Privacy notice

DRAFT — NOT READY FOR PUBLIC LAUNCH. Replace the items below with verified information and review for UK GDPR compliance.

Data controller

[INSERT LEGAL ENTITY, CONTACT ADDRESS AND EMAIL]

Information collected

Registration details: name, email, phone, GP training region and stage, planned SCA date, exam preparation difficulties, mock interest and marketing preference. Stripe processes payment details.

Purposes and lawful bases

[CONFIRM AND DOCUMENT CONTRACTUAL NECESSITY, LEGITIMATE INTERESTS AND MARKETING CONSENT AS APPLICABLE]

Service providers and transfers

Google Sheets/Apps Script, Stripe, Cloudflare and [EMAIL SERVICE]. [VERIFY TRANSFERS AND AGREEMENTS]

Retention and rights

[SET RETENTION PERIOD, RIGHTS CONTACT AND DELETION PROCESS]

Contact

[CONTACT EMAIL]