Privacy notice

Who is responsible for your information

Bassemsaleh Limited, trading as Clinora Medical Learning (“Clinora”, “we”), is the controller of the personal information used to provide this learning service. Bassemsaleh Limited is a private limited company registered in England and Wales, company number 13685282.

Questions about this notice, or requests to exercise your rights, can be sent to support@clinoramedical.com or by post to the registered office address shown on the public Companies House register. Clinora is not required to appoint a data protection officer; the company director is responsible for data protection.

Information we use

• Your name, email address and password when you create a Clinora account, and whether your email address has been verified. Your password is stored only as a salted one-way hash, so Clinora cannot read it.
• Sign-in session records: a session identifier held in a secure cookie, its expiry and, where your browser supplies them, the browser type and network (IP) address used to sign in.
• Learning activity, selected answers, confidence choices, approximate question-response time and progress history. Diagnostic results are used to generate a descriptive study plan, not an official exam-result prediction.
• Bookmarks and private notes you choose to save on practice questions while signed in. Notes are visible only to you and must not contain patient-identifiable information.
• Your flashcard review schedule: which answered questions are due for review and when, kept on your device and, when you are signed in, with your account.
• Your MRCS Part A connected-practice answers and bookmarks, kept on your device and, when you are signed in, with your account.
• Anonymous answer statistics. When a signed-in learner answers a practice question for the first time, the option chosen is added to a running count for that question. The count stores no account identifier, name or email, and percentages are shown only after at least 20 learners have answered, so no individual answer can be identified.
• For the optional Personal Study Prescription pilot: a broad doctor role, five ratings, an optional improvement comment, consent version and the site-specific account identifier used to prevent duplicate responses. The pilot does not request or store a name, contact details, registration number or workplace in the feedback table.
• Subscription status and Stripe customer identifiers. Clinora does not receive or store your complete card number.
• Your selected exam and preferred 3-, 6- or 12-month pass when you join the launch-interest list. This records demand only and is not a purchase or reservation.
• Aggregate module views, homepage learning-pathway clicks, anonymous practice sessions, free-account activations, onboarding steps, diagnostic and study-plan stages, launch-interest steps, related-question visits, checkout starts and paid activations. Homepage pathway clicks record only which broad route was selected (MRCP Part 1, PACES, FRCS ENT, Portfolio Pathway, Clinical Learning or Access) and are not linked to an account ID. Anonymous practice is counted once per browser-tab session using session storage, without a persistent advertising identifier. Signed-in product events use the site-specific account identifier but do not copy the account email into the event log. IP addresses and card data are not stored in this analytics table.
• Your onboarding specialty preference, stored only on the device you use, and an unfinished diagnostic session identifier stored on that device.
• An email address only when a signed-in learner separately chooses to receive occasional updates.
• Basic technical and security information needed to operate and protect the service.

Your account and sign-in

Clinora runs its own account system. When you sign up, Clinora sends a link to confirm your email address; the link expires after 24 hours. Password-reset links expire after 15 minutes and can be used once. Only a one-way hash of each link is stored, and the email itself is held encrypted until it has been sent, after which its content is cleared.

To protect accounts from automated abuse, sign-up, verification and password-reset requests are rate-limited. The limiter stores keyed one-way codes derived from the email address and network address rather than the addresses themselves, and these records are deleted about an hour after they expire. Sessions end when you sign out or when they expire.

Privacy-friendly service measurement

Clinora uses first-party, minimum-data event counting to understand which broad homepage learning pathways visitors choose and the anonymous → free account → paid journey. Events record a stage and time only; homepage pathway clicks are kept as aggregate route counts without an account ID. Question content, selected answers, confidence choices, patient information, card details, IP addresses and advertising identifiers are not copied into the analytics event.

A session-storage flag prevents repeated anonymous-session counts in one browser tab. An optional local copy label supports aggregate A/B comparison. These technologies are used only for service statistics, not advertising, profiling or decisions about an individual. Use the “Privacy choices” control on any page to object free of charge; core access remains unchanged.

Why we use it and our lawful basis

UK data protection law requires a lawful basis for each use of personal information. Clinora relies on the following:

• Providing the service you sign up for (contract): creating and running your account, signing you in, sending account emails such as email confirmation and password reset, unlocking the free communication library, saving learning progress, bookmarks, private notes, flashcard schedules and study plans, optional FRCS cloud backup, providing paid access and answering questions about your account.
• Legitimate interests: keeping the service and accounts secure, rate-limiting and preventing misuse, short-term technical logs, measuring how the service is used so it can be improved, producing anonymous answer statistics that help learners compare their reasoning, and establishing or defending legal claims. Our interest is operating a secure, useful educational platform; these uses are limited to what is necessary, and you can object to them (see “Your rights”).
• Consent: optional educational or product update emails, the optional Personal Study Prescription pilot, anonymised colleague feedback and the launch-interest list. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation: keeping payment and accounting records required by UK company and tax law, and responding to lawful requests from authorities.

Clinora does not ask for health information about you or your patients and does not use special category data. You need to provide a name, email address and password to create an account; without them you can still browse free content but cannot use account features. Clinora does not make decisions about you based solely on automated processing that have legal or similarly significant effects. Diagnostic study plans are descriptive learning suggestions only.

Creating or signing in to an account does not enrol you in marketing email. Educational or product updates require a separate, optional, unticked choice. Permission can be withdrawn from the account or Communication Lab at any time.

Who receives your information

Clinora does not sell personal information or share it for advertising. The service providers below process it on Clinora’s behalf, under contracts that require them to protect it and use it only to provide their service. Information may also be disclosed where the law requires it, or to professional advisers or a successor business if Clinora is reorganised or sold.

