Privacy Policy: Mindful Theory Driving

Last updated: July 19, 2025

This Privacy Policy explains how Mindful Clinical Question Banks (“we,” “us,” or “our”), an initiative of Mindful Gaming UK, collects, uses, discloses, and protects your personal data when you use our website, products, and services (collectively, “our Site”).

We are committed to protecting your privacy and handling your personal data in a transparent and secure manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Mindful Gaming UK, through its initiative Mindful Theory Driving, is deeply committed to protecting your privacy and personal data. This Privacy Policy outlines how we collect, use, store, and protect your information when you use the Mindful Theory Driving website and other related services we provide. As a charity dedicated to ethical practices and social impact, your trust and the security of your data are paramount to us.

1. Our Commitment to Data Protection

Mindful Gaming UK takes data protection seriously, especially given the nature of educational content and the potential for a large user base. We ensure:

• Compliance: Our charity actively invests in and adheres to relevant data protection regulations, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA). We maintain a robust framework to ensure compliance at scale.
• Data Protection Licence: Mindful Gaming UK operates under a Data Protection Licence, ensuring our practices meet the required standards for handling personal data.
• Safeguarding: We maintain comprehensive safeguarding policies to protect all individuals interacting with our platforms.
• Trained Personnel: All our team members receive regular and thorough training in data security, privacy governance, and compliance best practices. This training is integral to our operational protocols for handling user data.

2. Information We Collect

We collect information to provide and continuously improve our services to you and our growing community. This may include:

• Account Information: When you register for an account, we collect personal details such as your name, email address, and chosen password.
• Subscription & Payment Information: Through our chosen payment processing partners (e.g., Stripe, PayPal), we process subscription details. Payment transactions are handled securely by these integrated third-party payment gateways. We do not store your full payment card details on our servers.
• Usage Data: We collect information about how you interact with our platform, including your progress through study modules, quiz attempts, scores, time spent on content, and features accessed. This data helps us understand user behaviour and continually improve the learning experience for everyone.
• Content Interaction Data: If you utilize AI-powered features (e.g., for explanation clarification, concept identification, or personalized guidance related to the Highway Code), the text you input or selected for these features, and the AI’s responses, may be processed to deliver the service and for continuous improvement of our AI models. This processing is conducted with strict confidentiality controls and, where possible, in an aggregated and anonymized manner to protect individual privacy while enhancing the service for all users.
• Technical Data: Information about your device and internet connection, including IP address, browser type, operating system, and access times, which helps us ensure platform compatibility, security, and optimal performance for all users.
• Communications: Records of your correspondence with our customer support team or other charity representatives, which helps us provide effective support to our user community.

3. How We Use Your Information

Your information is used for the following purposes:

• To Provide & Maintain Services: To operate the platform, manage your account, grant access to study materials, quizzes, and hazard perception videos, and process your subscriptions, ensuring a smooth experience for all users.
• To Improve & Personalize: To understand how users interact with our content and features. This allows us to continuously enhance the learning experience, develop new content, and personalize your study journey, thereby serving our large user base effectively.
• AI-Powered Features: To process your requests for explanations, concept identification, and personalized guidance using the Gemini API, providing you with enhanced learning support.
• Customer Support: To respond to your inquiries, provide technical assistance, and resolve issues efficiently for a broad user base.
• Security & Fraud Prevention: To protect our platform and all users from unauthorized access, fraud, and other illegal activities, which is critical for a high-volume service.
• Compliance: To comply with legal obligations, enforce our terms and conditions, and protect our rights.
• Charitable Impact: To generate revenue that is directly reinvested into Mindful Gaming UK’s broader charitable activities and social impact initiatives.

4. How We Share Your Information

We do not sell your personal data. We may share your information with trusted third parties only in the following limited circumstances:

• Payment Gateways: To process your subscription payments securely (e.g., Stripe, PayPal).
• Service Providers: With third-party vendors and service providers who perform services on our behalf, such as hosting (e.g., Kinsta), email delivery, and analytics. These providers are contractually bound to protect your data and only use it for the purposes for which we disclose it to them, supporting our operations for a large user community.
• AI Service Providers: For AI-powered features, relevant data (e.g., question text, user inputs) may be sent to the Gemini API for processing. We ensure this is done securely and in compliance with data protection principles.
• Legal Requirements: When required by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• With Your Consent: For any other purpose with your explicit consent.

5. Data Security

We implement robust security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures are designed to be effective at scale and include:

• Secure Hosting: Our platform is hosted on secure servers (e.g., Kinsta), which provide advanced security features and regular backups, crucial for high-traffic websites.
• Encryption: Data transmitted to and from our platform is encrypted using SSL/TLS.
• Access Controls: Strict access controls are in place to limit who can view or process your personal data, reinforcing security for all user accounts.
• Regular Security Audits: We conduct regular security audits and vulnerability assessments to continuously strengthen our defenses.
• Trained Staff: As mentioned, all our team members are rigorously trained in data security and governance, forming a crucial human layer of defense.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. When your data is no longer required, we will securely delete or anonymize it, particularly important when managing data from a large number of users over time.

7. Your Data Protection Rights

Under data protection laws, you have certain rights concerning your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data under certain circumstances.
• Right to Restrict Processing: You can request that we limit the way we use your personal data.
• Right to Object to Processing: You can object to our processing of your personal data in certain situations.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us using the details provided below. We may need to request specific information from you to help us confirm your identity and ensure the security of your data.

8. Cookies

Our website uses cookies to enhance your user experience, analyse site usage, and support our marketing efforts. You can control cookie preferences through your browser settings.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, especially as our platform grows and evolves. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through other communication channels. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Mindful Gaming UK, Charity Number 1212285

For general enquiries, charity information, or matters relating to Mindful Gaming UK’s broader services (therapy, advice network): info@mindfulgaminguk.org (Queries picked up by charity staff)

For technical support related to the Mindful Clinical Question Banks website, feedback on questions, site improvements, or subscription issues: support@mindfultheorydriving.org (Queries picked up by website development team)

11. Crown Copyright and Data Protection Licence

The driving theory test questions and hazard perception video clips used on this platform are derived from content supplied by the Driver and Vehicle Standards Agency (DVSA).

Crown copyright material is reproduced under licence from the Driver and Vehicle Standards Agency (DVSA), which does not accept any responsibility for the accuracy of the reproduction.

This platform operates under a valid Data Protection Licence, ensuring our processing of personal data complies with all relevant UK data protection legislation.ncourage you to review this policy periodically.