Privacy policy
Publisher and controller: Bisai Technologies (Bisai Technologies, LLC), 131 Continental Dr, Suite 305, Newark, DE 19713, United States · Contact: contact@bisaitechnologies.com (subject "Privacy") · Effective: 19 October 2026
This policy covers the UK Driver Licence Prep website. The mobile app has its own policy at https://bisaitechnologies.com/legal/uk_driver_prep/privacy. We follow the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR), and the EU GDPR for visitors in the European Union.
What we collect and why
| Data | When | Why (legal basis) | Kept |
|---|---|---|---|
| Email address | You ask for a sign-in link or pay at checkout | To sign you in and match you to your subscription (contract) | While you have an account, then 6 years after your last payment for tax records (legal obligation) |
Session cookie udp_session (signed, http-only) |
After you sign in | Keeps you signed in for 30 days (strictly necessary) | 30 days or until you sign out |
| Payment details | At checkout | Processed by Stripe on our behalf; we never see or store your card number (contract) | Per Stripe's retention; invoices kept 6 years for tax |
| Subscription status, plan, renewal dates | From Stripe | To decide whether Pro is unlocked (contract) | While the subscription exists |
| Practice scores | When you finish a test | Stored only in your browser (localStorage) to show your best score and readiness | Until you clear your browser data |
| Server logs (IP address, user agent, URL) | Every request | Security and abuse prevention (legitimate interest) | 30 days |
| Analytics: pages viewed, actions on the site (test started and finished, score, plan clicked, checkout started), device and browser type, approximate country from the IP address | Every visit | To see how the site is used and improve it (legitimate interest; cookie only with your consent) | 12 months |
We don't sell personal information, show ads or use advertising trackers.
Service providers (processors)
- Stripe Payments Europe Ltd / Stripe, Inc. (payments, customer portal; Ireland/United States) — https://stripe.com/gb/privacy
- Resend (sends sign-in emails; United States) — https://resend.com/legal/privacy-policy
- PostHog, Inc. (analytics; PostHog US cloud, United States) — https://posthog.com/privacy
- Our hosting provider (serves the website; United States/European Union).
Some data is processed outside the UK. Where it is, we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or the International Data Transfer Addendum to the EU Standard Contractual Clauses.
Your rights
You can ask to access, correct, delete or export your personal information, object to processing based on legitimate interest, or withdraw consent, by emailing contact@bisaitechnologies.com from the address on your account. We answer within one month. Cancelling a subscription doesn't delete your account; ask us if you want it deleted. You can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Analytics
We use PostHog (PostHog US cloud, servers in the United States) to understand which pages and tests are used. Requests go through our own domain (/ingest). We collect pages viewed, a few actions (test started and finished with the score, offer shown and clicked, checkout started, sign-in, subscription confirmed), device and browser type, and an approximate country derived from your IP address. We don't record sessions or collect what you type. If you are signed in, events are linked to a one-way SHA-256 hash of your email address, never the address itself.
Until you accept, analytics runs without cookies or storage on your device: each page load is anonymous and not linked to the previous one. If you click "Accept" in the banner, PostHog sets a cookie and a localStorage entry (ph_…) to recognise your browser between visits, for up to 12 months. You can change your mind at any time with the "Cookies" link at the bottom of every page, or block analytics with a content blocker. Analytics data is transferred to the United States under the International Data Transfer Addendum to the EU Standard Contractual Clauses (and the EU Standard Contractual Clauses for visitors in the European Union).
Cookies
We use one strictly necessary cookie (udp_session), set only after you sign in, and a short-lived technical cookie (ph_evt, a few minutes) that passes an analytics event across a redirect (sign-in or checkout) and holds no personal data. The PostHog analytics cookie is set only after you accept it in the banner. Your choice is saved in your browser (analytics-consent). No advertising cookies.