1. Who operates this platform
UniStep UAE operates this independent driving-learning platform. Contact: privacy@unistep.pk. Operator address: Confirm before production.
2. Data we process
We may process name, email, hashed authentication credentials, language, timezone, device-session information, IP address, user agent, lesson and quiz activity, scores, progress, bookmarks, achievements, communication records, consent evidence, legal acceptance and privacy-request records.
3. Why we process data
We use data to provide accounts, synchronize learning, score examinations, secure sessions, recover accounts, prevent abuse, provide support, deliver security messages and fulfil privacy requests. Optional analytics, personalization and marketing remain disabled unless appropriate consent is granted.
4. Legal grounds and consent
Processing may rely on delivering the requested service, protecting the platform, meeting legal obligations or consent where consent is appropriate. Optional consent can be changed in the Privacy Center without disabling essential learning functions.
5. Sharing and service providers
Core learner data is not sold. Limited data may be handled by contracted hosting, backup, email, security and support providers under appropriate controls. Analytics and advertising disclosures must match the SDKs actually enabled.
6. International transfers
Any processing outside the learner's country must be documented and protected through applicable legal, contractual and technical safeguards.
7. Retention
Information is retained only for documented operational, security, contractual and legal needs. Expired tokens, old email payloads, anonymous consent records and completed privacy cases are minimized or anonymized under configured rules. Legal holds may temporarily prevent deletion.
8. Security
Controls include TLS in transit, password hashing, hashed one-time tokens, restricted administration, audit events, session revocation, encrypted transactional-message payloads, backups and controlled deployments.
9. Your choices and rights
The Privacy Center supports consent changes and requests for access, portability, correction, restriction, objection or deletion. Identity verification may be required. Limited records may be retained for security, fraud prevention, dispute handling or legal duties.
10. Children
The platform is not intentionally designed to collect children's personal data without appropriate authorization. Age and guardian controls require approval before a child-directed release.
11. Policy changes
Material versions are published with an effective date and version number. Learners may be asked to accept a new version.
12. Contact
Submit privacy questions through the Privacy Center or email privacy@unistep.pk.
13. Advertising-supported free access
The website is provided without learner subscription fees and may be supported by Google AdSense advertising. When advertising is activated, Google and approved advertising technology providers may process device, browser, approximate location, consent and ad-interaction information to select, deliver, measure and protect advertisements.
Advertising remains disabled until the publisher account, ads.txt record and required consent controls are configured. Ads are excluded from account, authentication, privacy, administration and interactive assessment pages. Advertising data is not used to determine quiz scores, learner eligibility or access to educational content.