Privacy Policy

Effective Date: February 28, 2026

MediSpoon is committed to protecting your privacy and handling your personal data responsibly and transparently.

This Privacy Policy explains:
• what personal data we collect
• how and why we use it
• how we protect your information
• your rights under data protection law

This policy applies to all users of the MediSpoon platform, including students, parents, educators and visitors to our website.

For the purposes of UK data protection law, MediSpoon is the data controller of your personal information.

If you have any questions about this policy or how your data is handled, please contact us using the details provided at the end of this page.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This means we ensure your data is:
• processed lawfully, fairly and transparently
• collected for specified, legitimate purposes
• adequate, relevant and limited to what is necessary
• accurate and kept up to date
• stored securely and not retained longer than necessary

We may collect and process the following types of personal data:

• name and contact details (such as email address)
• account login details
• payment and billing information
• communications with our support team
• feedback, survey responses or form submissions

4.2 Information We Collect Automatically
• IP address and device information
• browser type and usage data
• pages visited and actions taken on the platform
• performance and progress data within the platform

4.3 Information Related to Services
• UCAT practice activity and analytics
• course completion and engagement data
• mock exam results and timing metrics

This data is used to support your learning experience and improve platform performance.

We use personal data for the following purposes:
• to create and manage user accounts
• to provide access to UCAT preparation services
• to personalise learning content and recommendations
• to deliver analytics and performance insights
• to process payments and manage subscriptions
• to communicate important updates or support responses
• to improve our platform, content and services
• to comply with legal and regulatory obligations

We do not sell your personal data to third parties.

We process your personal data under one or more of the following legal bases:
• contractual necessity – to deliver services you have subscribed to
• legitimate interests – to improve our services and ensure platform security
• consent – where you have explicitly agreed (e.g. marketing emails)
• legal obligation – where required by law

We use cookies and similar technologies to:
• enable core website functionality
• analyse platform usage
• improve performance and user experience

You can manage your cookie preferences through our cookie consent tool and browser settings.

For full details, please see our Cookie Policy.

We may share your data with trusted third-party service providers where necessary to operate our platform, including:
• payment processors
• hosting and infrastructure providers
• analytics and performance monitoring services
• communication and support tools

All third parties are required to process data securely and in line with data protection laws.

We do not share data unnecessarily and only provide access on a need-to-know basis.

We implement appropriate technical and organisational measures to protect your personal data, including:
• secure servers and encrypted connections
• access controls and authentication procedures
• regular security reviews and updates

While no system can guarantee absolute security, we take data protection seriously and continuously review our safeguards.

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:
• the duration of your account
• compliance with legal and financial obligations
• resolving disputes or enforcing agreements

When data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the right to:
• access the personal data we hold about you
• request correction of inaccurate data
• request deletion of your data (where applicable)
• object to or restrict certain types of processing
• request data portability
• withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details below.

MediSpoon is intended for students preparing for the UCAT, including those under 18.

Where required, we rely on parental awareness and consent for younger users. We do not knowingly collect unnecessary personal data from children.

Where data is processed outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.

Any updates will be posted on this page with a revised effective date. Continued use of the platform indicates acceptance of the updated policy.

If you have any questions about this Privacy Policy or how your data is handled, please contact us via:
• Contact Us page
• or by emailing our support team

We aim to respond promptly and transparently.