defend legal claims; and
comply with law, regulation, court orders, government requests, insurance requirements, and professional advice.

Operate, analyze, and improve the Services

monitor performance, availability, usage, and reliability;
troubleshoot errors and provide technical support;
conduct research, analytics, quality assurance, and service planning;
train and coach instructors;
develop, test, and improve educational, safety, and automated-coaching features; and
create aggregated or de-identified information that is not reasonably linkable to an individual.

Where a new use is not reasonably necessary for or compatible with the purpose disclosed when the information was collected, we will update our disclosures and obtain consent where required before using previously collected information for the new purpose.

Communicate with you

send transactional and operational communications about Accounts, Orders, lessons, instructors, weather, permits, safety, documents, certificates, refunds, and support;
respond to questions and privacy requests;
send surveys and requests for feedback; and
send marketing communications where you have opted in or where otherwise permitted by law.

Advertising and attribution

For users who are not known to be under 18 and who have not opted out, we may use identifiers, internet activity, and commercial information to measure advertising, attribute visits or purchases, create audiences, and provide targeted advertising. Some state laws call this activity a "sale," "sharing," or "targeted advertising."

We do not use or disclose precise location, lesson recordings, payment-card information, permit or license numbers, or government-issued identifiers for targeted advertising.

4. How Coastline Entities share information with one another

Coastline Entities share information with one another as reasonably necessary to operate the Platform and provide Instructional Services, including for Account administration, enrollment, scheduling, customer support, payment and refund administration, safety, instructor support, compliance, analytics, marketing, and corporate administration.

Depending on the activity, a Coastline Entity receiving information may:

process it only under another Coastline Entity's instructions;
act as an independent Responsible Coastline Entity for its own activity; or
determine the purposes and means of processing jointly with another Coastline Entity.

The Coastline Entities use contracts and access controls intended to allocate responsibilities and limit internal access to what is needed for the applicable purpose.

5. How we disclose information to others

We may disclose personal information to:

service providers and processors that provide hosting, cloud storage, payment processing, communications, customer support, scheduling, security, identity verification, analytics, recording storage, legal, accounting, insurance, and other services under contract;
payment networks and financial institutions to authorize and complete transactions, prevent fraud, and process refunds;
advertising, analytics, and attribution partners as described in Sections 2, 3, and 7;
schools, licensing authorities, government agencies, and other recipients when you direct us, when needed to provide the requested Instructional Services, or when required by law;
insurers, counsel, auditors, and other professional advisers for safety events, claims, compliance, and business operations;
law enforcement, regulators, courts, and other persons when we reasonably believe disclosure is required or permitted by law, necessary to protect rights or safety, or needed to investigate fraud, abuse, or a security incident;
transaction counterparties and successors in connection with a merger, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law; and
other persons with your consent or at your direction.

We do not sell personal information for money. As explained above, disclosures of identifiers, internet activity, or commercial information to advertising and analytics partners may be considered a sale, sharing, or targeted advertising under some state laws. You may opt out as described in Section 7.

6. Communications

Essential service communications

We use email, telephone calls, in-app messages, and other channels to communicate about Accounts, Orders, lessons, instructor arrival, weather, permits, safety, certificates, contracts, refunds, and support.

If you separately opt in to SMS notifications, we may send lesson reminders and real-time updates by text message. You may opt out by replying STOP or another recognized opt-out word, or by contacting hello@coastlineacademy.com. Opting out may cause you to miss time-sensitive lesson information, so keep another contact channel current.

Marketing communications

If you opt in, or where law otherwise permits, we may send marketing emails or texts about Coastline Academy products, educational resources, and offers. You can opt out through the unsubscribe link in an email, by replying STOP to a marketing text, or by contacting hello@coastlineacademy.com.

Marketing choices do not stop non-promotional messages about an Account, Order, transaction, safety issue, or legal notice.

7. Advertising and privacy choices

You may opt out of targeted advertising and activities treated as a sale or sharing of personal information through our https://coastlineacademy.com/profile/privacy-choices page.

Global Privacy Control. Where required by law, we treat a supported Global Privacy Control or other legally recognized universal opt-out signal as a request to opt out of sale, sharing, and targeted advertising for the browser or device sending the signal. If you are logged in and the law requires account-level application, we will apply the choice to the Account to the extent we can reasonably associate the signal with it.

