Theory Revision Ltd – Privacy Policy
Last updated: July 2026
1. Who we are
Theory Revision Ltd provides online driving theory revision materials.
Theory Revision Ltd is the controller responsible for the personal information described in this policy.
We are registered in England and Wales under company number 16628494.
Our registered office is:
Theory Revision Ltd
Higgison House
381–383 City Road
London
EC1V 1NW
United Kingdom
For questions about this policy or how we use your personal information, contact:
Email:
2. Information we collect
Depending on how you use our website and services, we may collect:
Account and contact information
- Your name;
- email address;
- username or account identifier;
- password in an encrypted or protected form; and
- any other information you provide when creating or managing an account.
We cannot see your original password where it is securely encrypted or hashed.
Purchase and payment information
- The product purchased;
- price and payment status;
- date and time of purchase;
- billing details;
- transaction reference; and
- limited payment information provided by our payment processor.
Payments are processed by Stripe. We do not normally receive or store your complete card number or card security code.
Revision and account activity
- Courses and revision products accessed;
- practice questions attempted;
- answers, scores and mock-test results;
- revision progress;
- dates and times you use the platform; and
- account expiry information.
Technical and website information
- IP address;
- browser and device type;
- operating system;
- login and security records;
- pages viewed and features used;
- cookie identifiers; and
- information about website errors or performance.
Communications
We may keep information you provide when you:
- contact us;
- request technical support;
- make a complaint;
- ask for a refund; or
- respond to a survey or other communication.
Marketing preferences
We may record:
- whether you have agreed to receive marketing;
- the types of communication you prefer;
- whether you opened or interacted with a marketing message; and
We do not intend to collect special-category information, such as information about your health, religion, ethnicity or political opinions. Please do not provide this information unless it is necessary for us to deal with a particular request.
3. How we receive your information
We normally receive personal information:
- directly from you when you create an account, place an order or contact us;
- automatically when you use our website or revision platform;
- from our payment, hosting, analytics and technical service providers; or
- from a training provider, employer or other organisation purchasing access for you, where applicable.
If another organisation gives us your information, it is responsible for having a lawful reason to provide it to us. We will only use that information for the purposes explained in this policy.
4. How and why we use your information
UK data protection law requires us to have a lawful basis for using personal information.
| How we use your information | Lawful basis |
|---|---|
| Creating and managing your account | Necessary to perform our contract with you |
| Providing access to revision materials | Necessary to perform our contract with you |
| Recording your progress, answers and scores | Necessary to perform our contract with you |
| Processing payments and refunds | Necessary to perform our contract with you |
| Sending order confirmations, password resets, expiry reminders and service messages | Necessary to perform our contract with you |
| Responding to questions, complaints and support requests | Contractual necessity and our legitimate interests in supporting customers |
| Preventing account sharing, fraud, misuse and security incidents | Our legitimate interests in protecting customers, our business and our content |
| Maintaining and improving our website and services | Our legitimate interests in operating and improving our business |
| Keeping financial and transaction records | Necessary to comply with legal obligations |
| Establishing, exercising or defending legal claims | Our legitimate interests and compliance with legal obligations |
| Sending marketing where you have chosen to receive it | Your consent |
| Sending limited marketing to existing customers where legally permitted | Our legitimate interests and the electronic marketing “soft opt-in”, where its requirements are met |
| Using non-essential analytics or advertising cookies | Your consent |
Where we rely on legitimate interests, we consider whether using the information is necessary and whether your rights and interests override ours.
We will not use your personal information for a purpose that is incompatible with the reason it was originally collected unless permitted or required by law.
5. Revision results
Your practice scores, progress information and mock-test results are used to provide the revision service and help you monitor your progress.
These results are for revision purposes only. They do not guarantee that you will pass an official test.
We will not normally share your revision results with an employer, training provider or another person unless:
- you have agreed to this;
- the account has been arranged through that organisation and you were informed that it would receive progress information;
- sharing is necessary to provide the agreed service; or
- we are legally required to do so.
If access is purchased for you by an employer or training provider, you should be told clearly before using the account what information that organisation will be able to see.
6. Marketing communications
We may send you marketing emails if you have consented or where we are otherwise permitted to do so by law.
Marketing choices must be separate from your acceptance of our Terms and Conditions. You do not have to agree to marketing to purchase or use our products.
You can stop receiving marketing at any time by:
- using the unsubscribe link in a marketing email; or
- contacting us at help@theoryrevision.co.uk.
We may keep a limited suppression record after you unsubscribe so that we can respect your request and avoid contacting you again.
