Privacy Policy

IDP Drive ("we", "us", or "our") operates idpdrive.org (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal information is:

• IDP Drive (idpdrive.org)
• Based in London, United Kingdom
• Contact: support@idpdrive.org

2. Information We Collect

2.1 Information you provide directly

When you apply for an International Driving Permit through our website, we collect:

• Identification data: full name, date of birth, nationality, home address
• Driving license information: license number, issuing country, issue and expiry dates, categories
• Contact details: email address, phone number
• Photo: passport-style photo uploaded for your IDP
• Payment information: processed securely by our payment providers (we do not store card details)
• Support communications: messages you send us via email or contact forms

2.2 Information collected automatically

When you visit idpdrive.org, we automatically collect:

• Device and browser data: IP address, browser type, operating system, device type
• Usage data: pages visited, time spent, referring website, clicks
• Cookies and similar technologies: see our Cookie Policy for details

3. How We Use Your Information

We process your data for the following purposes and under the following legal bases (UK GDPR Art. 6):

• Contract performance: to issue and deliver your IDP, process payments, handle orders and refunds
• Legal obligation: to comply with tax, accounting, anti-fraud, and consumer protection laws
• Legitimate interests: to prevent fraud, secure our website, improve our services, and send service-related notifications
• Consent: for marketing emails (only if you opt in) and non-essential cookies

4. Cookies and Tracking Technologies

We use cookies and similar technologies to make our website work and to understand how visitors use it. We use:

• Essential cookies (always on) — required for the website to function, such as session management and checkout
• Analytics cookies via Google Analytics 4 — to measure traffic and improve our site
• Marketing cookies via Meta (Facebook) Pixel — to measure ad performance and show relevant content

Non-essential cookies are only set with your consent. You can manage your preferences at any time via the Cookie Preferences link in our footer. Full details are in our Cookie Policy.

5. Who We Share Your Data With

We never sell your personal data. We share it only with trusted third parties who help us deliver our service:

• Payment processors: PayPal, Stripe, and card networks (Visa, Mastercard, American Express) — to process transactions securely
• IDP issuing partners: accredited authorities that print and validate your International Driving Permit
• Courier services: for physical delivery of IDPs when applicable
• Hosting and email providers: to run our website and communicate with you
• Analytics and marketing providers: Google (Analytics), Meta (Pixel) — only with your consent
• Legal authorities: if required by law or to protect our rights

6. International Data Transfers

Some of our service providers are based outside the United Kingdom and the European Economic Area. When we transfer your data internationally, we use appropriate safeguards such as Standard Contractual Clauses or UK adequacy decisions to ensure your information remains protected.

7. How Long We Keep Your Data

We retain your personal data only as long as necessary:

• Order records: up to 6 years, to comply with UK tax and accounting laws
• IDP application data: for the validity period of your permit plus 2 years
• Marketing consent: until you withdraw consent
• Support communications: up to 3 years after the last interaction

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure ("right to be forgotten") — request deletion under certain conditions
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — to processing based on legitimate interests or direct marketing
• Right to withdraw consent — at any time, for processing based on consent
• Right to lodge a complaint — with the UK Information Commissioner's Office (ICO)

To exercise any of these rights, email us at support@idpdrive.org. We will respond within one month.

9. Data Security

We protect your data with industry-standard measures, including 256-bit SSL encryption, secure servers, access controls, and regular security audits. However, no transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our service is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have collected data from a child, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes means you accept the updated policy.