Privacy Policy

testroute.co.uk is operated by Clear Drive. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Clear Drive is the data controller responsible for your personal data.

If you have any questions about this policy, or about how we handle your personal data, you can contact us using the details in the "How to contact us" section below.

We may collect and process the following categories of personal data:

• Account and contact details — such as your name, email address, and the password you set when you create an account.
• Payment information — when you make a purchase, your payment is handled by our payment provider. We do not store your full card details on our own systems.
• Purchase and account history — records of what you have bought and the content you have access to.
• Content you submit — such as route submissions, reviews, feedback, or messages you send us for support.
• Technical and usage data — such as your IP address, device and browser type, and information about how you use the Service, collected through cookies and similar technologies.
• Communications — the content of emails or messages you exchange with us.

We use your personal data for the following purposes, relying on the lawful bases shown:

• To provide the Service and manage your account — to perform our contract with you.
• To process payments and manage your purchases — to perform our contract with you.
• To provide customer support — to perform our contract with you, and for our legitimate interest in helping our users.
• To maintain, secure, and improve the Service, including analytics — for our legitimate interest in running and improving our business, and with your consent where non-essential cookies are involved.
• To send you marketing communications — with your consent, or for our legitimate interest where you are an existing customer and the law allows.
• To meet legal and regulatory obligations, such as accounting and tax — to comply with a legal obligation.

The lawful bases we rely on under the UK GDPR are: your consent, performance of a contract, compliance with a legal obligation, and our legitimate interests. Where we rely on legitimate interests, this is to operate, protect, and improve our Service in a way you would reasonably expect, balanced against your rights.

Cookies are small text files stored on your device when you visit our website. They help us run the site, remember the choices you make, and collect statistics about how the site is used.

We use the following types of cookies:

• Strictly necessary cookies — essential for the website to work and to let you use its basic features. These do not require your consent.
• Performance cookies — collect anonymous information about how you use the website so that we can improve it. We set these only with your consent.
• Functional cookies — remember the choices you make to improve your experience. We set these only with your consent.

We may also use third-party cookies to collect statistics and improve our services. These cookies are covered by the privacy policy of the relevant third party.

When you first visit the Service, we ask for your consent to non-essential cookies through our cookie banner, where the specific cookies we use are listed. You can accept or reject them and change your choice at any time, both through the banner and through your browser settings. Disabling some cookies may affect how the website works, but rejecting non-essential cookies will not stop you from using the core features of the Service.

We share personal data only where necessary, with the following categories of recipients:

• Service providers who process data on our behalf, including our payment provider, hosting provider, email and communication tools, and analytics providers.
• Professional advisers and authorities — such as regulators, law enforcement, or our advisers, where we are required to share data by law or to establish, exercise, or defend our legal rights.

We require our service providers to protect your personal data and to use it only for the purposes we specify. We do not sell your personal data to anyone.

Some of our service providers may store or process personal data outside the United Kingdom. Where this happens, we make sure your data is protected to the standard required by UK data protection law. We do this by relying on countries the UK has decided provide an adequate level of protection, or by putting in place an approved safeguard such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

We keep your personal data only for as long as we need it for the purposes set out in this policy. In general:

• We keep your account data for as long as your account is active, and for up to 12 months after you close it.
• We keep records of transactions and payments for 6 years, to meet UK tax and accounting requirements (HM Revenue & Customs).
• We keep analytics data for up to 26 months.
• We keep support messages and correspondence for 24 months from the date you send them. Where a message concerns a payment we keep it for 6 years, because a claim arising from a contract can be brought for that long under the Limitation Act 1980.

When we no longer need your personal data, we securely delete it or anonymise it so that it can no longer be linked to you.

Under UK data protection law, you have the following rights in relation to your personal data:

• Access — to request a copy of the personal data we hold about you.
• Rectification — to ask us to correct inaccurate or incomplete data.
• Erasure — to ask us to delete your data in certain circumstances.
• Restriction — to ask us to limit how we use your data in certain circumstances.
• Objection — to object to our processing of your data, including for direct marketing.
• Portability — to receive certain data in a portable format, or to have it transferred to another provider.
• Withdraw consent — where we rely on your consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details below. We will respond within one month. Exercising your rights is normally free, although we may charge a reasonable fee or decline to act on a request that is clearly unfounded or excessive.

If you are unhappy with how we have handled your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We would, however, welcome the chance to address your concerns first.

We will only send you marketing emails where you have agreed to receive them, or where the law otherwise allows us to contact existing customers about similar products and services. Every marketing email we send includes an unsubscribe link, and you can opt out at any time. You can also contact us to update your marketing preferences.

We do not use your personal data to make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or that similarly significantly affect you.

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include measures such as encryption of data in transit and access controls. While no method of transmission or storage over the internet is completely secure, we take reasonable steps to keep your data safe. If a personal data breach occurs that is likely to affect your rights, we will notify you and the ICO where the law requires us to do so.

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make changes, we will update the date shown at the top of this policy and, where the changes are significant, we will take reasonable steps to bring them to your attention. Please review this page from time to time to stay informed.

If you have any questions about this Privacy Policy, or if you would like to exercise any of your rights, please contact us at info@testroute.co.uk.

You can also contact the Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about how we handle your personal data.