Skip to main content

Privacy Policy

Last updated: 11 June 2026

1. Who we are

AppraisalReady provides a multi-source feedback platform for doctors preparing their GMC revalidation appraisal portfolio. We are a UK-based service. If you have any questions about this policy, contact us at hello@appraisalready.co.uk.

2. What data we collect

  • Account data: name, email address, and professional role when you register.
  • Profile data: any additional information you choose to add to your profile.
  • MSF data: questionnaire responses, colleague and patient email addresses you provide, feedback scores, and appraisal portfolio documents.
  • Billing data: payment information is processed by Stripe — we never store full credit card details.
  • Usage data: page views, features used, and session activity to improve the service.

3. How we use your data

  • To create and manage your account.
  • To send MSF questionnaires to the colleagues and patients you nominate.
  • To collate, store, and display feedback results.
  • To process payments and manage subscriptions.
  • To send service emails (receipts, reminders, support responses).
  • To improve and secure our platform.

4. Lawful basis (UK GDPR)

We process your data under the following lawful bases:

  • Consent: when you provide colleague or patient email addresses for feedback.
  • Contract: to deliver the service you have subscribed to.
  • Legitimate interest: to maintain security, prevent abuse, and improve the product.
  • Legal obligation: where required by law (e.g., tax records for billing).

5. Data sharing

We share data only with trusted third-party processors who help us deliver the service:

  • Supabase — database and authentication (US East data centre).
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — hosting and deployment.

We never sell your personal data to third parties.

6. Data retention

  • Account data is retained for the duration of your subscription plus 90 days after cancellation.
  • MSF feedback data is retained as long as your account is active or until you request deletion.
  • Billing records are retained for 6 years to comply with UK tax law.

7. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request erasure of your data (subject to legal limits).
  • Object to or restrict processing.
  • Data portability.
  • Withdraw consent at any time.

To exercise any of these rights, email hello@appraisalready.co.uk. We will respond within 30 days.

8. Security

We use encryption in transit (TLS 1.3) and at rest. Access to production data is restricted to the core engineering team. We conduct regular security reviews and follow Supabase and Vercel security best practices.

9. Cookies

We use essential cookies for authentication and session management. No tracking or advertising cookies are used. You can control cookies through your browser settings.

12. Google OAuth API Limited Use & Privacy Disclosure

When you choose to authenticate your account with AppraisalReady through Google Sign-In, we request access to non-sensitive scopes purely for account provisioning and secure user login:

  • Accessed Scopes: We ask for .../auth/userinfo.profile (to load your profile name for setup) and .../auth/userinfo.email (to serve as your primary contact address on the service).
  • Use and Storage: This data is stored securely in our database and is exclusively used to allow you to log back into AppraisalReady without remembering separate passwords, and to customize automated emails when sending feedback requests.
  • No Third-Party Distribution: Under no circumstances do we write to or sell information sourced from your Google profiles or share it with external advertising agencies. Our use of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

13. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email. Continued use after changes takes effect constitutes acceptance.

14. Contact & complaints

If you have a concern about how we handle your data, contact us first at hello@appraisalready.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).