Privacy Policy

Last updated: November 2025

Welcome to MedPort (accessible at medport.uk). This Privacy Policy explains how we collect, store, and protect your personal data when you use MedPort (“the Service”).

By using MedPort, you agree to the terms of this Privacy Policy.

1. Who We Are

MedPort is a personal project operated by the site owner (“we”, “us”, “our”) based in the United Kingdom.

If you have any questions about this policy or your data, you can contact us at: medport39@gmail.com

2. What Data We Collect

We collect only the information necessary to provide and maintain your account and portfolio.

a. Information you provide

  • Name and email address (for account registration and communication)
  • Password (securely encrypted)
  • Uploaded evidence or portfolio documents (certificates, logbooks, reflections, etc.)
  • Subscription information (if you are on a paid plan)

b. Automatically collected information

  • Basic technical information such as your browser type and device (collected automatically by our hosting provider, Vercel, for security and performance purposes).

We do not use cookies or analytics tools to track your behaviour.

3. How We Use Your Data

We use your personal data for the following purposes:

  • To create and manage your account
  • To store and display your portfolio content within your private workspace
  • To process subscription payments
  • To respond to your queries or support requests
  • To comply with legal obligations

We do not use your data for advertising, marketing, or profiling.

4. How Your Data Is Stored

Your data and uploads are securely stored on Supabase servers, and the website is processed and served via Vercel.

Both providers use secure, industry-standard encryption and access controls.

We take reasonable steps to protect your data from loss, misuse, or unauthorised access.

Your passwords are encrypted and cannot be viewed by us.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising.

We may share minimal data only when necessary:

  • With service providers: for hosting (Supabase, Vercel) and payment processing.
  • For legal reasons: if required by law, court order, or government request.

All third-party processors we use comply with GDPR and data protection standards.

6. International Data Transfers

Supabase and Vercel may process data on servers located outside the UK or EU. Where this occurs, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

7. How Long We Keep Your Data

We retain your data only for as long as necessary to provide the Service or meet legal obligations.

If you delete your account, your personal data and uploaded files will be permanently deleted within 30 days, except where retention is required by law or for payment recordkeeping.

8. Your Rights

Under the UK GDPR, you have the right to:

  • Access a copy of your data
  • Correct inaccurate information
  • Request deletion of your data (“right to be forgotten”)
  • Withdraw consent (where applicable)
  • Request transfer of your data (data portability)
  • Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise your rights, contact medport39@gmail.com.

9. Payments

All subscription payments are handled securely by our third-party payment processor. We do not store full payment card details on our servers. Your billing details are processed only to manage your subscription and fulfil legal obligations (such as receipts and refund handling).

10. Children’s Data

MedPort is intended for users aged 18 and over. We do not knowingly collect data from children. If we discover an account belongs to a minor, it will be deleted.

11. Data Breach Procedure

In the unlikely event of a data breach, affected users will be notified promptly in accordance with UK data protection laws, and appropriate remedial action will be taken.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to the Service or legal requirements. Any material changes will be notified on this page and by email where appropriate.

13. Contact

If you have questions, requests, or concerns about your data, please contact: medport39@gmail.com