Privacy Policy

MEDmix Careers Ltd ("we", "our", or "us") is committed to protecting the privacy and confidentiality of individuals who visit our website, register for accounts, book consultations, or purchase our healthcare career coaching packages.

This Privacy Policy explains what personal information we collect, why we collect it, how it is processed and secured, and your rights under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

We may collect and process the following categories of personal information:

• Identity & Contact Details: Name, email address, telephone number, and location.
• Professional & Career Information: CVs, resumes, cover letters, supporting statements, clinical qualifications, GMC/NMC registration details, and professional experience.
• Account Credentials: Secure email authentication records via our authentication provider.
• Payment Information: Transaction history and purchase confirmation details. (Note: Payment card details are processed directly and securely by Stripe; we never store your credit/debit card numbers).
• Coaching Notes & Communication: Progress milestones, feedback notes, interview coaching assessments, and communication records.

We process your data strictly for legitimate business and contractual purposes, including:

• Delivering personalized career guidance, CV feedback, and interview coaching services.
• Managing your coaching milestones and application support tracking.
• Scheduling consultation appointments and sending booking confirmations.
• Processing transactions and generating invoices for coaching packages.
• Responding to inquiries, customer support requests, and feedback.
• Complying with statutory, regulatory, and legal obligations in the United Kingdom.

We treat all candidate career documents, CVs, and personal history with strict professional confidentiality. We never sell, rent, or trade your personal data to third parties for marketing purposes.

We implement industry-standard encryption (TLS/SSL) for data in transit and robust access controls for data stored in our secure database infrastructure. Only authorised coaches and administrative staff with a direct need-to-know have access to your coaching files.

5. Third-Party Service Providers

We partner with vetted, industry-leading service providers who uphold strict security standards to operate our website:

• Stripe: Payment gateway for secure order processing.
• Supabase: Encrypted authentication and cloud database management.
• Vercel: Secure web hosting and application delivery.

Under UK data protection laws, you possess the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request the deletion or erasure of your personal data where there is no compelling legal reason for its continued processing.
• Object to or restrict the processing of your data under certain circumstances.
• Request data portability to transfer your information to another service provider.