Known minors. We do not use the personal information of users we know to be under 18 for targeted advertising, and we do not sell or share their personal information for cross-context behavioral advertising. We disable nonessential advertising technologies for those users. Essential security, service, measurement, and first-party analytics may continue where permitted by law and reasonably necessary to provide and protect the Services.

Precise location and device permissions. You may change app permissions through your device settings. Changing device permissions does not control location or telematics collected through an instructor device or training vehicle; refer to the lesson notice or contact privacy@coastlineacademy.com.

Recording choices. Any recording choices will be described in the notice presented before or at the lesson. Where recording is required for a particular service or safety program, we will explain the consequence of declining and any available alternative.

8. How long we retain information

We retain personal information for no longer than reasonably necessary for the purposes described in this Notice, including to provide the Services, comply with state driving-school and education recordkeeping requirements, resolve disputes, prevent fraud, enforce agreements, and meet legal, tax, accounting, insurance, and security obligations.

Retention varies by category:

Account and contact information is generally retained while the Account is active and for a reasonable period afterward for support, security, legal, and recordkeeping needs.
Order, payment, refund, enrollment, attendance, progress, and certificate records are retained for the period required by the Service State and other applicable law, plus any period reasonably needed for disputes, audits, and compliance.
Lesson audio and video recordings are generally retained for 90 days, unless a longer period is reasonably necessary for a safety investigation, complaint, claim, insurance matter, legal hold, regulatory requirement, or a specifically disclosed and lawful product-development project.
User-started drive logs and precise location are retained for the period reasonably necessary to provide the feature, maintain a training or practice record, satisfy a user request, or comply with law. Vehicle or instructor-device data may have a different retention period disclosed at collection.
Customer-support communications are retained for the time reasonably needed to resolve the matter, train and monitor support, and establish a record of the interaction.
Cookie, analytics, advertising, security, and diagnostic data is retained according to the purpose and configured retention period of the applicable tool, subject to legal and operational needs.

When information is no longer needed, we delete it, de-identify it, or restrict access in accordance with our retention process. Backup copies may remain for a limited period before deletion through the ordinary backup cycle.

9. Your privacy rights

Depending on where you live and the law that applies, you may have the right to:

confirm whether we process your personal information;
access personal information and obtain a portable copy;
correct inaccurate personal information;
delete personal information, subject to legal exceptions;
opt out of sale, sharing, targeted advertising, or certain profiling;
limit certain uses and disclosures of sensitive personal information;
withdraw consent where processing is based on consent;
appeal a decision on a privacy request; and
receive equal service and not be unlawfully discriminated against for exercising privacy rights.

We extend access, correction, deletion, and portability request options to Coastline users generally, although the scope and exceptions may vary by law. We may retain records that a Service Provider is legally required to keep, including certain driver-training and transaction records.

How to submit a request

You may submit a request by:

emailing privacy@coastlineacademy.com;
calling 1-800-489-1896;
or writing to Coastline Privacy Team, 2261 Market Street, STE 86826, San Francisco, CA 94114.

Identify the relevant Account or Order and, if known, the Service Provider shown in the Order Confirmation. The Coastline privacy team will route the request to the Responsible Coastline Entity or Entities.

We will verify the request using information reasonably related to the request. For example, we may confirm control of the email address associated with the Account and request additional information for sensitive or high-risk requests. We will not ask for more information than reasonably necessary.

You may use an authorized agent where law permits. We may request proof of the agent's authority and may ask you to verify your identity directly. A parent or legal guardian may submit a request for a minor, subject to verification of authority.

We will respond within the period required by applicable law. If we deny a request in whole or in part, we will explain the basis where required. To appeal, reply to the decision or email privacy@coastlineacademy.com with the subject line "Privacy Appeal." If the appeal is denied, we will provide any regulator-contact information required by law.

10. U.S. state privacy disclosures

California

For purposes of the California Consumer Privacy Act, the Coastline Entity or Entities that determine the purposes and means of processing may each be a "business" for the activity at issue. The Site Operator and a Service Provider may provide a single notice describing collective practices where permitted, but each remains responsible for its obligations under applicable law.

