Privacy Policy — Express Driving Licence

1. Who We Are

Express Driving Licence ("we", "our", "us") operates the website xpressdrivinglicense.com and provides driving licence application services across Europe. We act as the data controller for all personal data collected through our platform.

For any privacy-related enquiries, contact us at: contact@xpressdrivinglicense.com

2. Data We Collect

We collect the following categories of personal data when you use our services:

Identity data: First name, last name, date of birth, nationality
Contact data: Email address, phone number, postal address
Identity documents: Photos of your national ID card or passport, passport-sized photo, signature photo
Licence data: Desired licence category, existing licence information
Payment data: Card details (processed securely via our payment providers), bank transfer information
Technical data: IP address, browser type, device information, cookies
Usage data: Pages visited, application progress, timestamps

3. How We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

Providing our servicePerformance of contract

Processing your licence application, verifying your documents, and communicating with the relevant national licensing authority on your behalf.

Processing paymentsPerformance of contract

Handling your payment securely once your application is approved.

Communicating with youLegitimate interest / contract

Sending status updates, notifications, and responding to your enquiries.

Legal complianceLegal obligation

Complying with applicable laws, regulations, and responding to lawful requests from authorities.

Improving our platformLegitimate interest

Analysing usage patterns to enhance the user experience and service quality.

4. Who We Share Your Data With

We do not sell your personal data. We may share it with the following third parties solely to deliver our services:

National licensing authority (e.g. DVLA, ANTS, KBA, DGT…) — for official licence processing
Payment processors — for secure card and bank transfer processing
Document storage providers — Vercel Blob, for encrypted document hosting
Email providers — for sending transactional notifications
Authentication providers — Clerk, for secure account management

All third parties are contractually bound to protect your data in compliance with the GDPR.

5. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations:

Application data: 5 years from the date of your application
Identity documents: Deleted within 30 days of application completion
Payment data: As required by financial regulations (typically 7 years)
Account data: Until you request account deletion
Technical logs: 12 months

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Right of Access

Request a copy of the data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete data.

Right to Erasure

Request deletion of your data (subject to legal obligations).

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Restriction

Request we limit how we use your data in certain circumstances.

Right to Object

Object to processing based on legitimate interest.

To exercise any of these rights, contact us at contact@xpressdrivinglicense.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

7. Cookies

We use the following types of cookies on our website:

Strictly Necessary

Essential for the website to function. Cannot be disabled. Includes authentication and session cookies.

Functional

Remember your preferences (language, locale) to personalise your experience.

Analytics

Help us understand how visitors use our site so we can improve it. Data is anonymised.

8. Security

We implement industry-standard security measures to protect your personal data, including AES-256 encryption for stored documents, TLS encryption for data in transit, strict access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your data.

10. Contact & Updates

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on our website. The date at the top of this page indicates when it was last revised.

For any questions or concerns about this policy, please contact: contact@xpressdrivinglicense.com