Privacy Policy

LITIGATION LIMITED, company number 16133381, is the data controller of the personal data described in this Privacy Policy. This means we are responsible for deciding how and why your personal data is collected and used. Our registered office is 9a New Wakefield St, Manchester, United Kingdom, M1 5NP.

We trade under the name Drive Easy and operate the website at drive-easy.co.uk. If you have any questions or concerns about this Policy, how we handle your data, or if you wish to exercise any of your rights, you can contact us directly at info@drive-easy.co.uk.

We collect only the personal data that is reasonably necessary to provide our service, process your order, and keep our platform secure. Depending on how you interact with us, we may collect the following categories of information:

• Contact information: your name, email address, telephone number, and the contents of any enquiry or support message you send to us. This is collected when you fill in our contact form, email us, or register for a course.
• Order and account information: your name, date of birth, Telegram handle (if provided), billing address, selected courses or extras, login credentials, and any other information required to deliver access to your purchase. We collect this at checkout and during account setup.
• Transaction information: records relating to your orders, payment status, and order confirmations. We do not store your full payment card details — those are transmitted directly to and processed by our third-party payment providers using their own secure infrastructure.
• Technical and usage information: limited device and browser information, your IP address, and log data made available when you use the website. We collect only what is necessary for security, diagnostics, and the administration of our service — not for profiling or advertising.
• Cookies and similar technologies: we use a small number of essential cookies and comparable technologies (such as local storage) to operate secure sessions and account functionality. We do not use advertising or behavioural tracking cookies. Full details are available in our Cookie Policy.

We only use your personal data where we have a clear and lawful basis to do so under UK GDPR. The lawful bases we rely on are: performance of a contract with you, compliance with legal obligations, our legitimate interests (where these do not override your rights), and consent where specifically required. Here is how and why we use each type of data:

• To perform our contract with you: we use your contact details, order information, and account data to process your order, provide access to your purchased courses and extras, manage your account, and respond to support requests. Without this, we cannot deliver the service you've paid for.
• To maintain and improve the platform: we use technical and usage data under our legitimate interest to monitor performance, diagnose technical issues, prevent fraud, protect the security of our systems, and improve the overall experience for all users.
• For legal and regulatory compliance: we use transaction data, contact information, and other relevant records to fulfil our accounting, tax, and legal obligations — including retaining records of transactions and responding to lawful requests from authorities.
• To prevent fraud and protect users: we may process order and technical data under our legitimate interests to detect, investigate, and prevent fraudulent transactions, chargebacks, or misuse of the platform.
• With your consent, where required: for any processing activity that requires consent under UK law (for example, optional communications), we will ask for your consent separately and clearly. You may withdraw consent at any time without affecting any prior processing.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

We do not sell, rent, or trade your personal data. We share it only where it is reasonably necessary for the operation of our business, and only with trusted parties under appropriate obligations. We may share your data with:

• Service providers and data processors: companies that help us deliver the service — including payment processors (who handle card data under their own PCI DSS-compliant systems), email delivery providers, website hosting providers, authentication services, and technical support partners. These providers are only permitted to use your data as instructed by us and not for their own purposes.
• Professional advisers and authorities: lawyers, accountants, insurers, and regulators where disclosure is required to obtain professional advice, settle a dispute, comply with a court order, or satisfy a lawful regulatory or government request.
• Business transfers: in the event that we reorganise, merge, sell, or transfer part or all of our business, personal data may be transferred as part of that transaction. If this happens, we will ensure the receiving party is bound by confidentiality obligations and that your data continues to be protected to the same standard.

Drive Easy is based in the United Kingdom, and we primarily store and process your data within the UK. However, some of the third-party service providers we work with — such as hosting providers or email platforms — may operate servers or process data outside the United Kingdom or the European Economic Area (EEA).

Where your personal data is transferred outside the UK or EEA, we take steps to ensure that an appropriate level of protection is maintained. This may include relying on the UK's adequacy decisions for certain countries, or using Standard Contractual Clauses (SCCs) or equivalent contractual safeguards with those providers, as required under UK GDPR.

If you would like more information about the specific safeguards we use for international transfers, please contact us at info@drive-easy.co.uk.

We retain your personal data only for as long as is reasonably necessary to fulfil the purposes for which it was collected, including to satisfy our legal, accounting, and regulatory obligations. The specific retention period will depend on the type of data and the reason it was collected. As a general guide:

• Order and transaction records are typically retained for at least six years following the end of the relevant tax year, in accordance with HMRC guidance and applicable accounting obligations.
• Account and access information is retained for the duration of your access period and for a reasonable period thereafter, to support any post-purchase support requests or dispute resolution.
• Support and contact enquiries are retained for as long as necessary to resolve the matter and for a reasonable period afterwards in case of follow-up questions or related disputes.
• Technical and security logs are retained for a short period consistent with their purpose — typically weeks to months — before being deleted or anonymised.

When personal data is no longer needed, we delete it or anonymise it securely. If you would like to know how long we retain a specific category of your data, please contact us.

Under UK GDPR, you have a number of important rights in relation to your personal data. These rights apply subject to certain conditions and exemptions set out in the law. Here is a summary of each right and what it means in practice:

To exercise any of these rights, please contact us using our contact form or by email at info@drive-easy.co.uk. We will respond within one calendar month in most cases, though complex requests may take up to three months. We will not charge a fee for a straightforward request.

We take the security of your personal data seriously and implement a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. These include:

• Using HTTPS encryption across all pages of drive-easy.co.uk to protect data in transit between your browser and our servers.
• Restricting access to personal data to those members of our team who genuinely need it to perform their role, and only to the extent necessary.
• Requiring third-party service providers who process data on our behalf to maintain appropriate security standards and to process data only as instructed.
• Not storing full payment card details on our own systems — card data is handled entirely within the secure, PCI DSS-compliant environment of our payment providers.

No system is completely secure, and we cannot guarantee the absolute security of information transmitted over the internet. If you suspect that your account or personal data has been compromised, please contact us immediately at info@drive-easy.co.uk.

We may update this Privacy Policy from time to time to reflect changes in the law, in our data practices, or in the services we offer. When we make changes, the updated Policy will be published on this page with a revised effective date. We encourage you to check this page periodically to stay informed about how we protect your data.

Where a change is material — for example, if we begin using your data in a new way or sharing it with a new category of third party — we will take additional steps to notify you, such as sending an email to the address associated with your account or displaying a prominent notice on the website.

Your continued use of drive-easy.co.uk after an updated Policy has been published will constitute your acknowledgement of the changes. If you have questions about any update, please contact us at info@drive-easy.co.uk.

If you have any questions about this Privacy Policy, about how we use your personal data, or if you wish to exercise any of your rights, please get in touch. We are always happy to help and will do our best to respond promptly and clearly.

For complaints about how we handle your personal data, you also have the right to contact the Information Commissioner's Office (ICO) directly — the UK's independent supervisory authority for data protection — at ico.org.uk or by calling 0303 123 1113.