Your Privacy Matters

Privacy Policy

Last updated: 15 August 2025

1. Introduction

MyFRCR ("we," "our," or "us"), operated by JW Digital Services Ltd, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FRCR 2B exam preparation platform at myfrcr.com.

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information You Provide

  • Name and contact details (email address)
  • Account credentials (username and password)
  • Professional information (medical school, year of training)
  • Payment information (processed securely through our payment provider)
  • Communications you send to us

2.2 Information Automatically Collected

  • Usage data (pages visited, features used, time spent on platform)
  • Device information (browser type, operating system, device type)
  • IP address and approximate geographic location
  • Cookies and similar tracking technologies
  • Performance data (exam scores, progress tracking)

Important Note on Content Creation

We want to emphasize that all our educational content (cases, questions, and answers) is created by human expert radiologists. We do not use AI to generate or process any medical educational content or your personal data for content creation purposes.

3. How We Use Your Information

We use your information to:

  • Provide access to our FRCR 2B exam preparation platform
  • Process your registration and maintain your account
  • Track your learning progress and provide performance analytics
  • Process payments and prevent fraudulent transactions
  • Send important platform updates and educational communications
  • Respond to your inquiries and provide customer support
  • Improve our platform and develop new features
  • Comply with legal obligations and protect our rights

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

  • Contract: To provide our services and fulfill our agreement with you
  • Legitimate Interests: To improve our platform and ensure security
  • Consent: For marketing communications (which you can opt-out of anytime)
  • Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

  • Service Providers: With trusted third parties who assist in operating our platform (e.g., hosting providers, payment processors)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, sale, or acquisition
  • With Your Consent: When you explicitly agree to sharing

All third parties are required to maintain the confidentiality and security of your personal information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • SSL/TLS encryption for data transmission
  • Secure password hashing using industry-standard algorithms
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Secure data storage with encrypted backups
  • Staff training on data protection best practices

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations (typically 6 years for financial records)
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure

Request deletion of your personal data

Right to Portability

Receive your data in a portable format

Right to Object

Object to certain processing activities

Right to Restriction

Limit how we use your data

To exercise any of these rights, please contact us at privacy@myfrcr.com. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences and settings
  • Analyze platform usage and performance
  • Prevent fraud and enhance security

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform.

10. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO.

11. Children's Privacy

Our platform is intended for medical professionals and trainees aged 18 and above. We do not knowingly collect personal information from individuals under 18 years of age.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email.

13. Contact Information

Data Controller: JW Digital Services Ltd

Email: admin@myfrcr.com

Supervisory Authority:

You have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

Skip to main content