Privacy policy

Last Updated: 08/15/2026

Welcome to Highway Traffic School. We value your trust and are committed to protecting your privacy. This Privacy Policy explains how Highway Traffic School, LLC ("we," "us," "our," or the "Company") collects, uses, shares, retains, and protects your personal information when you use www.highwaytrafficschool.com (the "Website") and our courses, certificates, reporting, and related services (the "Services").

How this document works. Each section begins with a short plain-English summary marked "In short." Those summaries are for convenience only — the full text of each section controls. This Privacy Policy is part of, and should be read with, our Terms of Use. The Services are intended for residents of the United States.

Key Points at a Glance

A convenience summary only — the numbered sections below control.

  • We collect what your state requires to enroll you, verify your identity, and report your completion — including, where required, your driver license number, partial SSN, citation details, and an identity-verification photo (Sections 2–3).
  • We don’t sell your data for money — and you can opt out of ad "sharing" (Section 7).
  • Your mobile information is never shared with third parties or affiliates for their marketing (Section 5).
  • Biometric data is consented, encrypted, and destroyed within one year of registration (Section 3).
  • Your card number never touches our servers — payments go directly to a Level 1 PCI-certified processor (Section 9).
  • Records are kept three years, then permanently deleted — and you can request deletion sooner (Section 10).
  • You can access, correct, or delete your data and opt out of marketing at any time (Section 11).

1. Scope and Acceptance

In short: This policy covers our website and courses. Using them means you've read it.

This Privacy Policy applies to personal information we collect through the Website and the Services. By using the Website or the Services, you acknowledge that you have read and understood this Privacy Policy. It does not apply to websites or services operated by third parties, including courts, state agencies, and payment processors, whose own policies govern their handling of your information.

2. Information We Collect

In short: We collect your contact, license, citation, and course information because your state, court, or regulator requires it to enroll you, verify who you are, and report your completion — plus standard device and communication data.

Personal and enrollment information — collected from you to register you, verify your identity, deliver your course, and report your completion as your state or court requires:

  • Name, address, email, and mobile phone number;
  • Date of birth and demographic information required by your state's reporting forms;
  • Driver license or identification card number and, where your state or court requires it, partial Social Security number, alien number, or I-94 admission number;
  • Violation information (case or citation number, violation code, violation date, court date, court and county);
  • Photos of your driver license, ticket, or other court documents that you upload;
  • Identity-verification images as described in Section 3 (Biometric Information);
  • Payment information (handled as described in Section 9 — full card numbers never reach our servers).

Course information: your course progress, quiz and exam scores, timestamps, and completion status.

Device information: IP address, browser type, operating system, and device identifiers.

Communication data: correspondence you have with us, including emails and text messages.

We collect sensitive identifiers (such as a partial Social Security number or immigration document numbers) only where the state, court, or regulator associated with your course requires them for enrollment, identity verification, or completion reporting.

3. Biometric Information

In short: If your course requires identity verification, we ask your consent before capturing a photo of you and your ID. The images are encrypted, never sold, used only to confirm you're the one taking the course, and permanently destroyed within one year.

What we capture and why. Where your state or course requires identity verification, you will be asked to provide a photo of your government-issued identification (such as a driver license or passport) and a snapshot of yourself, using your computer or smartphone camera. This data — which may include a scan of your face geometry — is used solely to verify that you are the person registered for and completing the course or exam, as required by state regulations and to protect the integrity of your certificate.

Consent first. We obtain your consent before capturing any biometric data, through a separate acknowledgment presented at the time of capture. If you do not consent, we cannot provide courses that require identity verification, and you may contact us about alternatives where your state permits them.

Protection and limits. Biometric data is encrypted in transmission and storage. We do not sell, lease, or trade biometric data, and we do not disclose it except: to complete your identity verification (including to our identity-verification service provider, Amazon Web Services – Textract, acting on our behalf under confidentiality obligations); with your consent; or as required by law or legal process.

Destruction. Biometric data is permanently destroyed within one (1) year of your registration, and in all events within one (1) year after the purpose for collecting it has been satisfied. This paragraph constitutes our written retention and destruction policy for biometric data.

4. How We Use Your Information

In short: We use your information to run your course, verify your identity, report your completion, communicate with you, keep the platform secure, improve it, and — only with your permission — send marketing.

We use your information to:

  • Provide and manage our traffic school services, including enrollment, course delivery, and exams;
  • Verify your identity and protect the integrity of courses, exams, and certificates;
  • Process payments and issue completion certificates;
  • Report your course status and completion to courts, state agencies, and the DMV where required;
  • Communicate with you about your course, account, deadlines, and updates;
  • Send text messages as described in Section 5 and emails as described in Section 6;
  • Detect, prevent, and address fraud, security incidents, and violations of our Terms of Use;
  • Analyze and improve our Website, courses, and services;
  • Send marketing communications, with your consent where required and always with the ability to opt out;
  • Comply with legal obligations, regulatory requirements, and audits.

5. SMS and Text Messaging

In short: Texting is optional. At checkout you can check one box to receive our text messages — it’s all or nothing: checking it means you agree to both account/course texts and occasional review requests; leaving it unchecked means we send you no texts at all. Checking the box is never required to buy. Reply STOP anytime. Your mobile information is never shared for anyone else’s marketing.

Your consent. We send text messages only to students who opt in. During registration and checkout, a single SMS consent checkbox appears beneath the phone number field. It is unchecked by default and is never a condition of purchase. By checking it, you agree to receive all of our text messages at the number you provide; if you leave it unchecked, you will not receive any text messages from us.

What you’ll receive. Under this single opt-in you may receive both transactional messages (such as account approval, course due-date reminders, identity-verification prompts, and confirmation that your completion was reported to the state or DMV) and marketing messages (such as occasional requests to review your experience after you finish a course). Checking the box is never a condition of purchase. Message frequency varies. Message and data rates may apply; contact your carrier for details.

Opting out. Reply STOP to any message to cancel (you will receive one final message confirming your opt-out). You may also opt out by replying with any other reasonable request that clearly expresses your desire to stop (such as QUIT, END, REVOKE, OPT OUT, CANCEL, or UNSUBSCRIBE) or by contacting support@highwaytrafficschool.com. We honor opt-out requests within ten (10) business days. Opting out of texts does not cancel your enrollment or stop transactional emails needed to deliver your course. Reply HELP for assistance, or contact support@highwaytrafficschool.com or 1-888-406-1726. Carriers are not liable for delayed or undelivered messages.

Mobile privacy. Mobile information will not be shared with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except for vendors and service providers acting on our behalf to operate the program.

The full program terms appear in Section 14 of our Terms of Use.

6. Email Communications

In short: Service emails come with your course. Marketing emails always have an unsubscribe link, and unsubscribing never stops the emails you need to finish your course.

We send transactional emails — receipts, account notices, certificate delivery, and court-submission confirmations — as part of providing the Services. With your consent or as otherwise permitted by law, we may send promotional emails; every promotional email includes an unsubscribe mechanism, honored within ten (10) business days. Unsubscribing from promotional email does not stop transactional emails required to deliver the Services you purchased.

7. How We Share Information

In short: We don’t sell or rent your information for money. We share it with your court, DMV, and state regulator to report your completion, with vendors under contract, when the law requires it, or if the business is ever sold. We also use Google advertising and analytics cookies that may count as "sharing" under some state privacy laws — and you can opt out.

We do not sell or rent your personal information for monetary consideration. We share personal information only as follows:

  • Courts, DMVs, and regulators. If your course requires status or completion reporting, we share your personal and course completion information with the Department of Motor Vehicles, Department of Transportation, or equivalent agency for your state; the court associated with your case or citation; and the regulatory agency that certifies or licenses traffic school operation in your state.
  • Service providers. Third-party companies that help us operate — payment processing, identity verification, message and email delivery, cloud hosting, and technical support — under contracts that limit them to processing information on our behalf and instructions.
  • Legal requirements. To comply with law, legal process, or enforceable governmental requests, or to protect the rights, property, or safety of the Company, our students, or others, including enforcing our Terms of Use and investigating fraud or course-integrity violations.
  • Business transfers. If the Company is involved in a merger, acquisition, financing, or sale of all or part of its business, your information may be transferred as part of that transaction, subject to this Privacy Policy; we will provide notice of any material change in how your information is handled.
  • Advertising and analytics partners. We use Google Ads and Google Analytics, which use cookies and device identifiers to measure performance and show you targeted ads for our courses. When these tools share online identifiers with those partners for cross-context behavioral advertising, that activity may be considered a "sale" or "sharing" of personal information under the California Consumer Privacy Act (as amended by the CPRA), the Texas Data Privacy and Security Act, and similar state laws. This does not include your mobile or text-messaging information, which is never shared for third-party marketing (see Section 5). You can opt out as described below and in Section 11.

We do not sell your personal information for monetary consideration. You can opt out of the advertising "sharing" described above at any time: we honor the Global Privacy Control (GPC) browser signal, you may use our "Do Not Sell or Share My Personal Information" control, and you can manage Google’s cookies through Google Ads Settings (adssettings.google.com) and the Google Analytics opt-out add-on. See Section 11 for your rights and Section 8 for cookie controls.

8. Cookies and Tracking Technologies

In short: We use cookies and analytics tools — including session-replay software that records how visitors interact with pages (with sensitive fields masked) — to keep the site working and make it better. Your browser settings control cookies.

We use cookies and similar technologies to operate and improve the Website:

  • Essential cookies keep you signed in, remember your course progress, and enable core functionality. Disabling them may prevent the Website from working.
  • Analytics. We use Google Analytics to understand how visitors use the site (pages visited, traffic sources, general location). You can opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout.
  • Advertising. We use Google Ads, which sets cookies and identifiers to deliver and measure targeted ads for our courses and to build remarketing audiences. As explained in Section 7, this may be considered "sharing" under certain state privacy laws. You can opt out at Google Ads Settings (adssettings.google.com), through our "Do Not Sell or Share My Personal Information" control, or by sending a Global Privacy Control signal.
  • Session replay and heatmaps. We use Microsoft Clarity, which records page interactions such as clicks, scrolling, and mouse movement to help us find usability problems. We configure it to mask sensitive form fields (such as payment, identification, and document-upload fields) so their contents are not captured.

