Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data we collect, why, and what rights you have. It is written to meet our obligations under the UK GDPR and the Data Protection Act 2018.

1. Who is responsible for your data

UK Practical Driving Test Ltd is the data controller.

Company number 17387024, registered in England and Wales.
17 Welkin Green, Hemel Hempstead, England, HP2 4XE
Email: support@ukpracticaldrivingtest.co.uk

We are registered with the Information Commissioner's Office as a data protection fee payer, registration number ZC256293.

2. What we collect and why

2.1 Account and communication information

What: Your email address and password (stored encrypted, never in plain text).

Why: To create your account, sign you in, manage your subscription, and send you essential service and authentication communications (such as password resets and email address confirmation).

Lawful basis: Performance of a contract — we need this to deliver the educational service.

2.2 Subscription and payment information

What: Your subscription status, renewal date, and a reference to your payment record held by Stripe or Apple.

We never see or store your card details. Those are handled entirely by Stripe or Apple.

Why: To manage your subscription and give you access.

Lawful basis: Performance of a contract — we need the payment reference to give you access to what you paid for. The financial records themselves are held by Stripe and Apple under their own legal obligations.

2.3 Learning preferences

What: Your chosen language, learning path, and vehicle transmission type.

Why: To show you the right course content.

Lawful basis: Performance of a contract.

2.4 Progress data

What: Which lessons you have marked as complete.

Why: So you can track your progress across devices.

Lawful basis: Performance of a contract.

2.5 Technical data and app diagnostics

What: IP address, browser or device type, and access times, logged automatically by our hosting providers.

Why: Security, fraud prevention, diagnosing faults, and maintaining app stability.

Lawful basis: Legitimate interests — keeping the service secure, working, and reliable.

3. What we do not do

• We do not sell your data
• We do not share it with advertisers
• We do not use it for automated decision-making or profiling
• We do not send marketing emails unless you have opted in

4. Who we share data with

We use the following service providers, each of whom processes data on our behalf under contract:

Each has their own privacy policy governing data they hold directly.

We may also disclose data where legally required, or to protect our rights or those of others.

5. International transfers

Your account, subscription, preferences, and progress data is held in Ireland, within the European Economic Area. Transfers from the UK to the EEA are covered by the UK's adequacy regulations, so no additional safeguards are required.

Some of our other providers — Vercel, Stripe, Apple and Vimeo — process data in the United States. Those transfers are protected by appropriate safeguards, typically the UK International Data Transfer Addendum or Standard Contractual Clauses, and where applicable the UK Extension to the EU–US Data Privacy Framework.

6. How long we keep it

We do not keep our own payment records after your account is deleted. Stripe and Apple keep their own transaction and invoice records independently, under their own retention periods and legal obligations. Those records are outside our control and are governed by Stripe's and Apple's privacy policies.

When Apple notifies us of App Store subscription events (such as a renewal or cancellation), we keep a record of that event. It is stored against Apple's transaction reference, not against your account, and once your account is deleted it is no longer linked to you by us.

You can delete your account at any time (see section 7). We will delete or anonymise your data except where we must retain it by law.

7. Your rights

Under the UK GDPR you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use it
• Portability — receive your data in a structured, machine-readable format (such as JSON or CSV) so you can transfer it to another service or instructor
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

You can delete your account yourself at any time, either from the account page on our website or in the app. This deletes your account immediately.

To exercise any of these rights, including erasure or portability, you can also email support@ukpracticaldrivingtest.co.uk. We will respond within one month.

There is normally no charge.

8. Complaints

If you are unhappy with how we handle your data, please tell us first.

You also have the right to complain to the Information Commissioner's Office:

9. Cookies and similar technologies

9.1 Our website

We use cookies that are strictly necessary for the site to work:

• Authentication — keeps you signed in
• Session — maintains your session as you navigate

These are essential, so we do not ask for consent to set them.

9.2 Video content

Our lessons are delivered by Vimeo, which may set its own cookies when you play a video. See Vimeo's privacy policy for details.

9.3 Our app

The app stores your login session on your device so you stay signed in. It does not use advertising identifiers or tracking.

10. Children and age restrictions

Our service is designed for individuals preparing for the UK practical driving test, which generally requires users to be at least 17 years old (or 16 under specific mobility exemptions). We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, contact us and we will delete it.

11. Security

We protect your data through encryption in transit (HTTPS), encrypted password storage, database-level access controls restricting each user to their own records, and restricted administrative access.

No system is completely secure, but we take reasonable measures appropriate to the data we hold.

12. Changes to this policy

We may update this policy. Material changes will be notified by email or by a notice on the website. The date at the top shows when it was last revised.

13. Contact