YOUR PRIVACY RIGHTS AND OUR PRIVACY POLICY

Effective Date: September 11, 2026

Prat City LLC, doing business as Traffic Safety Institute (“we,” “us,” or “our”), provides this Privacy Policy to explain how we collect, use and disclose personal information and the choices available to you. It applies to our website, landing pages, course platform, customer communications and related services that link to this policy.

Personal information means information that identifies you or can reasonably be linked to you or your device. Your use of our services is also subject to our Terms of Service (https://www.trafficsafetyinstitute.com/terms).

Our services may link to third-party websites or offer third-party features. Those companies’ independent privacy practices are described in their own policies. This policy explains our collection and disclosure of information in connection with those features.

Your use of the services does not, by itself, constitute consent to optional tracking or advertising.

1. Information we collect

Depending on how you interact with us, we collect the following categories of information:

Some information, such as a driver’s license number and account credentials that allow access to an account, is sensitive personal information under certain privacy laws. We process this information for functions such as authentication, account security, course administration and required reporting. You may request any limits on its use or disclosure available under applicable law.

Payments are processed through payment providers. We receive transaction information needed to administer purchases and provide support.

You may choose not to provide information, but we may be unable to register you, provide a requested service or report course completion without required information.

2. Where information comes from

We obtain information directly from you, automatically through your use of our services, and from service providers, advertising and analytics partners, referral sources, government entities and publicly available sources. This can include information needed to administer a course, verify case or completion details, communicate with you or promote our services. Information obtained outside the website is covered when used for these purposes.

3. How we use information

We use personal information to:

• Register accounts, verify information, deliver courses and administer assessments and completion records.
• Process payments, refunds, purchases and certificate delivery.
• Provide support and send account, course and transaction communications.
• Send marketing communications and review invitations, subject to your choices and applicable law.
• Operate, maintain, secure and improve our services, including troubleshooting and measuring usage.
• Assist internal analysis and administrative work using software and AI tools.
• Measure advertising, attribute referrals and show relevant advertising, subject to applicable consent and opt-out requirements.
• Meet legal and regulatory obligations, resolve disputes and protect the rights and security of our users and business.

4. Who receives information

Service providers and contractors. We disclose information as needed to providers and contractors supporting hosting, storage and backups; account authentication and security; payments; email and SMS delivery; customer support; accessibility; validation; analytics and technical administration; marketing communications; reviews; document management; and printing, mailing and fulfillment. Examples include AWS for infrastructure and transactional email, Stripe for payments, Intercom for support, and CleverTap for marketing communications and reporting. We also use consent-management, tag-management and security tools where relevant to the service. The information involved depends on the function, such as contact details for communications, transaction details for payments, course records for support, and technical data for hosting or troubleshooting.

AI tools. We may use AI tools, including OpenAI’s ChatGPT and Anthropic’s Claude, to assist with internal analysis and administrative work. Information supplied to these tools may include identifiable student information within the records being analyzed.

Advertising and analytics partners. As described below, partners may receive information for advertising and measurement and may process it for their own purposes under their privacy policies.

Courts and government agencies. We disclose identification, course, citation and completion information to the motor vehicle agencies, licensing or education authorities and courts responsible for the particular course when needed to verify eligibility, administer the course, report completion or meet legal requirements. Depending on the course and state, recipients include the California Department of Motor Vehicles, Florida Department of Highway Safety and Motor Vehicles, Virginia Department of Motor Vehicles, Texas Department of Licensing and Regulation, Nevada Department of Motor Vehicles, and relevant courts or court administrators.

Arizona defensive driving. For Arizona defensive driving students, we report required registration, payment and completion information through the Arizona Defensive Driving Database and to the Arizona Supreme Court Administrative Office of the Courts and the court with jurisdiction. Database information is confidential, not a public record. We access it only for eligibility and required course administration, never for solicitation, sale or other commercial exploitation. Third-party requests for database information are referred to the responsible court administration staff. These restrictions also limit the general provider, AI and advertising descriptions in this policy.

Notarization and document delivery. Where a course requires notarized forms or delivery of records, we disclose the identification and documents needed to the notary, electronic-notarization or document-delivery provider. This includes applicable Virginia course workflows.

Public or requested disclosures. Reviews and other content you choose to publish may be visible to others. We also disclose information when you request or authorize a particular disclosure.

Aggregated information. We may create, use and share aggregate statistics about our services for reporting, analysis and service improvement. Such statistics do not reasonably identify individual users. Information that can still reasonably be linked to you or your device remains subject to this policy.

