How MedicHut LTD collects, uses, stores and protects your personal data - written in plain English, fully GDPR compliant.
MedicHut LTD is the Data Controller in respect to your data.
We will store and process your data in order to allow us to provide our courses, tutoring and mentoring services, books and videos, and other services to our students. We will also process data to manage our relationships with our partners, suppliers, and other organisations involved in the provision of our services.
We will collect, store, and process your data if you choose to subscribe to our mailing lists or interact with us in any way.
If you contact us as a potential student, we will use your information to send you the information you have requested and other information that we think you will be interested in. If you contact us for any other reason, we will use your details to respond to your enquiry, provide our services to you, add you to our mailing list, and meet any legal obligations or other commitments we have. If you fill in a contact form, your IP address may be included when we receive your form. Similarly, if you request a password reset, your IP address will be included in the reset email.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available at automattic.com/privacy. After approval of your comment, your profile picture is visible to the public in the context of your comment.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
We will store only the details necessary to provide our services to our clients (students) and to operate our business. We recognise that we store special categories of data, including sensitive personal information, and will take all necessary steps to store your data securely at all times.
We will not share your data with any third parties other than as described here and strictly as required to provide our services. In order to provide the best possible service we may need to share your information with other organisations. Where this is necessary we will endeavour to obtain your consent however in some cases this may not be practical, and in these cases we will always act as you would reasonably expect. In certain situations we may share your information with regulators or other legal body that request it.
Your data may be stored for a period after the end of our relationship, after which time, it will be deleted. This period will depend on the nature of the services offered. For more details please refer to our Data Retention and Erasure policy.
We take your privacy seriously and will strictly control access to your personal information at all times. Where we need to share your information, this will be with your explicit consent or where necessary to provide the services we offer. We will never sell, share or otherwise distribute your data to any other third party other than as required to provide our services to our clients and to operate our business.
We will take the utmost precautions with your data. We will store your data on secure, dedicated UK based servers and only on secure devices. We will employ strict access control, encryption, password protection, and all appropriate Cyber Security measures as necessary. We will use secure file storage systems and dispose of all material in an appropriate manner.
This policy sets out how we will use and share the information that you give us. This policy describes your relationship with MedicHut LTD. We take your privacy seriously and will only use your personal information to provide the products and services you have requested from us and to send you information about products and services you may be interested in. We will never sell, share or use your personal information other than as described here and always how you would reasonably expect.
The General Data Protection Regulation (GDPR) describes how organisations must collect, handle, process and store personal information. To comply with the law, personal information must be:
MedicHut LTD is registered in the United Kingdom and is registered with the Information Commissioner's Office with ICO registration number: ZB092577.
The data controller is Syed Bukhari. You can contact us in any of the following ways:
MedicHut LTD is a training company, selling courses and providing training to help our students enter medical school. This policy relates to data subjects of MedicHut LTD. Processing of your data is required in order to offer you our products and services. This policy applies to individuals who have shared their data with MedicHut LTD as either a student, employee, supplier or in any other capacity. It applies to all data that the company holds relating to identifiable individuals, including names, postal addresses, email addresses, telephone numbers, sensitive personal information, information about family members, education / employment information, and video / photos of individuals.
We will only collect, store, process, or share your sensitive personal information with your explicit consent.
We will only use your personal data for the purposes for which we collected it and as you would reasonably expect your data to be processed and only where there is a lawful basis for such processing - for example, to provide our training and consultancy, to manage payments, to maintain our records, to administer and protect our business, to use data analytics to improve our website, and to make suggestions and recommendations to you about products or services that may be of interest to you.
We operate in line with GDPR data protection guidelines. We respect your rights and will respond to any request for access to personal information and requests to delete, rectify, transfer data and to stop processing. Any requests or objections should be made in writing to the Data Controller or you can contact us to change your preferences at any time.
Where you give your consent for us to process your data - for example when you agree to us sending you marketing information - you can contact us to amend or withdraw your consent at any time. You can also choose to object to processing and request deletion of your data.
Your data will be collected, stored, and processed in the UK only. We do not transfer your data outside the UK. Your data will be stored for up to 7 years to ensure we have records of service, payments, and other interactions we have with you. In order to provide our services to you, we use recognised third parties to take payment, conduct credit reports and other checks, manage our company accounts and provide banking services.
Under data protection laws, you have rights including:
You will not have to pay a fee to access your personal data. We try to respond to all legitimate requests within one month.
A cookie is a small file which asks permission to be placed on your computer's hard drive. We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know such data. We will report any breaches or potential breaches to the appropriate authorities within 24 hours and to anyone affected by a breach within 72 hours.
If you have any questions or comments about this Privacy Policy, wish to exercise your information rights, or wish to complain, please contact Syed Bukhari at MedicHut LTD. If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision:
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
www.ico.org.uk
Questions? Email team@medichut.com or call 020 3488 8644.