Legal

Privacy Policy

Last updated: 25 July 2026

This notice explains how Driving Mastery collects, uses, stores, and shares personal data when you use our learner website, in accordance with the UK GDPR and Data Protection Act 2018.

Data Controller

Driving Mastery ("we", "us", or "our") operates https://drivingmastery.co.uk. You can contact us at support@drivingmastery.co.uk.

Data We Collect

• Account details, including your name and email address
• Your self-declared 16+ account eligibility confirmation and the date and time it was confirmed
• Learning activity, including module progress, quiz answers, mock-test results, road-sign practice, and study goals
• Messages you send to Theo, Theo's responses, and the learning context used to personalise those responses
• Technical and security information needed to operate and protect the service
• Website usage and analytics information where you consent to optional analytics cookies
• Purchase information if you buy a paid plan, including a record of the plan and amount, your immediate-access consent (with its date and time), and payment references from our payment processor — we do not receive or store your full card details

How We Use Your Data

• To create and maintain your account and save your learning progress
• To provide modules, quizzes, mock tests, road-sign practice, and personalised study recommendations
• To provide Theo's AI-assisted learning support when you choose to use it
• To send a one-off welcome email when you create an account, explaining how to use the service
• To send study-reminder emails (such as streak reminders and "pick up where you left off" nudges) if you have opted in, using your real progress data such as your streak, category accuracy, and questions answered
• To take payment for paid plans, give you the access you purchased, send a purchase confirmation, and handle any refunds or payment queries
• To secure, troubleshoot, and improve the service
• To measure website usage where you have consented to analytics
• To meet legal obligations and establish or defend legal claims where necessary

Lawful Bases

We process account and learning data because it is necessary to provide the service you request. Where you buy a paid plan, we process your purchase and payment information because it is necessary to perform our contract with you and to meet our legal and accounting obligations. We may rely on our legitimate interests to keep the service secure, diagnose faults, and improve core functionality, provided those interests do not override your rights. We rely on consent for optional analytics cookies, and you can withdraw that consent by changing your cookie choice.

The one-off welcome email is sent to every new account as part of providing the service and does not require separate consent. Study-reminder emails (streak reminders and win-back nudges) are sent only with your consent: new accounts see an unticked checkbox at signup, and existing accounts can opt in or out at any time from a toggle on the Account page. Every study-reminder email includes a one-click unsubscribe link that works without logging in, and you can withdraw consent at any time with no effect on your access to the service.

Cookies

Necessary cookies support functions such as authentication, security, and remembering your cookie preference. Optional analytics are disabled unless you accept them through the consent banner.

• Necessary cookies: required for core functionality
• Analytics cookies: used to measure website usage only with your consent

Sharing and Third-Party Services

We do not sell your personal data. We use service providers only where needed to operate the website:

• DigitalOcean for website hosting and infrastructure
• Stripe for secure payment processing when you buy a paid plan — Stripe handles your card details directly under its own terms and PCI-DSS obligations, and we do not see or store your full card number
• Brevo for account, password-reset, purchase-confirmation, and (if you opt in) study-reminder email delivery
• OpenAI to provide Theo's AI-assisted responses when you use Theo. Your messages and Theo's replies are sent to OpenAI, and your conversation is stored on OpenAI's systems so that Theo can remember what you have already discussed. OpenAI does not use this content to train its models. OpenAI is based in the United States, so this involves a transfer of your information outside the UK
• Google Tag Manager and Google Analytics for optional analytics where you consent

These providers process information under their own security and data-protection obligations. We may also disclose information where required by law.

Data Retention

We keep account, learning-progress, and Theo conversation data while needed to provide your account and for a reasonable period afterwards where required for security, dispute resolution, or legal obligations. We keep a record of which study-reminder emails have been sent to a given account, used only to enforce sending limits (such as not sending more than one lifecycle email in any 72-hour period) and to honour opt-outs. Operational logs are kept only for as long as needed to secure and troubleshoot the service. Analytics retention is controlled through our analytics configuration. We delete or anonymise information when it is no longer needed.

Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, or loss.

Your Rights

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to certain processing
• Receive portable data where the right applies
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise a right, contact us using the email address below. You can also complain to the Information Commissioner's Office.

Children's Privacy

Driving Mastery is intended for learner drivers and people preparing to learn, aged 16 or over. Some users may be under 18. We do not request a full date of birth. New learner account users confirm they are 16 or over with a checkbox during signup, and existing learner account users who have not yet confirmed are shown a one-time confirmation prompt when they next use their account.

We aim to minimise the information we collect from younger users and apply age-conscious privacy practices. Theo is provided for learning support only. Users should not submit private, sensitive, medical, financial, or unnecessary personal information to Theo or any feedback form.

If you are a parent or guardian and believe a child has provided personal data inappropriately, contact us so we can investigate and take appropriate action.

Changes to This Policy

We may update this Privacy Policy periodically. We encourage you to review this page regularly for any changes.

For more details, contact support@drivingmastery.co.uk.