1. Introduction
Welcome to Medily Ltd (“Medily”, “we”, “our”, or “us”).
Your privacy is important to us. This Privacy Policy explains how we collect, use, store, protect and share your personal information when you:
- visit our website;
- create a Medily account;
- purchase a subscription or Mock MMI;
- use Maya;
- access our Resources;
- contact us; or
- otherwise interact with our services.
Please read this Privacy Policy alongside our:
- Terms & Conditions
- Cookie Policy
- Refund & Cancellation Policy
By using Medily, you acknowledge that your personal information will be processed in accordance with this Privacy Policy.
2. Who We Are
Medily Ltd is the data controller responsible for your personal information.
Email: info@medily.co
3. Information We Collect
Depending on how you use Medily, we may collect the following information.
3.1 Account Information
When you create an account, we may collect:
- Full name
- Email address
- Password (encrypted)
- Account ID
- Subscription status
3.2 Payment Information
Payments are processed securely through Stripe.
We do not store:
- debit card numbers
- credit card numbers
- security codes
Stripe may provide us with limited payment information such as:
- payment status
- subscription status
- transaction reference
- billing country
Please refer to Stripe’s Privacy Policy for further information.
3.3 Maya Responses
When you use Maya we may collect:
- interview answers
- selected university
- chosen station
- difficulty level
- feedback
- scores
- optimised answers
- timestamps
This information allows Maya to provide personalised feedback and improve your learning experience.
3.4 Resource Usage
When using Resources we may collect:
- completed topics
- reading progress
- study time
- guide completion
- dashboard statistics
3.5 Mock MMI Information
If you purchase a University-Specific Mock MMI we may collect:
- selected university
- interview booking information
- interview attendance
- written interviewer feedback
- interview scores
- rescheduling information
3.6 Communications
If you contact us we may collect:
- emails
- support requests
- complaints
- survey responses
- feedback
3.7 Technical Information
We automatically collect certain technical information including:
- IP address
- browser type
- operating system
- device type
- approximate location
- referring website
- pages visited
- timestamps
4. Special Category Data
Medily does not intentionally request special category personal data.
Please avoid including unnecessary sensitive information when submitting interview answers or contacting us.
If sensitive information is provided, it will only be processed where necessary for providing our services or where permitted by law.
5. How We Use Your Information
We use your information to:
- create your account;
- authenticate your identity;
- provide Resources;
- provide Maya;
- deliver Mock MMIs;
- process payments;
- manage subscriptions;
- communicate with you;
- improve our services;
- monitor website performance;
- detect fraud;
- enforce our Terms;
- comply with legal obligations.
6. Lawful Basis for Processing
Under UK GDPR we rely on one or more of the following lawful bases:
Contract
To provide the services you purchase.
Legitimate Interests
To improve our services, prevent fraud and ensure website security.
Legal Obligation
Where required by law.
Consent
Where consent is required, including certain cookies and marketing communications.
You may withdraw consent at any time.
8. International Transfers
Some service providers may process information outside the United Kingdom.
Where this occurs, appropriate safeguards will be implemented in accordance with UK GDPR.
9. How Long We Keep Information
We retain information only for as long as necessary.
Typical retention periods include:
| Data | Retention |
|---|---|
| Account information | While account remains active |
| Payment records | As required by law |
| Maya responses | While account remains active unless deleted |
| Interview feedback | While account remains active |
| Support requests | Up to 6 years where appropriate |
| Website analytics | According to analytics provider settings |
Where required by law, information may be retained for longer.
10. Account Deletion
You may request deletion of your account by contacting: info@medily.co
Deleting your account may permanently remove:
- Maya history
- interview scores
- progress
- Resources progress
- dashboard statistics
Some information may be retained where required by law.
11. Data Security
We implement appropriate technical and organisational measures including:
- encrypted connections (HTTPS)
- secure authentication
- password hashing
- access controls
- secure hosting
- payment processing through Stripe
- regular software updates
Although we take reasonable steps to protect your information, no internet transmission can ever be guaranteed completely secure.
13. Marketing
We may occasionally send updates regarding:
- new Resources
- platform improvements
- new services
- important account information
Marketing communications will only be sent where permitted by law.
You may unsubscribe at any time.
Transactional emails relating to your account or purchases cannot be opted out of.
14. Children’s Privacy
Medily is designed primarily for applicants preparing for university interviews.
Users under 18 should ensure they understand this Privacy Policy and, where appropriate, seek guidance from a parent or guardian.
15. Your Rights
Under UK GDPR you may have the right to:
- access your personal information;
- correct inaccurate information;
- request deletion;
- restrict processing;
- object to processing;
- request data portability;
- withdraw consent;
- lodge a complaint with the Information Commissioner’s Office (ICO).
Some rights are subject to legal exceptions.
16. Automated Decision-Making
Maya provides automated interview feedback using artificial intelligence.
This feedback is intended solely for educational and practice purposes.
Users should not rely on Maya as professional medical, educational or legal advice.
Final admissions decisions are made solely by universities.
17. Third-Party Websites
Our website may contain links to third-party websites including:
- Stripe
- Calendly
- universities
- social media platforms
We are not responsible for their privacy practices.
Users should read the privacy policies of those organisations.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
The latest version will always be published on our website.
Material changes may also be communicated by email or through your account where appropriate.
19. Contact Us
If you have questions about this Privacy Policy or your personal information, please contact:
Medily Ltd
Email: info@medily.co
20. Complaints
If you are unhappy with how we handle your personal information, please contact us first so that we can attempt to resolve your concerns.
21. Compliance
This Privacy Policy is intended to support Medily’s compliance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR), where applicable
- other applicable UK data protection legislation
Nothing in this Privacy Policy limits your statutory rights under applicable law.