Legal requests and protection of rights. We may disclose personal information, including student identification, course, citation, completion, transaction and communication records, to courts, government agencies, law enforcement or other parties when required by applicable law or valid legal process, such as a subpoena, court order or search warrant. We may also access, preserve or disclose information when reasonably necessary and permitted by law to protect rights and safety, investigate fraud, enforce our Terms of Service or other agreements, or defend legal claims.

Business transfers. We may disclose information to parties evaluating or completing a merger, acquisition, financing or transfer of business assets, subject to applicable protections.

5. Advertising, analytics and your choices

We use Google advertising and analytics services and Microsoft Advertising and Clarity. Clarity provides behavioral measurement, heatmaps and session replay to help us understand website use and improve our services and advertising. Our campaigns may also use Quora or Nextdoor when we advertise on those platforms.

We may also use Meta (Facebook and Instagram) for future advertising campaigns. If enabled, Meta may receive online and contact identifiers, website interactions and conversion information for advertising and measurement, subject to the consent and opt-out choices below, including GPC where applicable.

These activities can involve online and device identifiers, website interactions, referral and campaign information, approximate location and contact identifiers used for measurement. Advertising and analytics partners may combine information with information obtained through other services, subject to their settings, terms and your choices.

You can learn about the partners’ practices in the Google Privacy Policy (https://policies.google.com/privacy), Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement), Quora Privacy Policy (https://www.quora.com/about/privacy), Nextdoor Privacy Policy (https://help.nextdoor.com/s/article/Privacy-Policy) and, for any future Meta campaigns, the Meta Privacy Policy (https://www.facebook.com/privacy/policy/).

Disclosures of identifiers and online activity for cross-context behavioral advertising may be considered a “sale,” “sharing” or “targeted advertising” under applicable privacy laws, even when no money is exchanged. You may opt out using Privacy Choices / Do Not Sell or Share My Personal Information, or contact us using the details below.

California visitors. We use an opt-out approach, subject to the additional protection for minors described in section 11. Optional analytics and advertising technologies may operate unless you opt out using our privacy controls. You can change your choices through our cookie settings or use Privacy Choices / Do Not Sell or Share My Personal Information to opt out of sale or sharing for advertising.

Visitors elsewhere in the United States. We use an opt-in approach. Optional analytics and advertising technologies remain off until you give the relevant consent. You can refuse optional categories or withdraw consent through our cookie settings. Necessary technologies supporting core services are handled separately.

We honor recognized opt-out preference signals, including Global Privacy Control (GPC), as requests to opt out of sale or sharing where applicable. You can send GPC by enabling it in a supporting browser or browser extension. You do not need to submit a separate request through our cookie banner for us to honor that signal. A signal applies to the browser or device sending it. Where we can associate it with your account, we also apply it to that account as required by applicable law. You may contact us to request that your choice be associated with other information we hold. Outside the United States, consent and opt-out requirements depend on applicable law.

We do not respond to the older browser “Do Not Track” setting. This is separate from GPC, which we honor as described above. Use our privacy controls or a recognized opt-out signal to communicate your preferences. Privacy choices may need to be repeated when you use another browser or device or clear stored preferences.

6. Cookies and similar technologies

We and our providers use cookies, local storage, pixels and similar technologies to operate the services, remember preferences, support features, measure activity and deliver or measure advertising. Some technologies send information without storing a cookie.

Necessary technologies support functions such as secure sessions, fraud prevention and remembering privacy choices. Other technologies are managed through the relevant functional, analytics or advertising categories. Blocking certain technologies may affect features you choose to use.

The table below describes the technologies identified on our services and their stated purposes and durations. Cookie duration is different from how long information may be retained in our systems or by a recipient.

You can also manage cookies through your browser. Optional third-party features, such as embedded videos or social sign-in, may involve the feature provider’s processing when you use them.

7. Email and SMS preferences

Our emails may use tracking technologies to tell us whether a message was opened or a link was clicked. We use this information to measure engagement and improve communications, subject to applicable privacy choices.

You can unsubscribe from marketing emails using the link in those messages. You can opt out of SMS messages by following the instructions in the message or contacting us. Opting out of marketing does not prevent us from sending necessary account, transaction or course communications through appropriate channels.

8. Retention and security

We retain information for as long as reasonably necessary for the purposes described here, considering course and reporting requirements, account administration, transaction records, support needs, legal obligations and disputes. Different records may have different retention periods. Deletion requests are subject to applicable exceptions, including records we must retain for legal or regulatory reasons.

For Arizona defensive driving records, we maintain confidentiality, transmit confidential information by U.S. Post, fax or secure electronic file, and follow the applicable court administration requirements for system security. When those records are disposed of, we render personal and financial information illegible.

We use administrative, technical and organizational measures designed to protect information, including encrypted website connections and access controls intended to limit access to personnel and providers who need information for their assigned work. No system or transmission method is completely secure.