• Cloudflare hosts the website, protects it from attacks and runs the Clinora database. The database that holds account and learning records is stored in Cloudflare’s European Union region.
• Resend sends account emails, such as email-address confirmation and password-reset links, from notify.clinoramedical.com using its European Union region. It receives your email address and the message content.
• Stripe handles payments and subscription management when paid access is available.
• Namecheap Private Email hosts the support@clinoramedical.com mailbox, so messages you send to support are stored there.

When you pay through Stripe, Stripe also acts as a separate controller for payment and fraud-prevention purposes, and its own privacy notice applies.

International transfers

The Clinora database is stored in the European Union, which the UK recognises as providing adequate protection. Cloudflare, Resend, Stripe and Namecheap are based in or have operations in the United States and other countries, so some information may be accessed from or processed outside the UK. Where that happens, the transfer is protected by UK adequacy regulations, including the UK Extension to the EU–US Data Privacy Framework for certified providers such as Cloudflare and Resend, or by the EU standard contractual clauses with the UK International Data Transfer Addendum. You can ask for more information about these safeguards at support@clinoramedical.com.

How long information is kept

• Account, profile and learning records: for as long as your account is open. When you ask us to close your account, they are deleted or irreversibly anonymised within one month, except where a longer period below applies.
• Sign-in sessions: a session expires seven days after sign-in, or earlier when you sign out, and its record is deleted when your account is closed.
• Email confirmation and password-reset links: they expire after 24 hours and 15 minutes respectively, and their records are deleted within about a day of expiry or use. Account email content is cleared as soon as the email is sent, and delivery records are deleted after seven days.
• Rate-limiting codes: deleted about an hour after the limit period ends.
• Service measurement events: deleted automatically after 24 months.
• Payment and accounting records: six years after the end of the financial year they relate to, as required by UK tax law.
• Support emails: up to two years after your enquiry is resolved, unless needed for a legal claim.
• Marketing preferences and the launch-interest list: until you withdraw or the list is no longer needed, and then deleted.
• Short-term technical logs held by Cloudflare: a few days, and no more than 30 days.
• Information stored only on your device: stays until you clear it in your browser; Clinora cannot access or delete it.

Your rights

Under UK data protection law you have the right to:

• access the personal information Clinora holds about you and receive a copy;
• have inaccurate information corrected or incomplete information completed;
• have your information deleted in certain circumstances;
• restrict how it is used in certain circumstances;
• receive information you provided in a portable, machine-readable format, where processing is based on contract or consent;
• object at any time to processing based on legitimate interests, including service measurement, and to direct marketing;
• withdraw consent at any time, where processing is based on consent; and
• not be subject to decisions based solely on automated processing that significantly affect you.

To exercise these rights, email support@clinoramedical.com. There is normally no charge. Clinora may need to confirm your identity and will respond within one month, or within three months for complex requests, in which case you will be told within the first month.

You can complain to Clinora first, and you also have the right to complain to the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

Cookies and device storage

Clinora sets one essential cookie when you sign in: a secure, HTTP-only session cookie that keeps you signed in. It is strictly necessary for the account service and does not need consent. Clinora does not use advertising cookies, third-party analytics or tracking scripts, or embedded social media content.

Clinora also stores some information in your browser’s local or session storage so features work on your device: your onboarding and exam preferences, unfinished diagnostics, practice and revision progress, bookmarks, flashcard schedule, Communication Lab notes and appraisal records, your privacy choice and the service-measurement flags described above. If you use offline practice, copies of question text are also saved in your browser’s storage, and a small offline helper (a service worker) keeps the practice page available without a connection; answers made offline stay on the device until they can be sent to your account. You can remove saved questions with “Remove saved questions” on the practice page. You can clear this at any time in your browser settings. The service-measurement storage can be switched off with the “Privacy choices” control.

Security

Clinora uses encrypted HTTPS connections, stores passwords only as salted one-way hashes, encrypts account emails while they wait to be sent, restricts administrative access to the company director and relies on providers with recognised security certifications. No online service can be guaranteed completely secure. If a breach likely to put your rights at high risk occurs, Clinora will tell you and the ICO as the law requires.

Children

Clinora is designed for doctors and medical students preparing for professional examinations. It is not intended for anyone under 18, and Clinora does not knowingly collect information from children.

Medical information

Do not enter identifiable patient information into Clinora. The platform is an examination-learning service and is not intended to store patient records or provide patient-specific clinical advice.

Optional FRCS revision backup

The Adaptive FRCS Revision Engine works in device-only mode by default. A signed-in learner may actively enable cloud backup to use their learning record across devices. The backup contains question identifiers, correctness, confidence, approximate response time, review scheduling and any reflection the learner chooses to save. It does not store selected answer letters, question text or patient information.

Turning sync off stops further automatic updates while retaining the existing backup. The learner can delete the cloud backup from the revision engine without deleting the copy on their current device. Reflection fields must not contain patient-identifiable information.

Communication Lab notes and colleague feedback

The Clinical Communication and Safety Lab stores module completion, private reflective notes and appraisal text only in the browser on the device being used. These private notes are not sent to Clinora. Clearing browser data or using another device may remove or hide them.

Anonymised colleague feedback is stored centrally so reviews from different colleagues can be combined, and a copy is retained in the submitting browser for its local summary. The form does not request names, email addresses, registration numbers or workplaces. Do not include patient information, identifiable clinical incidents or colleague-identifiable details in any free-text field. The person entering feedback must actively consent before submission.

Changes to this notice

Clinora will update this notice when the way it uses personal information changes. The effective date at the top shows when it was last changed. Significant changes will be highlighted on the site or emailed to account holders before they take effect.

← Return to Clinora