1. Introduction
The Med Den is committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store, and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using our services or visiting our website (www.themedden.org), you agree to the practices described in this notice.
2. Who We Are
The Med Den provides tutoring and mentoring services to students of different levels, including school, pre-medical, and medical education.
If you have any questions about this notice or how we handle your data, you can contact us at:
Email:Â support@themedden.org
3. What Data We Collect
We collect and store minimal personal data. Most interactions are verbal during sessions. Where personal data is collected, this may include:
- Name
- Email address
- Payment information (processed securely by third-party providers; we do not store full card details)
- Any information you choose to share with us for the purposes of tutoring or mentoring
We do not collect unnecessary data.
4. How We Use Your Data
We use your personal data only for the following purposes:
- To provide our tutoring and mentoring services
- To communicate with you regarding your sessions, bookings, or enquiries
- To process payments and maintain financial records
- To comply with legal or regulatory obligations
We do not use your data for marketing without your consent.
5. Legal Basis for Processing
Under UK GDPR, the lawful bases we rely on for processing your personal data are:
- Contractual necessity:Â where processing is required to provide you with our services.
- Consent:Â where you have given clear consent for us to process your data for a specific purpose.
- Legal obligation:Â where we are required to comply with the law.
6. Data Storage and Security
Where data storage is required, it is held securely using trusted cloud-based systems such as Google Workspace. Access is restricted to authorised personnel only.
We apply appropriate technical and organisational measures to protect your data from loss, misuse, unauthorised access, alteration, or disclosure.
7. Data Retention
We keep your personal data only for as long as necessary to fulfil the purposes outlined in this notice, or to comply with legal and regulatory requirements. After this period, data will be securely deleted.
8. Sharing Your Data
We do not share your personal data with third parties except:
- Where required by law
- Where necessary to provide our services (e.g. trusted IT service providers such as Google Workspace, who process data under strict contractual safeguards)
We do not sell or trade your data.
9. International Transfers
Where personal data is transferred outside the UK (for example, through Google Workspace), it is protected by appropriate safeguards such as Standard Contractual Clauses approved by the UK regulator.
10. Your Data Protection Rights
Under UK GDPR, you have the following rights:
- Right of access – to request a copy of the personal data we hold about you
- Right to rectification – to request correction of inaccurate or incomplete data
- Right to erasure – to request deletion of your data in certain circumstances
- Right to restrict processing – to request that we limit how we use your data
- Right to object – to object to processing where we rely on legitimate interests
- Right to data portability – to request transfer of your data to another provider
- Right to complain – to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we use your data
To exercise any of these rights, please contact us at support@themedden.org.
11. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in law or in our practices. The updated version will always be available on our website, with the date of the latest revision clearly stated.
12. Contact and Complaints
If you have any questions about this Privacy Notice or how your data is handled, please contact us at:
You also have the right to complain to the UK supervisory authority for data protection:
Information Commissioner’s Office (ICO)