Privacy Policy
Last updated 1 June 2026
Quick summary
- We collect account, usage and payment data needed to run your subscription and track your revision progress.
- We never sell your personal data, and payment card details are handled by our payment processor, not stored by us.
- You can access, correct, export or delete your data at any time — see Section 9.
- We use essential cookies to keep you signed in and understand aggregate platform usage.
- Data is stored within the UK/EEA or under an approved transfer mechanism where it is not.
1. Introduction
This Privacy Policy explains how MRCOG Academy ("we", "us", "our") collects, uses, shares and protects personal data when you visit our website, create an account, or use our question bank, courses and related services (the "Platform"). We are the data controller for the personal data described in this Policy.
2. Information we collect
2.1 Information you provide
Account details (name, email address, country, training level and target examination), billing details (postal address, and payment details processed by our payment processor), and any information you submit through contact or support forms, including message content.
2.2 Information collected automatically
Usage data such as questions attempted, accuracy by module, session duration, device and browser type, IP address, and pages visited, collected through cookies and similar technologies described in Section 5.
3. How we use your information
- To create and administer your account and process Subscription or Standalone Course payments;
- To provide the Platform's core functionality, including tracking your progress, analytics and revision recommendations;
- To respond to support requests and content correction reports;
- To send service communications (e.g. renewal notices, receipts) and, where you have opted in, the monthly exam-updates email;
- To detect, investigate and prevent fraud, abuse or breaches of our Terms;
- To improve the Platform through aggregated, anonymised usage analysis.
4. Legal basis for processing
Under UK GDPR, we process personal data on the following bases: performance of a contract (providing the Platform you have subscribed to or purchased), legitimate interests (improving and securing the Platform, preventing fraud), consent (marketing emails and non-essential cookies, which you may withdraw at any time), and legal obligation (e.g. retaining billing records for tax purposes).
5. Cookies and similar technologies
We use strictly necessary cookies to keep you signed in and remember basic preferences. We use analytics cookies, where consented to, to understand aggregate usage patterns such as which modules are most practised. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent you from signing in.
6. Data sharing and third-party processors
We share personal data only where necessary to operate the Platform: with our payment processor to handle Subscription and Standalone Course payments, with hosting and infrastructure providers, and with email delivery providers for service and, where opted in, marketing communications. All processors are bound by data processing agreements. We do not sell personal data to third parties.
7. International data transfers
Where personal data is transferred outside the UK or European Economic Area, we ensure an adequate level of protection through mechanisms such as the UK International Data Transfer Addendum or Standard Contractual Clauses with the receiving party.
8. Data retention
We retain account and usage data for as long as your account is active, and for a reasonable period afterwards to allow reactivation and to meet legal and accounting obligations. Billing records are retained for the period required by UK tax law. You may request earlier deletion as set out in Section 9, subject to any legal retention requirements.
9. Your rights
Subject to applicable law, you have the right to:
- access a copy of the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data, subject to legal retention obligations;
- request a portable export of your data;
- object to or request restriction of certain processing;
- withdraw consent for marketing communications and non-essential cookies at any time;
- lodge a complaint with the UK Information Commissioner's Office (ICO).
To exercise any of these rights, contact support@mrcogacademy.com. We will respond within one calendar month.
10. Data security
We apply technical and organisational measures — including encryption in transit, access controls and regular review of our systems — to protect personal data against unauthorised access, loss or misuse. No online service can guarantee absolute security, and we encourage you to use a strong, unique password for your account.
11. Children's privacy
The Platform is designed for medical professionals and trainees and is not directed at children. We do not knowingly collect personal data from individuals under 16.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified by email or by a notice on the Platform at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.
13. Contact us
For any question about this Privacy Policy or how we handle your data, contact support@mrcogacademy.com or write to MRCOG Academy, 71–75 Shelton Street, London WC2H 9JQ, United Kingdom.