← Back to home

Privacy Policy

Last updated: May 2026

Who we are

Train Driver Practice (traindriverpractice.co.uk) is an independent practice platform for UK train driver applicants. We are the data controller for the personal information described in this policy. You can contact us at any time via our contact page.

What data we collect and why

Account registration

When you create an account we collect your email address. We use this to log you in, send your purchase confirmation, and provide customer support. Legal basis: performance of a contract.

Test results

When you complete a test we record your score and session data so your results appear in your dashboard. This data is not shared with employers, assessment providers, or any third party. Legal basis: performance of a contract.

Contact form

If you use our contact form we collect your name, email address, and message. We use this solely to respond to your enquiry. Legal basis: legitimate interests.

Payment

Payments are processed by Stripe. We do not see or store your card number, expiry date, or CVV. We receive confirmation that a payment was made and your email address to activate your access. Legal basis: performance of a contract.

Analytics and advertising

We use Google Analytics 4 and Google Ads to understand how visitors find and use the site. These services set cookies and may transfer data to the United States. We also use Vercel Analytics (cookieless, no personal data). Legal basis: legitimate interests. See our Cookie Policy for opt-out options.

How long we keep your data

Account data is kept for as long as your account is active. If you request deletion we will remove your personal data within 30 days. Contact form messages are kept for up to 12 months. Payment records are retained for 7 years to comply with UK financial regulations.

Who we share your data with

  • ▸Supabase — database and authentication (EU data centres).
  • ▸Stripe — payment processing (Standard Contractual Clauses apply).
  • ▸Vercel — website hosting (Standard Contractual Clauses apply).
  • ▸Google — analytics and advertising (Standard Contractual Clauses apply).
  • ▸Resend — transactional emails such as purchase confirmations.

We do not sell your personal data. We do not share your data with train operating companies, the OPC, or any employer.

Your rights

Under UK GDPR you have the right to:

  • ▸Access — request a copy of the personal data we hold about you.
  • ▸Rectification — ask us to correct inaccurate data.
  • ▸Erasure — ask us to delete your personal data.
  • ▸Restriction — ask us to limit how we process your data.
  • ▸Portability — receive your data in a machine-readable format.
  • ▸Objection — object to processing based on legitimate interests.

To exercise any right, please contact us. If unsatisfied you may complain to the ICO.

Cookies

For full details see our Cookie Policy.

Contact

For any privacy-related questions please get in touch.