Privacy Policy of MedAscend

Languages, Current Language: en-GB English (UK)

Welcome to the privacy policy of MedAscend. This policy will help you understand what data we collect, why we collect it, how we process it, and what your rights are in relation to it.

Latest Update: 16 March 2025

Table of Contents


1. Summary

Medical Ascend Limited ("MedAscend," "we," "us," or "our") is committed to protecting your privacy.

We do not share any personal details, transcripts, or identifiable data with universities.

All data shared with universities is fully anonymised and consists only of general year-group analytics, trends, and engagement statistics.

We may use anonymised, non-identifiable data for academic research, educational publications, and marketing purposes.

We comply with UK GDPR and the Data Protection Act 2018.


2. Data We Collect Automatically

We collect non-identifiable usage data to analyse trends and improve platform functionality, including:

Trackers (e.g., cookies for analytics)

Usage Data (e.g., interactions with scenarios, performance tracking)

Number of Users (aggregated statistics)

Session Statistics (general engagement metrics)

3. Data You Provide to Us

We collect and process personal data when you interact with our platform, including:

Account Information (name, email, year of study)

Scenario Interactions (saved transcripts and scores for self-review)

Technical Information (device, IP address, browser type)

We do not collect or process:

Any real patient data

Any sensitive personal health information


4. Owner and Data Controller

Medical Ascend Limited
7E Abbotsford Street
Dundee
DD2 1DE
📧 Owner contact email: contact@med-ascend.com

5. Type of Data We Collect

We collect the following categories of data:

Essential Account Data (name, email, year group)

Non-Personal Usage Data (platform interactions, analytics)

Technical Data (IP address, device type)

All data collected is used strictly for educational, research, and operational purposes.


6. Mode and Place of Processing the Data

Methods of Processing

We implement strict security measures to protect data from unauthorised access, modification, or misuse. Data processing is conducted using encrypted IT systems and is restricted to authorised personnel only.

In addition to our encrypted IT systems, essential account data—including your email address, name, and year group—is securely stored on Google Sheets. These sheets are maintained with appropriate access controls to ensure the confidentiality and integrity of your data.

All data processing is conducted on our Cloudflare servers, which are maintained in compliance with industry-standard security practices. This ensures that your data is protected from unauthorised access and breaches.

Place of Processing

Data is processed in the UK.

No data is transferred outside the UK without appropriate safeguards (e.g., UK GDPR-compliant contracts).


7. Retention Time

Data is retained until course completion or graduation.

After this period, personal data is permanently anonymised or deleted, unless required for legal obligations (e.g., dispute resolution).


8. Purposes of Processing

We process personal data strictly for:

Platform functionality (e.g., login, progress tracking)

Educational analytics (anonymised engagement trends)

User support & communication

Security & fraud prevention

We do not use personal data for advertising or third-party marketing.


9. Detailed Information on the Processing of Personal Data

We only process data when legally permitted under UK GDPR, including:

Contractual necessity (providing educational services)

Legitimate interests (improving platform usability)

Compliance with legal obligations (e.g., security measures)


10. Data Sharing & Disclosure

We strictly limit data sharing and do not disclose personal details.

Universities & Institutions

No individual student data, transcripts, or personal information is shared with universities.

Only anonymised, aggregated engagement data is shared for academic analysis.

Third Parties

We do not sell, trade, or share personal data with third-party companies for commercial purposes.

Legal Compliance

We may disclose data only when legally required (e.g., regulatory compliance).


11. Use of Anonymised Data for Research, Publications & Marketing

We may use fully anonymised, non-identifiable data for:

Educational research to improve medical training and AI-assisted learning.

Academic publications in peer-reviewed journals, white papers, and industry studies.

Marketing & Outreach (e.g., promotional materials showcasing platform effectiveness).

No personally identifiable information will be used in any publication or marketing.


12. International Data Transfers

No data is transferred outside the UK.

If necessary, in the future, appropriate safeguards will be implemented (e.g., Standard Contractual Clauses under UK GDPR).


13. Security Measures

We employ industry-standard security measures to protect your data, including:

Encryption & secure data storage

Strict access control (only authorised staff)

Regular audits & security assessments

Users are responsible for keeping login credentials secure.


14. Your Rights Under UK GDPR

You have the right to:

Access your personal data

Rectify incorrect information

Request erasure of data when no longer needed

Restrict processing in certain situations

Object to data processing

Request data portability (structured format transfer)


15. How to Exercise Your Rights

To request access, deletion, or rectification of data, email us at: 📧 contact@med-ascend.com

We will respond within 30 days in compliance with UK GDPR.


16. Cookies & Tracking Technologies

We use only essential cookies that are required for the core functionality of MedAscend, such as login authentication and security.

What this means for you:

No tracking cookies, marketing cookies, or third-party advertising cookies are used.

These cookies do not require consent under UK GDPR and PECR because they are essential to the platform's operation.

Your Choices:

You cannot opt out of essential cookies as they are necessary for the platform to function.

If you block cookies via browser settings, some platform features may not work properly.


17. Legal Basis for Processing

We process personal data under the following legal grounds:

User consent (when explicitly given)

Performance of contract (educational services)

Legitimate interests (platform security, analytics, research & marketing)

If legal grounds change, we will notify users accordingly.


18. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Users will be notified of significant changes via:

Email notifications

Platform announcements

Continued use of the platform after updates means acceptance of the revised policy.


19. Contact Information

📧 Email: contact@med-ascend.com

If you believe your data rights have been violated, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) UK (📌 ).