Legal

Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains how The Global Driver ("we", "us", "our") collects, uses, stores, and protects personal data when you visit our website, create an account, or purchase a course. We are the data controller of the personal data you provide.

1. Information we collect

  • Account data: name, email address, password hash, and (if you sign in with Google) your Google account identifier and profile photo.
  • Purchase data: the courses you buy, the amount paid, the currency, and a payment-processor reference. Card details are processed by Stripe and never reach our servers.
  • Learning data: lessons you open, quiz answers you submit, and certificates you earn.
  • Technical data: IP address, browser type, device, referrer, and standard request or error logs needed to keep the service secure and troubleshoot issues.
  • Support data: the contents of any email or message you send us.

2. How we use your data

  • Provide the courses, quizzes, and downloadable resources you purchase.
  • Process payments, issue receipts, and handle refunds.
  • Send transactional emails (sign-in confirmations, receipts, password resets).
  • Monitor reliability, prevent abuse, and troubleshoot technical issues.
  • Comply with legal obligations (tax records, fraud prevention).

3. Legal basis (UK/EU users)

We rely on the following lawful bases under the UK GDPR / EU GDPR: contract (to deliver the course you purchased), legitimate interests (to keep the service secure and improve it), and legal obligation (to retain tax and accounting records).

4. Cookies and analytics

We do not currently use analytics cookies or advertising cookies. We use a single first-party cookie strictly necessary to keep you signed in. Basic technical request data may be processed in server logs for security, fraud-prevention, and debugging purposes.

5. Sharing your data

We share personal data only with processors who help us run the service:

  • Stripe Payments Europe Ltd. (payment processing)
  • Supabase Inc. (database and authentication)
  • Google LLC (Google sign-in, optional)

We never sell your personal data. Some of these processors are located outside the UK/EEA; in those cases we rely on Standard Contractual Clauses or equivalent safeguards.

6. Data retention

Account and learning data are kept while your account is active and for up to 24 months after closure, unless we are legally required to keep records longer (e.g. invoices retained for 6 years). You can request deletion at any time (see Section 8).

7. Security

We use TLS in transit, encrypted storage at rest, row-level security on our database, and role-based access controls. No system is perfectly secure; please use a strong, unique password.

8. Your rights

You have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Erase your account and associated data (subject to legal retention).
  • Object to or restrict processing.
  • Receive a portable copy of your data.
  • Complain to a supervisory authority (in the UK: the Information Commissioner's Office, ico.org.uk).

To exercise any of these rights, email privacy@theglobaldriver.com.

9. Children

Our service is intended for adult learners (16+). We do not knowingly collect data from children under 16. If you believe a child has provided us with data, please contact us so we can remove it.

10. Changes

We may update this Policy from time to time. Material changes will be announced on this page and, where required, by email.

11. Contact

The Global Driver — privacy enquiries: privacy@theglobaldriver.com.

See also our Terms of Service, Refund Policy, and Educational Disclaimer.