Account messages, payment confirmations, security notices and service updates are not marketing. We may continue sending these where necessary to provide your account.
We will not sell your personal information to other organisations for their own marketing.
7. Cookies and similar technologies
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to function, for example to:
- keep you signed in;
- maintain security;
- remember items during checkout;
- process payments; and
- remember your privacy choices.
These essential cookies do not normally require consent.
We may also use non-essential cookies for analytics, advertising or improving the website. Where consent is required, these cookies will not be placed until you choose to accept them.
You must be able to reject non-essential cookies as easily as you can accept them. Continuing to browse the website should not be treated as consent.
8. Who we share information with
We may share personal information with trusted organisations that help us operate the business, including:
- website and platform hosting providers;
- payment processors;
- email and customer-support providers;
- analytics providers;
- IT, security and software providers;
- accountants, insurers, legal advisers and other professional advisers;
- training providers or employers where they purchased or manage access and the user has been properly informed;
- government bodies, regulators, law-enforcement agencies or courts where required by law; and
- a purchaser, investor or adviser if our business or assets are sold, reorganised or transferred.
These organisations may only use personal information for the agreed purposes and must protect it appropriately. We do not sell personal information.
9. International transfers
Some service providers may process information outside the United Kingdom.
Where personal information is transferred to a country that is not recognised as providing adequate protection, we will use an approved safeguard where required. This may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another legally approved transfer mechanism.
You can contact us for further information about the safeguards used for international transfers.
10. How long we keep information
We only keep personal information for as long as reasonably necessary.
Our usual retention periods are:
- Account access: The account remains active for 90 days from payment.
- Revision history and detailed account activity: Normally deleted or anonymised within 24 months after account access expires, unless needed to resolve a complaint, investigate misuse or meet another legal requirement.
- Purchase, invoice and transaction records: Normally retained for up to six years after the relevant financial year or transaction, where necessary for tax, accounting and legal purposes.
- Customer service and complaint records: Normally retained for up to three years after the matter is closed, or longer if a legal dispute is ongoing.
- Security and technical logs: Normally retained for up to 12 months, unless required for an investigation.
- Marketing information: Kept until you unsubscribe, withdraw consent or the information is no longer needed.
- Suppression records: We may retain your email address on a do-not-contact list for as long as necessary to respect your marketing choice.
We may retain information for longer where required by law or where it is needed to establish, exercise or defend a legal claim.
Information that has been securely anonymised may be retained for statistical and service-improvement purposes because it can no longer identify you.
11. How we protect your information
We use appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.
These measures may include:
- encryption;
- protected or hashed passwords;
- access controls;
- secure hosting;
- backups;
- monitoring and security logging; and
- limiting access to people who need the information for their work.
No online system can be guaranteed to be completely secure. You are responsible for keeping your password confidential and should contact us if you believe your account has been compromised.
12. Children and younger users
Our LGV and Driver CPC products are primarily intended for people old enough to take the relevant tests. Future car-theory products may be used by people under 18.
We aim to present privacy information in clear language that younger users can understand and to collect only the information needed to provide the service.
A child under 13 must not create an account or provide personal information without permission from a parent or legal guardian.
If we learn that we have collected personal information from a child in circumstances where appropriate permission was required but not provided, we will take reasonable steps to delete it.
Parents or guardians can contact us at help@theoryrevision.co.uk if they have questions or concerns.
13. Automated decision-making
We do not currently use personal information to make decisions that have legal or similarly significant effects on you solely by automated means.
Your revision scores may be calculated automatically, but they are provided only to help you monitor your progress and do not determine whether you can take or pass an official test.
14. Your data protection rights
Depending on the circumstances, you may have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct inaccurate or incomplete information;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to particular uses of your information;
- receive certain information in a portable format;
- withdraw consent where we rely on consent; and
- complain about how we use your information.
Some rights only apply in particular circumstances and may be limited by legal requirements.
You will not normally have to pay to exercise these rights. We may ask for information to confirm your identity before responding.
To exercise a right, email help@theoryrevision.co.uk.
We will normally respond within one month.
15. Complaints
Please contact us first if you have a concern about how we use your personal information. We will try to resolve it.
You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK regulator for data protection:
16. Changes to this policy
We may update this policy when our products, providers or legal obligations change.
The latest version will be published on our website with its updated date. If a change significantly affects how we use your information, we will take reasonable steps to bring it to your attention.
17. Contact us
For privacy questions or requests, contact:
Theory Revision Ltd
Higgison House
381–383 City Road
London
EC1V 1NW
United Kingdom
Email: help@theoryrevision.co.uk