Privacy Policy

1. Introduction

Welcome to LeftDrive. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://leftdrive.app and use our educational platform for learning left-hand traffic driving rules.

Please read this policy carefully. If you disagree with its terms, please discontinue use of our platform.

2. Information We Collect

We collect information you provide directly, information collected automatically, and information from third-party services.

• Account information: name, email address, and password when you register.
• Profile data: preferred language, selected country and vehicle type.
• Learning progress: modules completed, quiz scores, exam results, and certificates earned.
• Payment information: processed securely by Stripe; we do not store full card numbers.
• Usage data: pages visited, time spent, features used, and device/browser information.
• Communications: messages you send to our support team.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our educational platform.
• To process payments and manage subscriptions.
• To track and display your learning progress across devices.
• To generate and issue course completion certificates.
• To send transactional emails (registration confirmation, payment receipts, certificate notifications).
• To improve our platform based on usage patterns and user feedback.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Contract performance: processing necessary to provide the services you requested.
• Legitimate interests: improving our platform, preventing fraud, and ensuring security.
• Legal obligation: compliance with applicable laws and regulations.
• Consent: where you have explicitly agreed to specific processing activities.

5. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Stripe Inc. — for payment processing (subject to Stripe's Privacy Policy).
• Amazon Web Services (AWS) — for secure cloud storage of user data and certificates.
• Analytics providers — aggregated, anonymised data only.
• Law enforcement or regulatory authorities — when required by law or to protect our rights.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services:

• Account data is retained until you delete your account.
• Learning progress and certificates are retained for 5 years after account deletion.
• Payment records are retained for 7 years to comply with financial regulations.
• Server logs are retained for 90 days.

7. Your Rights

Under GDPR and applicable data protection laws, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ('right to be forgotten').
• Right to restriction: request that we limit the processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: withdraw consent at any time without affecting prior processing.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device.

We use: Essential cookies (required for the platform to function), Analytics cookies (to understand usage patterns, with your consent), and Preference cookies (to remember your language and settings).

You can control cookies through your browser settings or our cookie consent banner. Disabling essential cookies may affect platform functionality.

9. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

These measures include TLS encryption for data in transit, AES-256 encryption for data at rest, bcrypt password hashing, and regular security audits. However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at [email protected] and we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the 'Last updated' date. We recommend reviewing this policy periodically.

Your continued use of our platform after any changes constitutes your acceptance of the updated policy.