Privacy Policy

1. Introduction

Eletiser Ltd, trading as MedicLIFE ("we", "us", or "our"), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our MedicLIFE application and services.

We are registered in England and Wales (Company Number: 14113218) with our registered office at Kollider Castle House, Castle Street, Sheffield, South Yorkshire, S3 8LS.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

Eletiser Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@mediclife.co.uk
Address: Kollider Castle House, Castle Street, Sheffield, S3 8LS

3. Information We Collect

3.1 Information You Provide

• Account Information: Name, email address, phone number, password, profession, and address when you register
• Financial Information: Expense records, receipt images, tax relief calculations you enter
• Professional Information: CPD records, professional registration details, revalidation dates
• Documents: Files you upload such as certificates, receipts, and identification documents
• Payment Information: Billing address and payment details (processed securely by Stripe)

3.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type
• Usage Data: Features used, time spent, interactions with the Service
• Log Data: IP address, access times, pages viewed

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To provide our Service to you as per our Terms of Service
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications (you can withdraw consent at any time)
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service
• Process your subscription payments
• Send you important notifications about your account
• Generate tax relief calculations and P87 forms
• Provide customer support
• Send marketing communications (with your consent)
• Detect and prevent fraud or abuse
• Comply with legal obligations

6. Data Sharing

We may share your information with:

• Service Providers: Third parties who help us operate our Service (e.g., cloud hosting, payment processing)
• Stripe: Our payment processor, who handles payment data under their own privacy policy
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

7. Data Storage and Security

Your data is stored securely on servers located in the United Kingdom and European Economic Area (EEA). We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection

8. Data Retention

We retain your personal data for as long as necessary to provide our Service and fulfil the purposes described in this policy. Specifically:

• Account Data: Retained while your account is active, plus 7 years after closure for legal compliance
• Financial Records: Retained for 7 years as required by UK tax law
• Marketing Preferences: Retained until you withdraw consent

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at privacy@mediclife.co.uk. We will respond within one month.

10. Cookies

We use essential cookies to enable core functionality of our Service. We may also use analytics cookies to understand how you use our Service. You can control cookie preferences through your browser settings.

11. International Transfers

Your data is primarily stored within the UK and EEA. If we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

12. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our Service. The "Last updated" date at the top indicates when this policy was last revised.

14. Complaints

If you have concerns about how we handle your personal data, please contact us first at privacy@mediclife.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire, SK9 5AF
Website: ico.org.uk
Helpline: 0303 123 1113

15. Contact Us

For any questions about this Privacy Policy or our data practices:

Eletiser Ltd (trading as MedicLIFE)
Kollider Castle House
Castle Street
Sheffield, South Yorkshire
S3 8LS
United Kingdom

Email: privacy@mediclife.co.uk
Company Number: 14113218