Privacy Policy
Last updated: [insert date] — Template only, see note below.
Before going live: this is a starting template, not a finished legal document. Have a solicitor (or a reputable UK privacy-policy generator kept up to date with UK GDPR) review and finalise this before you collect data from real users. Replace every [bracketed] placeholder.
Who we are
TestSwapDirect ("we", "us") is the data controller for the personal data described below. Contact: [insert company name, registered address, and contact email].
What we collect
- Name and email address, when you create an account.
- Driving licence number and DVSA booking reference, when you add your test details — used only for matching and coordinating a swap; format-checked but not verified against DVLA/DVSA.
- Test date, test centre, and swap preferences.
- Messages you send to other users through the in-app chat.
- Payment information — handled entirely by Stripe; we never see or store your card details.
Why we collect it
To match you with a compatible learner, let you coordinate a swap, process your one-time payment, and keep the service secure. We do not sell your data to third parties.
Who we share it with
Your booking reference and name are only shared with a specific matched learner once you both agree to unlock that match. We use third-party processors to run the service: Supabase (database hosting), Resend (email delivery), and Stripe (payment processing). Each has its own privacy policy governing how they handle data on our behalf.
How long we keep it
[Insert your actual retention policy — e.g. account data retained while your account is active, deleted within X days of account closure.]
Your rights
Under UK GDPR, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Contact us at [insert email] to exercise these rights. You can also complain to the Information Commissioner's Office (ico.org.uk) if you have concerns.
Cookies
We use a single essential session cookie to keep you logged in. This is strictly necessary for the service to function and isn't used for tracking or advertising. [Update this section if you later add analytics/marketing cookies.]
Contact
Questions about this policy: [insert contact email].