Privacy policy

Who we are

Learn and Drive UK is the data controller for the personal data described here. You can reach us at [email protected], on 07966 587877, or by post at 26 Blue Moon Way, Manchester M14 7SH.

What we collect and why

Optional website analytics

With analytics consent, we measure public page paths, approximate active reading time, first measured pages and broad sources such as Google or Facebook. Random browser and tab identifiers are stored as keyed hashes on our server, separately from your account. These are pseudonymous statistics, not a list of named visitors. We do not include private learning, account or booking screens, raw referring URLs, search terms, URL query strings, IP addresses or email addresses in this dataset.

Reports cover up to 365 days. A daily maintenance task removes older visit records. Active time pauses for hidden, unfocused or idle tabs and is capped at 30 minutes per page view. You can stop further collection and remove the browser identifiers using Cookie settings in the footer. Previously recorded statistics are not automatically erased by withdrawing consent.

What we never do

• · We do not send your account details, lesson progress or payment records to Monetag.
• · We do not ask for or store your GOV.UK credentials. We cannot book your driving test, and we never try.
• · We do not store card details. Payments are handled by Stripe; card numbers never reach our servers.

Who we share it with

• · The instructor delivering your lessons — the booking information and lesson records needed to provide those lessons. This is separate from optional practice-progress sharing.
• · Instructors you choose for progress sharing — only after you opt in, your name, transmission, test dates, theory and hazard results, weaker topics and recorded 3D practice responses. Manage this in Your profile → Manage progress sharing. You can stop sharing at any time without cancelling lessons. Stopping blocks future progress access but cannot recall information already seen. Other instructors’ lesson notes, contact details, passwords and payment details are not exposed by this feature. Authorised school staff retain support access. We keep your current consent version, grant/revocation dates and revision with your account; sharing records are removed when either account is deleted.
• · Stripe — to take payments. Stripe is the controller for card data.
• · Resend — to send transactional email such as booking confirmations and alerts.
• · Our hosting and database providers — who store the data on our behalf.
• · Monetag — only if you allow Advertising. Its browser script can receive your IP address, browser information and ad interactions, and use cookies or browser storage for advertising. It is not loaded on accounts, booking, payment or learning screens, or for signed-in visitors. See Monetag's privacy policy for its processing, international transfers, retention and privacy contacts.

How long we keep it

• · Account and progress data — while your account is active, then deleted when you close it.
• · Booking and payment records — seven years, because HMRC requires it. These are anonymised when you delete your account: the financial record stays, the link to you does not.
• · Marketing consent — until you withdraw it.

Your rights

Under UK GDPR you can access, correct, delete, restrict or object to our use of your data, and request it in a portable format.

Two of these are built in rather than requiring an email: from your profile you can download everything we hold about you as a file, and delete your account permanently. For anything else, email us and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office.

Security

Passwords are hashed with argon2id and never stored in readable form. Sessions use random tokens stored hashed, so a database leak cannot be replayed as a login. All traffic is encrypted in transit. Changing your password signs out every other device.

Marketing and the newsletter

Learning progress emails are a separate, optional three-message series at 7, 15 and 30 days after you opt in and verify your email. We use completed theory and hazard practice records to summarise your progress. Each email includes an unsubscribe link; you can also switch them off in your profile. We do not include tracking pixels. Consent and dispatch records are kept with your account to honour your preference and prevent duplicate sends, and are deleted when your account is deleted.

We only send driving tips and offers if you asked for them, by ticking the box yourself. A pre-ticked box is not consent and we do not use one.

Every newsletter carries an unsubscribe link. It needs no password and no account — open it, press the button, and you are off the list straight away. Unsubscribing has no effect on your lessons, and we will still send you the things you need — booking confirmations, reminders, receipts and safety notices — because those are part of the service rather than marketing.

Learners under 18

You can start driving lessons at 17, so some of our learners are under 18. We collect no more from them than from anyone else, and we do not send marketing to anyone under 18. If you are a parent or guardian and want to know what we hold about your child, contact us.

Where your data is stored

Our database and backups are held on servers in the UK and the European Economic Area. Two of our suppliers — Stripe for payments and our email provider — may process data outside the UK. Where they do, the transfer relies on the UK government's adequacy decisions or on the International Data Transfer Agreement, which is the safeguard UK GDPR requires.

Automated decisions and profiling

We do not use advertising data to decide access to lessons or accounts. If you allow advertising, Monetag may use browser information and ad interactions to select and measure ads. You can withdraw this permission in Cookie preferences in the footer; the page reloads to stop the scripts. Withdrawing consent does not erase data already received by the provider.

Cookies

We use a small number of cookies. See our cookie policy for the detail.

Changes

If we change this policy we will update the date at the top, and tell you directly if the change is significant.