Protect your password or social sign-in credentials, limit access to your devices, and sign out when using a shared device. Contact us if you suspect unauthorized account access. A third-party sign-in provider may offer additional security controls through its service.

Our providers and personnel may process information in locations outside your state or country. Where applicable, we use the protections required for those transfers.

9. Privacy rights and requests

Depending on where you live and the laws that apply, you may have rights to access or obtain a copy of your information, learn its sources and uses, correct inaccuracies, request deletion, opt out of sale or sharing or targeted advertising, limit certain uses of sensitive information, and withdraw consent where processing relies on it. You may exercise applicable rights without unlawful discrimination or retaliation.

California residents may request information about the categories and specific pieces of personal information collected, the categories of sources and recipients, and the purposes of collection, use and disclosure. Under California Civil Code section 1798.83, where applicable, residents may also request the categories of personal information disclosed for third parties’ direct marketing and the names and addresses of those third parties. Send these requests to the privacy contact below.

Send requests to support@trafficsafetyinstitute.com. You can also contact our live chat for assistance. We may ask for information reasonably necessary to verify your identity for access, correction or deletion requests, using information already associated with your account where possible. Opt-out requests do not require the same identity verification. An authorized agent may submit a request, and we may require proof of authority and any verification permitted by law.

Account updates and closure. Where available, account settings let you review or update profile and contact information. You can also request corrections, account closure or deletion through the email address below. Closing an account or changing a profile does not automatically erase records we must retain for reporting, transactions, disputes or other legal requirements. Earlier versions of records may be retained where needed for those purposes, subject to applicable law. Aggregate statistics that do not reasonably identify you may remain after an account is closed.

We respond within the time required by applicable law. If we cannot fulfill a request in whole or in part, we explain the reason. Where you have a right to appeal, email the contact below with the subject “Privacy request appeal” and explain the decision you want reviewed. We will communicate the outcome within the applicable deadline and provide any required information about contacting your state attorney general or other privacy regulator.

10. Additional California disclosures

The following disclosures supplement the sections above for California residents. They describe the 12 months preceding the effective date of this policy. The categories overlap; for example, a driver’s license number is both an identifier and sensitive personal information.

Collection and disclosures for business purposes. During that period, we collected and disclosed the following categories to providers and contractors for the purposes below. The examples describe the information we collect within each category.

Section 2 describes our sources. Courts and government agencies receive the records described in section 4 for course administration and required reporting. Retention is governed by the criteria in section 8.

AI-tool providers may also receive information from these categories when it is included in records submitted for the internal analysis and administrative purposes described in section 4.

Sale or sharing for advertising. During the same period, we disclosed online identifiers and associated contact identifiers, internet or other electronic network activity, and commercial information such as enrollment or purchase-conversion events to advertising networks and advertising-measurement partners. The purposes were measuring campaigns and conversions, attributing referrals, and delivering or improving relevant advertising. These disclosures may constitute sale or sharing under California law, including when we receive no monetary payment. Section 5 identifies current or occasional advertising partners and explains how to opt out, including through GPC. The 12-month disclosure covers relevant activity during that period even when a campaign or integration has since stopped.

Sensitive personal information.

We use and disclose sensitive personal information only as reasonably necessary to provide requested services, verify identity, maintain and secure accounts, prevent fraud, and meet legal obligations, including course reporting and valid legal process. We do not use identity documents, driver’s license numbers, passwords, other security credentials or the contents of student course records for advertising or unrelated profiling. These records are used for service, security and legal purposes. Advertising measurement may include enrollment or purchase-conversion events as described above.

11. Minors

Our courses are intended for individuals aged 13 and older, subject to any additional eligibility requirements for the particular course. We do not accept enrollments from anyone under 13. If you believe we have collected or disclosed information about a child improperly, contact us at support@trafficsafetyinstitute.com so we can review and address it, including deleting information collected improperly where required. A parent or guardian may contact us about rights available under applicable law.

We do not sell or share personal information of users we know are under 16 or use it for targeted advertising. The general California opt-out approach does not override this protection.

12. Changes and contact

We may update this policy as our services or requirements change. We will post the updated policy with its effective date and version. For material changes affecting information we have already collected, we will endeavor to provide advance notice by email or a prominent notice on our website. We will provide any additional notice and obtain consent where required by law. Continued use of our services alone does not replace consent where consent is required.

For privacy questions, rights requests or course assistance, contact support@trafficsafetyinstitute.com or our 24/7 live chat. You may also send a privacy request to the mailing address below.

Prat City LLC dba Traffic Safety Institute

133 N Altadena Dr #215

Pasadena, CA 91107