Privacy Policy

About this policy

This policy explains how the operator identified above uses personal information for this website. References to "we", "us" and "our" mean that operator. You can contact us using the details above with privacy questions or requests.

Information we use

• Accounts: your name, email address, authentication details and account preferences.
• Reflections: the questionnaire answers, calculated results and consent record you choose to save. Answers may reveal health-related information. The current reflection does not ask for photographs or free-text health notes.
• Newsletter and interest forms: your email, selected interests, consent wording and date, subscription status, and optional unsubscribe feedback.
• Support and administration: messages you send, authorised staff actions, security records and delivery records where applicable.
• Technical information: information needed to operate and secure the website, including connection and device information processed by our hosting and authentication services.
• Bookings and payments: only when those services become available and you choose to use them, the booking, consent and transaction details explained before you submit them. A mention in this policy does not mean a paid service is currently available.

Please do not send urgent medical information through the website. The educational reflection is not a clinical assessment.

Why we use information

We use account information to provide the account service you request (performance of a contract). We use optional health-related reflection information with your explicit consent. Taking a reflection is optional and is not a condition of reading public guides.

We use separate consent for newsletters and promotional messages. Creating an account or completing a reflection does not subscribe you. Necessary account and security messages are separate from marketing.

We may process proportionate security and support information for our legitimate interests in running and protecting the service, and records required to meet legal obligations. Where a feature needs additional consent, its form explains that before collection.

Your reflection choices

Your saved answers and results are private account records, not public articles. You can export them or withdraw consent by deleting your reflections from My Account. Deleting reflections does not delete your account or change newsletter preferences.

If an older record includes files needing separate removal, contact us. Removing a record from the active service and expiry from a provider backup are different processes; we will explain any relevant retention restriction when handling a request.

Newsletter choices

Newsletter sign-up is optional. You can unsubscribe using the link in an email, without logging in or giving a reason. Any reason or comment you choose to provide helps us understand feedback; it is not needed to stop marketing.

Resubscribing requires a fresh positive choice and verification of the relevant account. We keep enough subscription and suppression information to respect your choices and avoid sending further marketing after an opt-out. Unsubscribing does not stop necessary service messages or prevent access to public guides.

Who processes information

We use Base44 for application hosting, authentication, database functions and email delivery. Relevant service providers process information needed to deliver those services. Authorised staff have access according to their role and the task they need to perform.

If consultation, payment, calendar or messaging services are enabled in future, the selected provider and relevant information-sharing arrangements must be explained before you use them. We do not sell your personal information. We may disclose information where lawfully required, to protect the service, or as part of a business transfer with appropriate notice and safeguards.

International processing

Technology providers may process information outside the UK. Where a restricted international transfer applies, an appropriate lawful transfer mechanism is required. You can contact us for information about the providers and safeguards applicable to your data.

Retention

We keep information for the purpose for which it was collected, including providing your account, respecting consent and opt-outs, resolving support issues, security and legal obligations. We do not describe deletion of an active record as immediate deletion from every provider backup.

You can request deletion of your account or other information using the contact details above. We will explain any information that must be retained and why. Reflection export and deletion controls are also available in your account.

Cookies and local storage

Essential storage supports authentication, security and your saved website choices. The website stores cookie preferences in local storage under cookieConsent; an age confirmation may be stored under ageVerified when the age check is enabled. Authentication storage is managed by the platform.

Optional analytics and marketing preferences start off. Selecting a preference is not a newsletter subscription. Use Cookie Preferences in the footer or the button below to review or change your choices on this browser. Browser controls can also remove stored data, although clearing authentication storage may sign you out.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent without affecting processing that was lawful before withdrawal.

Contact us using the details above. We may need to verify your identity without collecting unnecessary information. We normally respond within one month; if a lawful extension applies, we will explain it.

You may complain to the Information Commissioner's Office.

Age and security

Account and reflection services are intended for adults aged 18 and over. Please contact us if you believe a child has provided personal information.

Access controls and other technical measures help protect information, but no online service can guarantee absolute security. Keep your login details private and report suspected unauthorised access.

Policy updates

The date above identifies the latest policy revision. Material changes will be brought to your attention where appropriate. An update to this policy does not itself create consent for a new use of your information.