Privacy Policy
This Privacy Policy explains how UK Driving Theory collects, uses, stores and protects personal information when you visit our website, create an account, purchase a subscription or use our learning services.
1. Who we are
UK Driving Theory (“we”, “us” or “our”) operates the online learning platform available at https://ukdrivingtheory.co.uk/.
The platform provides UK driving theory learning materials, topic-based quizzes, road-sign flashcards, mock tests, Bangla explanations, subscription access and tools that allow learners to monitor their preparation and quiz progress.
For personal information collected through this website and our services, UK Driving Theory acts as the data controller. You can contact us at info@ukdrivingtheory.co.uk.
2. Information we collect
Account and profile information
When you register, we may collect your name, email address, username, account password in protected form, registration date, account status and subscription or membership details.
Learning and progress information
When you use the platform, we may record quiz attempts, answers, scores, learned and mastered status, completed content, mock-test performance, overall preparation progress and the dates on which learning activities took place.
Payment and transaction information
When you purchase a subscription, we may collect transaction references, payment status, the amount paid, purchase date, billing details and subscription history. Where a third-party payment provider processes the payment, it may collect your full payment-card or account details directly. We do not normally need to store full card details on our website.
Enquiries, support and feedback
When you email us, contact us through the website, reply to an email or communicate through WhatsApp, we may collect your name, email address, telephone number, message content, feedback and any information you choose to provide.
Technical and usage information
When you use the website, server logs and permitted technologies may collect your IP address, browser, device type, operating system, approximate location, referring page, pages visited, login activity, security events and cookie preferences.
Marketing preferences
We may record whether you agreed to receive promotional communications and whether you later unsubscribed or objected.
3. How we collect your information
We may collect personal information:
- Directly from you when you register, subscribe, contact us or provide feedback.
- Automatically when you use the website, sign in or complete learning activities.
- From payment, email, hosting, security or technical service providers used to operate the platform.
- From cookies or similar technologies where they are necessary or where you have provided consent.
4. How we use your information
- Create, administer and secure your user account.
- Provide free and paid learning materials and membership access.
- Record quiz results and show learned, mastered and overall preparation progress.
- Process subscriptions, payments, renewals and transaction records.
- Send account, payment, security and service-related communications.
- Respond to enquiries, feedback and support requests.
- Prevent fraud, abuse, unauthorised access and technical attacks.
- Diagnose errors, maintain the website and improve the learning platform.
- Analyse website usage where permitted and, where required, only after consent.
- Send marketing communications where the law permits and you have not opted out.
- Comply with legal, accounting, regulatory and dispute-resolution obligations.
5. Our lawful bases under UK data-protection law
We use personal information only where we have a lawful basis. The basis depends on the purpose and the circumstances.
| Purpose | Typical lawful basis | Explanation |
|---|---|---|
| Account registration, subscription access and learning services | Contract | Processing is needed to provide the service you requested or take steps before providing it. |
| Payments, transaction records and legal record-keeping | Contract and legal obligation | Processing is needed to complete the transaction and meet applicable accounting or legal duties. |
| Support, security, fraud prevention and service improvement | Legitimate interests | We have a legitimate interest in operating a secure, effective and reliable learning platform. |
| Optional analytics, non-essential cookies and certain marketing | Consent | Where consent is required, you may refuse or withdraw it without affecting essential services. |
| Responding to legal requests or protecting legal rights | Legal obligation or legitimate interests | Processing may be needed to comply with law, establish claims or defend our legal interests. |
Where we rely on legitimate interests, we consider whether the processing is necessary, proportionate and consistent with what users would reasonably expect.
6. Service emails and marketing communications
We may send essential communications about your account, subscription, payment, security, platform updates or changes to our terms. These are service messages and may be necessary to provide the service.
Promotional emails may include information about new learning features, offers or related services. Where consent is required, we will ask for it. You can unsubscribe by using an unsubscribe option provided in the communication or by emailing us.
8. International transfers
Some service providers may store or access personal information outside the United Kingdom. Where this results in a restricted international transfer, we will use an appropriate safeguard recognised under UK data-protection law.
Depending on the destination and provider, safeguards may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses or another legally permitted mechanism.
9. How long we keep your information
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, including legal, security, accounting and dispute-resolution requirements.
| Information | Typical retention approach |
|---|---|
| Account and learning-progress records | While your account is active and normally for up to 24 months after closure or prolonged inactivity, unless a longer period is needed. |
| Subscription and transaction records | Normally up to six years where needed for accounting, tax, fraud prevention or legal claims. |
| Support enquiries and feedback | Normally up to 24 months after the matter is resolved, unless it relates to an account, transaction or dispute requiring longer retention. |
| Security and technical logs | For a limited period appropriate to security monitoring, investigation and system maintenance. |
| Cookie preference | Normally 90 days under the current homepage cookie-consent setting. |
| Marketing preference or suppression record | For as long as necessary to demonstrate consent or ensure that an opt-out continues to be respected. |
We may securely delete, anonymise or aggregate information when it is no longer required. Backup copies may remain temporarily until they are overwritten through normal backup cycles.
10. Your data-protection rights
Depending on the circumstances and our lawful basis, you may have the right to:
- Be informed about how your personal information is used.
- Request access to the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to delete information where the right to erasure applies.
- Ask us to restrict how information is used in certain circumstances.
- Object to processing based on legitimate interests.
- Object at any time to the use of your information for direct marketing.
- Receive certain information in a portable, machine-readable format.
- Withdraw consent at any time where consent is the lawful basis.
- Complain about how your personal information has been handled.
These rights are not absolute and exemptions may apply. We may ask for information needed to confirm your identity. We normally aim to respond to valid rights requests without undue delay and within one month, although the period may be extended where legally permitted for complex or multiple requests.
To exercise a right, email info@ukdrivingtheory.co.uk.
11. Data-protection complaints
Please contact us first if you are concerned about how we have collected or used your personal information. Send your complaint to info@ukdrivingtheory.co.uk and include enough information for us to understand and investigate the issue.
We aim to acknowledge a data-protection complaint within 30 days, investigate it appropriately and communicate the outcome.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint/.
12. How we protect your information
We use appropriate technical and organisational measures intended to protect personal information against accidental loss, misuse, alteration, unauthorised access or disclosure.
- Encrypted website connections using HTTPS.
- Account authentication and access controls.
- Restricted administrative access to personal information.
- Security monitoring, updates, backups and anti-abuse measures.
- Use of reputable service providers and proportionate data minimisation.
No online system is completely secure. You are responsible for keeping your password confidential and should contact us promptly if you suspect unauthorised account access.
13. Children’s privacy
Some people preparing for a future driving theory test may be under 18. We aim to present privacy information in clear language and use personal information only as needed to provide and protect the learning service.
The service is not intended to obtain consent directly from children under 13 for optional processing. Where consent is required for a user under 13, consent must be provided or authorised by a person with parental responsibility, as required by applicable law.
A parent or guardian who has concerns about a child’s information may contact us at info@ukdrivingtheory.co.uk.
14. Third-party websites and services
Our website may contain links to external websites or services, including WhatsApp and social-media platforms. When you follow an external link, that provider may collect and use information under its own privacy policy.
We are not responsible for the privacy practices, security or content of websites that we do not control. Please review the relevant third-party privacy notice before providing personal information.
15. Changes to this policy and how to contact us
We may update this Privacy Policy when our services, technology, service providers or legal obligations change. The latest version will be published on this page with a revised “Last updated” date.
For questions, rights requests or data-protection complaints, contact: