Terms and Conditions

This privacy policy applies between Medify, the user of the website and or services provided by Medify.

Medify takes their customer privacy very seriously. This privacy policy sets out to help you understand how we collect, collate, process, share and destroy your data.

Medify identify as the sole data controllers.

What data do we collect?

In order to provide the best service to our students, we will collect information to provide you with a service and or goods, invoices, service updates or to provide you with promotional offers.

We will collect:

• Your name.
• Your email address.
• Date of exam (optional for student to fill in).
• Location of exam (optional for student to fill in).
• Your performance on our question bank, numbers of questions done, time taken, correctness of
  answers.

Why do we collect this data?

We collect this information for displaying and thus calculating your performances in the platform to provide accurate summary of your performances as well as predictions in final exam. Also, this allows us to send news items and marketing content to students and service updates. We ask for optional information (labelled above) to give you a better experience as a student to plan your revision.

If you decide not to provide your information

All students need to accept these terms and conditions to provide their information, so that we may provide you with the service, including processing of your marks, and also marking of your personal statements. Without your acceptance of these terms, we would be unable to provide you with our full service.

Cookies

A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal data about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website.

The Site uses cookies so that we can recognise you when you return and personalise your settings and preferences. Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that this Site may not operate efficiently if you refuse to accept cookies.

We also use Google Analytics to monitor how the Site is used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the Site, where visitors generally came from, how long they stayed on the Site, and which pages they visited. Google Analytics places several persistent cookies on your computer’s hard drive. These do not collect any personal data.

Third Party Information

Whilst we do not share personal information with third parties, we do use various service providers for our internal systems. They have access to and may collect information only as needed to perform their functions and are not permitted to share or use information for any other purpose. Where we provide data to third party service providers for them to provide data analysis or statistical services for us, we will only ever send them aggregated, anonymised data. The third-party providers will not share or pass on or even hold your data for longer than necessary to perform the services that they are providing to us.

Controlling Use of Your Data

Where possible we are required to give you the option to restrict use of your data. This will reduce the risk of a data breach for marketing purposes and sharing with third parties.

How and where will your data be processed?

Any information that we hold about you is stored on our secure servers and all information, including payment transactions are encrypted. Only authorised personnel are permitted to access personal data during their work. Whilst we do our best to protect your personal data, no information transferred over the internet can be guaranteed to be completely secure and you provide your information at your own risk.

Security of your information

We are passionate about keeping your data safe. That’s why we have various systems and policies in place to ensure we are a safe haven for your data. All computer systems are encrypted and all software used is password protected. Also, Anti-virus software is installed on all devices.

Marketing

We email students with service updates, as well as internal marketing of new products relevant to the student. Students are able to opt out of marketing via the opt out option within the email itself in the footer. When you request services with us and you have opted in (or in any other case, if you have opted in to receive marketing by email or text message), we may contact you by e-mail or text message with information about other goods and services that we offer that are similar to those that you have already purchased or enquired about and we think may interest you based on the information we hold about you. We may also use your contact details to contact you by phone or post with details of products and services that we think may be of interest to you (unless you have told us you don't want to receive these communications, or you are registered with the Telephone Preference Service). We will hold your data for a period of 18 months before redefining consent from yourself.

Improving our services

Sometimes we will use your data to help us improve the quality and functionality of the services that we offer.

This includes:

• Analysing your recent visits to our website and how you move around different sections of our website for analytical purposes to understand how people use our website so that we can make it more intuitive.
• Troubleshooting, data analysis, testing, research and for statistical and survey purposes by us, all of which helps us to provide the best service that we can. Again, this information is not shared.

Your Rights

If you wish to access, correct, update or request deletion of your personal data, you can do so at any time.

You can object to the processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data.

You have the right to opt-in to marketing communications that we can send to you at any time. You can exercise this right by opting in to the marketing e-mails we send you. Similarly, if we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.

You have the right to complain to a data protection authority about our collection and use of your personal data. The Information Commissioner's Office is the data protection authority for the UK. You may write to them at: Information Commissioner’s Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF. Alternatively you may call them on 0303 123 1113. You may also visit their website to fill out an online complaints form at https://ico.org.uk/make-a-complaint/.

Destruction

We will only keep your information for as long as is needed to fulfil our duties or required to do so by law. When we destroy your information it is done so securely. If we have hard copies containing your data, we will dispose of these safely through confidential shredding services provided to us by our acting Data Protection Company DataGuard.

Changes to our Privacy Notice

We may update this Privacy Notice from time to time in response to changing legal, technical or business developments. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws. You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the top of this Privacy Notice.

Contact us

If you have any questions about this Privacy Notice or wish to exercise any of your data protection rights, please contact our Data Protection Officer at:

Email: privacy@dataguard.co.uk

Post: Should be sent for the attention of the Data Protection Officer to: DataGuard, DataCo International UK Limited, Suite 1, 7th Floor, 50 Broadway, London, United Kingdom, SW1H 0BL. DataGuard operates and facilitates this contract.

Please note: All polices are managed directly by DataGuard, our acting Data Protection Team. Any Data Protection related queries or concerns will be dealt with directly via DataGuard.