You can manage or block cookies through your browser settings; doing so may affect site functionality. Where applicable law requires it, we honor opt-out preference signals such as Global Privacy Control.

9. How We Protect Your Information

In short: Data is encrypted in transit, stored on access-restricted cloud infrastructure, and your card number goes straight to a top-tier PCI-certified processor — it never touches our servers. No system is 100% secure, but we monitor ours continuously.

  • Encryption. Personal and payment data is encrypted during transmission, and biometric data is encrypted in storage.
  • Secure infrastructure. Your data is stored on access-restricted systems hosted on cloud infrastructure that maintains ISO 27001 certification.
  • Monitoring. We regularly review our security practices to protect against unauthorized access.
  • Payment processing. Sensitive credit card information is collected directly by our payment processor and transmitted directly to the payment gateway through a Level 1 PCI-certified integration — the highest level of PCI compliance. Your card information is never stored on our servers, and we do not have visibility into it.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security; we work continuously to protect your information and will respond to incidents as described in Section 14.

10. Record Retention and Deletion

In short: We keep student records for three years (your state's auditors require it), then permanently delete them. Biometric images are destroyed within one year. Want your data deleted sooner? Use the Data Deletion Request Form — we review requests within seven days.

We retain student information for three (3) years after registration or after completing a course or exam, whichever is later — or longer where required by applicable law or a regulator's audit requirements. This period is based on state and local laws, auditing requirements of the regulatory agencies that certify traffic school operation in each state, state completion-reporting requirements, and resolution of disputes regarding completions. After the retention period, personally identifiable information is automatically and permanently deleted from our database. Biometric data is destroyed on the shorter schedule in Section 3 — within one (1) year of registration. Sensitive credit card information is never stored on our servers.

Deletion on request. You may request deletion of your data at any time using the Data Deletion Request Form on the Website. We review deletion requests within seven (7) days. If your account has no state or local law retention restriction, it will be approved for removal, and you will receive email confirmation of the deletion — or an explanation of why deletion cannot occur yet due to state or local law.

11. Your Privacy Rights and Choices

In short: Wherever you live, you can ask for a copy of your data, fix mistakes, delete it (subject to required retention), and opt out of marketing. We verify it's really you, respond within 45 days, won't penalize you for asking, and you can appeal if we say no.

We extend the following rights to all of our users, regardless of state of residence:

  • Access: request a copy of the personal data we hold about you;
  • Correction: update or correct inaccurate or incomplete information;
  • Deletion: request deletion of your personal data, subject to the legal and regulatory retention requirements in Section 10;
  • Marketing opt-out: stop promotional emails (via the unsubscribe link or by contacting us) and promotional texts (Section 5) at any time.

How it works. Submit requests to support@highwaytrafficschool.com or through the Data Deletion Request Form. We will verify your identity before acting on a request, using information associated with your account. An authorized agent may submit a request on your behalf with proof of authority. We respond within forty-five (45) days, and will notify you if we need additional time. If we deny a request, you may appeal by replying to our response or writing to support@highwaytrafficschool.com with "Privacy Appeal" in the subject line. We will never discriminate against you — in price, service, or course access — for exercising your privacy rights.

12. Children and Minors

In short: Under-13s can't use our services at all. Drivers aged 13–17 can take a course only through an account their parent or guardian sets up or authorizes — and their data is handled the same careful way.

Our Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13; if we become aware of such information, we will delete it promptly. Students under 18 may use the Services only through an account created or authorized by a parent or legal guardian, as described in Section 1 of our Terms of Use. Information about students under 18 is collected and handled as described in this Privacy Policy, as required to deliver their course and report their completion.

13. Third-Party Links

In short: Links to other sites — including your court's or DMV's — lead to privacy practices we don't control.

The Website may contain links to third-party sites, including courts, state agencies, and other services. We are not responsible for the privacy practices of those sites. Review their privacy policies before providing personal information.

14. Data Breach Notification

In short: If a breach affects your information, we'll notify you and the authorities as the law requires.

If we determine that a security incident has resulted in unauthorized access to or acquisition of your personal information, we will notify affected individuals and applicable regulators as required by the data breach notification laws of your state, without unreasonable delay.

15. Changes to This Privacy Policy

In short: If we change this policy in a meaningful way, we'll tell you by email or a site notice before the change takes effect.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to the address associated with your account and/or by prominent notice on the Website before the changes take effect. The "Last Updated" date above reflects the most recent version. Please review this policy periodically.

16. Contact Us

In short: Questions? Email, call, or write to us.

If you have questions or concerns about this Privacy Policy or our data practices:

  • Email: support@highwaytrafficschool.com
  • Phone: 1-888-406-1726
  • Mail: Highway Traffic School, LLC, 1286 University Ave #1116, San Diego, CA 92103

Thank you for trusting Highway Traffic School with your information.