Privacy policy

Updated 08 August 2022



The privacy of our users is extremely important to us and therefore we encourage all users to read this policy very carefully because it contains important information regarding:


    • who we are;
    • how and why we collect, store, use and share personal information;
    • your rights in relation to your personal information; and
    • how to contact us and supervisory authorities in the event that you have a complaint.

Who we are

EXAM ROUTES LTD (‘we’, ‘us’, ‘our’) collect, use and are responsible for storing certain personal information about you (‘you’, ‘your’, ‘yours’).


The personal information we collect and use

Personal information is information which you can be identified from (and does not include any anonymised forms of information).


1. Types of personal information

We may process the following types of personal information in relation to you including:


        • names, photographs, address, website, contact details, email, statistics.


We collect and process location information when you sign up for and use the Services. We do not track your device location while you are not using our website or ap, but in order to provide our core services, it is necessary for us to track your device location while you use our platofrms. If you would like to stop the device location tracking, you may do so at any time by adjusting your device settings.


How your personal information is collected

This section describes how the above types of personal information are collected by us. Your 

personal information will be collected as follows:


1. Personal information obtained from you directly

We will sometimes obtain information from you directly, including when you:


        • subscribe to the newsletter, purchase a product, create a user profile, create a listing, claim a listing, contact us using the contact us form and chat service.


2. Content you share

We gather information from the photos, posts, comments, likes, reviews, and other content you share on the Services, including when you participate in partner events or submit routes and recommendations.

3. Personal information obtained from third parties

We will sometimes obtain information about you from third party sources. Usually this shall be from the following entities:


        • DVSA GOV;
        • Companies House

4. Additional sources

We shall collect personal information in relation to you from the following sources: 


        • From our Exam Routes mobile phone application.


5. Statistics

We keep various anonymous or aggregated statistics based on which one cannot identify an individual. For example, we might keep statistics about how many users viewing our services. Although these statistics are made by conversion or analysis of real personal data, the statistic findings or results are not personal data.


6. Changes to the way in which we collect your personal information

In the event that we need to obtain personal information in relation to you from any other source than those described above, we shall notify you of this.


How we use your personal information

1. General purposes

In general, your personal information will generally be processed for the following purposes:


        • To create the contract for sale our products and provide you with the service of adding and listing your business on our platforms.


2. Use of your information for marketing purposes

We have described above that one of the general purposes for which your data shall be processed is for our marketing purposes.

We wish to make you aware that you have the right to object or to opt-out of any direct marketing by:


Lawful basis for processing of your personal information

We have described above the purposes for which we may process your personal information. These purposes will at all times be justified by UK data protection law.

1. General lawful bases

The lawful basis upon which we are able to process your personal data are:


(1) where we have your consent to use your data for a specific purpose;

(2) where it is necessary to enter into a legal contract with you or to perform obligations under a legal contract with you;

(3) where it is necessary to enable us to comply with a legal obligation;

(4) where it is necessary to ensure our own legitimate interests or the legitimate interests of a third party (provided that your own interests and rights do not override those interests). Wherever we rely upon this basis, details of the legitimate interests concerned shall be provided to you;

(5) where we need to protect your own vital interests (or the vital interests of another person); and/or

(6) where it is needed in the public interest (or where we are acting in our official functions), provided that the task or function has a clear basis in law.


In general, in order to meet the purposes we have described above, we will process your personal information where we have your express consent on each occasion that the data is processed.


2. Lawful bases specifically applicable to marketing

We are able to lawfully process your personal data for marketing purposes because it is in our interest to do so. Our legitimate interests relevant to our marketing needs are:


        • To ensure that we can promote our business and maintain and improve the standard of our products and services.

Sharing your personal information

On any occasion where any of your personal information is shared with any third party, we shall only permit them to process such information for our required purposes, under our specific instruction, and not for their own purposes. We are required to enter into a formal legal agreement to enable such sharing to take place.

We do not anticipate that we will need to share your personal information with any third party. We will notify should this position change.


Necessity of information

Where information is requested from you and you do not provide this:


    • It may prevent you from using certain features of the website and/or receiving products.


We will inform you at the point of collecting information from you, whether you are required to provide the information to us.


How long your personal information will be kept

Your personal information will only be kept for the period of time which is necessary for us to fulfil the above purposes.

We envisage that your personal information shall be retained by us as follows:


    • User account details will be until the user deleted his account.
    • Verification documents will be kept until your account is verified.


After the period described above, your information shall be properly deleted or anonymised.


Keep your information secure

We will ensure the proper safety and security of your personal information and have measures in place to do so. We will also use technological and organisation measures to keep your information secure. These measures are as follows:


    • We use encryption to keep your data private while in transit
    • We review our information collection, storage and processing practices, including physical security measures, to prevent unauthorised access to our systems
    • We restrict access to personal information to our employees, contractors and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.


We have proper procedures in place to deal with any data security breach, which shall be reported and dealt with in accordance with data protection laws and regulations. You shall also be notified of any suspected data breach concerning your personal information.



Our website is not intended for children (anybody under the age of 18). We do not intend to collect data from children.


Your rights

Under the UK General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:


(1) fair processing of information and transparency over how we use your use personal information;

(2) access to your personal information and to certain other supplementary information that this Privacy Statement is already designed to address;

(3) require us to correct any mistakes in your information which we hold;

(4) require the erasure of personal information concerning you in certain situations;

(5) receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this information to a third party in certain situations;

(6) object at any time to processing of personal information concerning you for direct marketing;

(7) object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;

(8) object in certain other situations to our continued processing of your personal information, or ask us to suspend the processing procedure in order for you confirm its assurance or our reasoning for processing it;

(9) object to processing our your personal information where we are doing so in reliance upon a legitimate interest of our own or of a third party and where you wish to raise to an objection to this particular ground;

(10) otherwise restrict our processing of your personal information in certain circumstances;

(11) claim compensation for damages caused by our breach of any data protection laws; and/or

(12) in any circumstance where we rely upon your consent for processing personal information, you may withdraw this consent at any time.


For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on your rights under the General Data Protection Regulations.

If you would like to exercise any of these rights please contact our Data Protection Officer in the following manner:



When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding deletion of your data that we cannot resolve with you directly.


Changes to the privacy policy


This privacy policy was published on 8th August 2022 and last updated on 8th August 2022. We may change this privacy policy from time to time and will notify you of any changes by:


    • By email, if you have opted in to receive emails.
    • By a notice on the website header
    • By the notice in the news section of the website


Contacting us

Our Data Protection Officer is Mario Wageman.

Any requests or questions regarding the use of your personal information should be made to the above named person using the following method:


Sources of further Information

This policy provides key information to you regarding the processed of your information. For certain areas of our information processing, we have further comprehensive details contained in other documentation. This information can be located as follows:


    • As per the above description of our purpose and information sharing, we will use google maps as part of our service. Google maps operate under the following terms: www.policies.google.com