Privacy policy

This policy explains what personal information Medistry collects, why, and what your rights are. Medistry is run by HY Industry LTD. We are the data controller for your information. If you have any questions, email ukmedicalschoolinterviews@gmail.com.

What we collect

• Your email address, so you can sign in and so we can contact you about your pass.
• Your purchases: which pass you bought, when, how much you paid and when it ends. Payments are handled by Stripe. We never see or store your full card details.
• Your progress and notes: which topics you have marked, the notes you write in practice, the last page you visited and which pages you open. We use this to show your progress and to protect the course from account sharing.
• Basic technical information such as your IP address and browser, which our hosting providers record in their logs to keep the site secure and working.

We don’t use advertising or tracking cookies, and we don’t sell your information to anyone.

Video and voice recordings

We never store any video or audio data. When you use the practice recorder, your browser records you on your own device and plays it back to you there. The recording is never uploaded to us or to anyone else, and we cannot see or hear it. It is deleted as soon as you change question, refresh or leave the page, unless you choose to download it, in which case the copy is saved only on your device.

Your browser will ask your permission before the site can use your camera or microphone. They are only switched on while you are recording, and you can withdraw permission at any time in your browser’s settings.

Why we use it

• To provide the course you paid for. The legal basis is our contract with you.
• To keep accounting records of payments, which the law requires us to do.
• To keep the site secure and stop misuse, such as account sharing. The legal basis is our legitimate interest in protecting the service.

Cookies

We only use cookies that are essential for the site to work, mainly to keep you signed in. Because they are essential, we don’t need to ask for your consent to use them.

Who we share it with

We use a small number of trusted providers to run the site. They only use your information to provide their service to us.

• Supabase stores your account, progress and notes, on servers in London.
• Netlify hosts the website.
• Stripe processes payments.

Some of these providers may process data in the United States. Where that happens, it is protected by approved safeguards such as the UK International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

We keep your account, progress and notes while you have an account, so they are still there if you buy another pass. If you ask us to delete your account, we will do so within 30 days. We keep payment records for 6 years because tax law requires it.

Your rights

You can ask to see the information we hold about you, correct it, delete it, receive a copy of it or object to how we use it. Email us from the address on your account and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

If we make important changes to this policy, we will tell you by email.