During the preceding 12 months, depending on how a person used the Services, we collected the following California categories of personal information:

identifiers, including name, contact information, online identifiers, IP address, and Account information;
customer records and commercial information, including Orders, purchases, refunds, credits, and communications;
internet or other electronic network activity, including website, app, Account, study, and interaction information;
geolocation information, including approximate location and, where used, precise location, route, speed, or drive information;
audio, electronic, visual, thermal, or similar information, including customer-support content and lesson recordings;
professional, educational, or student information, including enrollment, attendance, progress, and certificate records;
sensitive personal information, which may include Account credentials, precise geolocation, government-issued identifiers, and the contents of communications where we are not the intended recipient; and
inferences drawn from the information above.

We collect these categories from the sources described in Section 2 and use them for the purposes described in Section 3. We disclose them to the categories of recipients described in Sections 4 and 5.

During the preceding 12 months, we may have sold or shared, as those terms are defined by California law, identifiers, commercial information, and internet or network activity with advertising and analytics partners for advertising, attribution, or measurement. We do not knowingly sell or share the personal information of consumers under 16, and our stated policy is not to use the personal information of users known to be under 18 for targeted advertising. We do not sell personal information for money.

We use or disclose sensitive personal information only for purposes permitted without a right to limit, or we provide the legally required right to limit. We do not use sensitive personal information to infer characteristics about a person except as disclosed and permitted by law.

California residents may exercise the rights described in Sections 7 and 9. We process supported opt-out preference signals as described in Section 7. We do not offer a financial incentive in exchange for personal information unless we provide a separate notice explaining its material terms.

Other U.S. states

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with applicable consumer privacy laws may have some or all of the rights described in Section 9, including appeal rights in many states. The exact rights, definitions, and exceptions vary.

Colorado law requires notice of material changes to a privacy notice through a channel by which the controller regularly interacts with consumers and may require consent before previously collected information is used for a materially different secondary purpose. We will provide notice and obtain consent where applicable.

Nevada residents may submit a verified request to opt out of a future sale of covered information as defined by Nevada law by emailing privacy@coastlineacademy.com. We do not currently sell covered information for money as defined by Nevada law.

11. Children and teens

The Services are intended for people old enough to pursue driving education or instruction and for their parents and guardians. We do not knowingly permit a child under 13 to create or use an Account unless we implement a legally valid parental-consent process for the applicable feature.

If a date of birth or other information indicates that a user is under 13, we may stop registration, limit the Services, request verifiable parental consent where appropriate, or delete information as required by law.

Many Students are teenagers. For users we know to be under 18:

we do not use their personal information for targeted advertising or sell or share it for cross-context behavioral advertising;
we limit collection, use, and retention to what is reasonably necessary for the disclosed Services and other lawful purposes;
we obtain consent from the teen or parent or guardian where required for sensitive data, precise location, recording, a materially different use, or another regulated activity; and
a verified parent or guardian may submit privacy requests on the minor's behalf as permitted by law.

12. Security

We use administrative, technical, and physical safeguards designed for the nature and sensitivity of the information, including access controls, encryption in transit, logging, vendor review, and restrictions on lesson-recording access. No system is completely secure. If a security incident requires notice, the Responsible Coastline Entity will provide notice as required by law.

13. Changes to this Notice

We may update this Notice as our Services, entities, and legal obligations change. We will update the "Last updated" date when we do.

We will notify affected users of material changes before they take effect through a channel we regularly use to communicate with them, such as email, an Account or in-app notice, or a prominent website notice. Changes to the identity of a Responsible Coastline Entity, the categories of information collected, the purposes of processing, the categories of recipients, or the methods for exercising rights may be material.

A notice does not by itself authorize a new use of previously collected information where consent is required. If we plan to use information for a purpose that is materially different from and not reasonably compatible with the purpose disclosed when the information was collected, we will obtain consent where required before applying the new purpose to previously collected information.

14. Contact us

Privacy questions and rights requests: privacy@coastlineacademy.com

Toll-free number: 1-800-489-1896

Mail: Coastline Privacy Team, 2261 Market Street, STE 86826, San Francisco, CA 94114

General service questions: hello@coastlineacademy.com

For a question about a particular Order, include the Order number and the Service Provider identified in the Order Confirmation or receipt.