Driving Theory
Back to homePrivacy and personal data

Privacy Policy

How Driving Theory collects, uses, shares and protects information when you use the platform.

Last updated July 31, 2026

1. Scope and who is responsible

This Privacy Policy explains how Driving Theory ("Driving Theory", "we", "us" or "our") handles information when you visit learndrivingtheory.com or use one of the country-specific learning areas available through the platform (together, the "Service"). Driving Theory determines the purposes and means of the processing described in this policy and therefore acts as the data controller where applicable data-protection law uses that term.

The Service provides educational material, road-sign references, practice questions and practical driving-licence guidance. You can use its public content without creating an account or purchasing a product.

For privacy questions or requests concerning your personal data, email [email protected].

2. Information we process

Information collected automatically

When you use the Service, our systems and service providers may process technical and usage information, including:

  • IP address, approximate location derived from it, browser and device type, operating system and language;
  • requested URL, referring page, access time, response status and diagnostic or security logs;
  • pages viewed, navigation source, interactions and general engagement measurements; and
  • consent choices communicated through our consent-management platform.

Practice activity

When you complete practice questions, we may process a randomly generated session and attempt identifier, selected answers, whether answers were correct, completion time, score, weak topics and any optional feedback you submit. A session identifier may be stored in your browser's local storage so that activity from the same browser can be associated. It is not intended to identify you by name.

Issue reports

If you submit an issue report, we process the title, description and report category, along with relevant page, application and device information needed to reproduce and resolve the problem. Providing an email address is optional. If you provide one, it may be used to clarify or respond to your report.

Information we do not request

The public Service does not currently offer user accounts or paid checkout and does not ask for passwords, payment-card details or government identification. Please do not include sensitive personal information in free-text feedback or issue reports.

3. How and why we use information

We use information to:

  • deliver pages, practice sessions and requested functionality;
  • calculate and present practice results and learning feedback;
  • maintain security, prevent abuse and diagnose technical problems;
  • understand aggregate audience, acquisition and content-performance trends;
  • improve the accuracy, usability and coverage of educational content;
  • manage consent and comply with legal obligations;
  • display, measure and protect advertising where advertising is enabled; and
  • establish, exercise or defend legal claims.

Where the GDPR, UK GDPR or similar law applies, the legal basis depends on the activity. Essential delivery, security and technical storage are generally based on our legitimate interests in operating a safe and functional Service. We process optional issue-report information to respond to your request and on the basis of our legitimate interests in improving the Service. Analytics storage and personalised advertising are used on the basis of consent where consent is legally required. We may also process information when necessary to comply with law.

4. Analytics

We use Google Analytics 4 to understand how visitors find and use the Service. Depending on your location and consent choice, Google Analytics may process device and browser information, approximate location, page URLs, referrers and interaction events, and may store analytics cookies. Google Analytics is configured to receive consent signals from Google's consent-management platform. When analytics storage is denied, Google tags adjust their behaviour in accordance with Google's consent mode settings.

We also use Umami Analytics, a privacy-focused analytics service hosted at stats.domlab.space, to understand aggregate use of the Service. Umami does not use cookies, collect personal information or track visitors across websites. It records anonymised information such as pages viewed, referrers, browser and device type, and approximate country. IP addresses may be used temporarily to generate anonymous metrics but are not stored.

Learn more about how Google uses information from sites that use its services at Google's Business Data Responsibility site.

5. Advertising

We use Google AdSense to deliver, limit, secure and measure advertising. Google and participating advertising vendors may process identifiers, cookies, device information, approximate location and information about visits to this and other sites. Where required, personalised advertising and related storage are activated only in accordance with the choices made in the Google consent message. If consent is not provided, Google may serve limited or non-personalised ads and may still use storage that is strictly necessary for fraud prevention, frequency capping, aggregated reporting or delivery, as permitted by applicable law.

You can review Google's advertising controls at Google Ads Settings and the vendors disclosed through the consent message's partner list.

Cookies are small files stored by a browser. Local storage is a similar browser feature that can retain information on a device. We use these technologies for essential operation, consent management, practice-session continuity, analytics and advertising.

Where required, the Google-certified consent-management platform shown when you first visit lets you accept, reject or customise non-essential processing. You can later reopen Privacy and cookie settings from the link displayed on the Service. Withdrawing consent does not affect processing that occurred lawfully before withdrawal. More detail is available in our Cookie Policy.

7. Sharing and service providers

We do not sell personal information in exchange for money. We disclose information only as reasonably necessary to:

  • hosting, content-delivery, database, security and technical service providers that operate the Service for us;
  • analytics and advertising providers described above, subject to consent where required;
  • professional advisers, authorities or other parties where disclosure is required by law or necessary to protect rights, users or the Service; and
  • a successor in connection with a genuine reorganisation, merger, acquisition or transfer of the Service, subject to appropriate safeguards.

Providers process information under their own terms and privacy notices where they act as independent controllers, or under our instructions where they act as processors.

8. International transfers

The Service is available internationally and some providers may process information outside your country. Where required, transfers are protected through recognised adequacy decisions, standard contractual clauses or another lawful transfer mechanism. The safeguards available for a particular provider are described in that provider's privacy documentation.

9. Retention

We retain information only for as long as reasonably necessary for the purposes described above. Security and server logs are generally kept for a limited operational period. Practice results and associated anonymous identifiers may be retained to provide results, analyse question quality and improve learning resources. Issue reports are retained while they are being investigated and for a reasonable period afterward. Provider-controlled analytics, advertising and consent records follow the retention settings and policies of the relevant provider.

Retention may be extended where reasonably necessary to comply with law, resolve disputes, prevent abuse or establish legal rights. Local-storage values remain on your device until they expire, are replaced or you clear them.

10. Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction or portability of your personal data, and to object to certain processing. You may withdraw consent at any time and may have the right to complain to your local data-protection authority. Some rights are subject to legal conditions and exceptions.

To exercise a right, email [email protected] and describe your request. We may need enough information to locate the relevant records and verify that the request concerns you. Because much of the Service is used without an account and relies on random identifiers, we may be unable to connect anonymous activity to a particular person.

11. Security

We use reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, disclosure or loss. No internet service or storage method is completely secure, so absolute security cannot be guaranteed.

12. Children

The Service is intended for a general audience learning driving theory and is not designed to collect personal information from children. If you believe a child has submitted personal information through an issue report or feedback field, contact us so that we can review and, where appropriate, delete it.

The Service links to driving authorities and other third-party resources. Those sites control their own processing, and this policy does not cover them. Review their privacy notices before providing personal information.

14. Changes to this policy

We may update this Privacy Policy to reflect changes to the Service, providers or legal requirements. The date shown at the top identifies the latest revision. Material changes may also be highlighted through the Service where appropriate.

15. Contact

For privacy and data-protection matters, contact [email protected].