Privacy policy

This policy explains what personal information MedDeadline collects, why we collect it, who we share it with and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

MedDeadline is run by [Company legal name], a company registered in [England and Wales] with company number [Company number], whose registered office is at [Registered address]. We are the controller of the personal information described here and are registered with the Information Commissioner's Office (ICO) under number [ICO registration number].

For anything to do with your personal information, email us at [Contact email].

What we collect

Your account

• Your name and email address.
• Your password, which we store only as a one-way hash, so we can never see it. If you choose to sign in with Google, we receive your name, email address and profile picture from Google instead of a password.
• Security information about your sign-ins, including your IP address, browser type and, if you turn it on, two-factor authentication settings.

Your profile

Information you choose to tell us about yourself: your career stage (for example medical student or FY1), UK region, interests and preferred specialties. You declare this yourself; we do not ask for your GMC number or check your identity.

Saved opportunities

The opportunities you save, the application status you record against them and any notes you add.

Subscription and payments

If you subscribe to Premium, we keep your plan, billing interval, subscription status and payment history. Your card details are collected and held by our payment provider, Stripe. We never see or store your full card number; Stripe gives us only the card brand, the last four digits, the expiry date and a card fingerprint (a code that recognises the same card without revealing its number), which we use to prevent misuse.

Emails

We send emails you need to use the service, such as account verification, password resets and payment receipts, and, if you have Premium, the deadline reminders you ask for. We keep a record of which reminders we have sent so you do not receive the same one twice.

Advertising enquiries

If you ask about advertising with us, we keep your name, organisation, email address and message so we can reply and prepare a quote.

Technical information

Our hosting provider keeps short-lived server logs, including IP addresses and the pages requested, to keep the site running and secure. We also keep a log of important account actions, such as sign-ins and subscription changes, for security.

How we use it and our lawful basis

We do not send marketing emails, and we do not ask for special category information such as health details. Your personalised feed filters and orders opportunities using your profile, but it never makes decisions about you that have legal or similarly significant effects.

Who we share it with

We never sell your personal information. We share it only with service providers that help us run MedDeadline:

• Vercel, which hosts the website.
• Neon, which hosts our database.
• Stripe, which processes subscription payments. Stripe also uses some information as an independent controller to meet its own legal and fraud-prevention duties.
• Resend, which delivers our emails.
• Google, only if you choose to sign in with your Google account.

These providers may only use your information to provide their service to us. We do not share your information with opportunity organisers or advertisers. When you follow a link to an organiser's or sponsor's website, their own privacy policy applies. We may also disclose information if the law requires it.

International transfers

Some of our providers are based in, or have staff in, the United States. Where your information leaves the UK we rely on UK adequacy regulations (including the UK–US data bridge for certified companies) or the International Data Transfer Addendum to protect it. [Confirm the hosting and database regions in use, for example London.]

How long we keep it

• Account, profile and saved opportunities: while your account is open, and deleted within [30] days of you deleting it.
• Payment and subscription records: [6] years after the end of the financial year they relate to, as required for tax purposes.
• Advertising enquiries: [24] months after our last contact with you.
• Security logs: [90] days, unless we need them longer to investigate a problem.

Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information deleted;
• restrict or object to how we use it;
• receive your information in a portable format; and
• withdraw consent where we rely on it.

You can update most of your details yourself in your account. For anything else, email [Contact email]. We will reply within one month. There is normally no charge.

Children

MedDeadline is for medical students and doctors. It is not aimed at children and we do not knowingly collect information from anyone under [16].

Cookies

We use only the cookies needed to run the site. See our cookie policy for the full list.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

We will update this page if the way we use personal information changes, and change the date at the top. If a change is significant, we will tell you by email or on the site before it takes effect.