Privacy Policy

Your data.
Handled with care.

This policy explains what ARCPassist collects, how we use it, and the choices you have regarding your personal data.

Last updated: 27 May 2026

Introduction

ARCPassist is a platform designed to help UK doctors manage portfolio requirements, training progression, reminders, and professional development tasks.

This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

ARCPassist is currently operated independently by Nicholas Dalmon.

By using ARCPassist or joining the waitlist, you agree to the practices described in this policy.

What data we collect

Depending on how you use ARCPassist, we may collect:

  • Name
  • Email address
  • Deanery
  • Training grade or level
  • Rotation and placement information
  • Reminder preferences
  • Payment information
  • Account login information
  • Messages or support requests sent to us

At the current stage, ARCPassist primarily collects information through waitlist signups and account registration.

Payment information is processed securely through third-party payment providers and is not stored directly by ARCPassist.

We ask users not to upload patient identifiable information.

How we use data

We use your information to:

  • Provide access to ARCPassist
  • Manage waitlist registrations
  • Send product updates and launch notifications
  • Provide reminders and portfolio tracking features
  • Improve the platform and user experience
  • Respond to support requests
  • Process subscriptions and payments
  • Maintain platform security and prevent misuse

We do not sell your personal data.

We do not use your information for third-party advertising.

Legal basis

Under UK GDPR, we rely on the following lawful bases for processing personal data:

  • Consent for waitlist signups, email updates, and future product notifications.
  • Contract for providing access to ARCPassist services and managing subscriptions and accounts.
  • Legitimate interests for improving platform functionality, maintaining security, and preventing abuse or misuse.

You can withdraw consent for marketing communications at any time.

Data retention

We only keep personal data for as long as reasonably necessary.

Current retention periods may include:

  • Waitlist information: until you unsubscribe or request deletion.
  • Account information: while your account remains active.
  • Portfolio-related content: up to 5 years unless deleted earlier at your request.
  • Payment and transaction records: as required for legal, accounting, or tax purposes.

You may request deletion of your account and associated data at any time.

Third-party services

ARCPassist uses trusted third-party providers to operate the platform. These may include:

  • Supabase for authentication, databases, and backend infrastructure.
  • GitHub Pages for website hosting.
  • Cloudflare for website performance and security.
  • Stripe for payment processing.

Future analytics providers, such as Google Analytics, may also be used as the platform develops.

These providers may process data on our behalf under their own privacy and security policies.

Cookies and analytics

ARCPassist may use cookies and similar technologies to maintain login sessions, improve website performance, understand platform usage, and enhance user experience.

At launch, analytics tools may be limited or disabled.

If analytics tools such as Google Analytics are introduced later, this policy will be updated accordingly.

You can usually control cookies through your browser settings.

Data security

We take reasonable technical and organisational measures to protect personal data. This includes:

  • Secure authentication systems
  • Encrypted connections through HTTPS
  • Restricted administrative access
  • Trusted infrastructure providers

No internet-based platform can guarantee absolute security, but we aim to follow good industry practices and continuously improve security standards as ARCPassist develops.

User rights

Under UK GDPR, users may have the right to:

  • Access their personal data
  • Correct inaccurate information
  • Request deletion of data
  • Request export of their data
  • Object to certain processing activities
  • Withdraw consent for marketing communications

We may need to verify your identity before processing certain requests.

Contact information

If you have questions about this Privacy Policy or your personal data, contact us:

hello@arcpassist.co.uk

Policy updates

This Privacy Policy may be updated from time to time as ARCPassist evolves.

Any significant changes will be communicated through the platform or by email where appropriate.

The latest version will always be available on the ARCPassist website.