Privacy policy

Drivings Ltd ("Drivings", "we", "us" or "our") operates the Drivings.com website and mobile apps. This policy explains what personal information we collect when you use our service, how we use it, who we share it with, and the rights you have over your data.

We are the data controller for the information described in this policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we are registered with the Information Commissioner's Office (ICO).

We collect information in three ways: information you give us, information we collect automatically as you use the service, and information we receive from third parties.

Account details. When you sign up we ask for your name, email address and a password. If you subscribe, we also collect billing information through our payment processor — we never see or store your full card number.

Learning activity. We record your activity in the app so we can show progress, surface weak topics and personalise your learning plan.

Device and usage data. Our servers automatically log your IP address, browser type, operating system, the pages you visit and the time you spend on them. On mobile we collect a device identifier and crash diagnostics.

Support correspondence. If you email support@drivings.com or message us in-app, we keep a copy of that conversation so we can follow up and improve our help articles.

We use the information we collect to:

• Provide the Drivings learning platform and your account.
• Track your progress and tailor question recommendations to topics you find difficult.
• Process payments and manage your 14-day free trial and subscription.
• Send service emails — order receipts, password resets, important changes to your account.
• Detect and prevent fraud, abuse and credential sharing on shared accounts.
• Measure how features are used so we can improve the product and our content.
• Send marketing emails about new courses and tips — only with your consent, and you can unsubscribe at any time.

Under UK GDPR we rely on the following lawful bases:

Contract. Processing required to deliver the service you signed up for — creating your account, billing, and giving you access to the content.

Legitimate interests. Improving the product, securing it against abuse, and understanding how learners use Drivings. We balance these interests against your privacy rights and only use the minimum data needed.

Consent. Marketing emails and non-essential cookies. You can withdraw consent at any time from your account settings or the cookie banner.

Legal obligation. Keeping records of payments and consumer-rights communications as required by UK tax and consumer law.

We use cookies and similar storage to keep you signed in, remember your preferences, and measure how the website is used. Strictly necessary cookies are always on. Analytics and marketing cookies are only set if you accept them in our cookie banner.

You can change your cookie preferences at any time from the footer of any page, or by clearing cookies in your browser. Blocking strictly necessary cookies will break sign-in.

We do not sell your personal information. We share it with a small set of trusted processors who help us run the service:

• Cloud hosting and database providers that store your account and progress.
• Payment processors (such as Stripe) that handle subscriptions and billing.
• Email delivery services for receipts and service messages.
• Privacy-conscious analytics and crash-reporting tools, configured with IP anonymisation where available.

Each processor is bound by a written agreement that restricts how they handle your data. We may also disclose information when required by law, court order, or to protect the rights and safety of Drivings, our users or the public.

Some of our processors operate outside the UK, including in the European Economic Area and the United States. When we transfer data abroad we rely on UK adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses with appropriate safeguards in place.

We keep your account information for as long as your account is active. If you cancel, we keep your data for up to 24 months in case you decide to come back, then we delete or anonymise it.

Billing records are retained for at least 6 years to meet HMRC requirements. Anonymised, aggregated analytics may be kept indefinitely.

Under UK GDPR you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is wrong or incomplete.
• Ask us to delete your information ("right to erasure").
• Restrict or object to certain processing.
• Receive your information in a portable format and have it sent to another provider.
• Withdraw consent at any time where we rely on consent.
• Complain to the Information Commissioner's Office at ico.org.uk if you are unhappy with how we have handled your data.

To exercise any of these rights, email support@drivings.com. We will respond within one month.

Drivings is intended for users aged 16 and over. If we learn that we have collected information from someone under 16 without verified parental consent, we will delete it. If you are a parent who believes your child has signed up, please contact us.

We protect your information with encryption in transit (TLS) and at rest, restricted internal access, regular backups and routine security reviews. No system is perfectly secure, so we ask that you keep your password to yourself and contact us straight away if you suspect any unauthorised activity on your account.

We may update this policy from time to time as the product or the law changes. The "Last updated" date at the top of the page reflects the most recent revision. If we make material changes, we will notify you by email or with an in-app banner before the changes take effect.

If you have questions about this policy or how we handle your data, please get in touch:

Drivings Ltd
Email: support@drivings.com