Transparency Report

Privacy Policy

We are committed to protecting your clinical and career data with the highest standards of security and transparency.

Effective Date: 15 June 2026|Last Updated: 18 June 2026
verified_userSection 1.0

Data Collection & Sources

At HCRH, we understand that your professional journey is personal. To provide our Career Readiness services, we collect information that allows our AI Mentor to provide tailored feedback and help you build evidence-based portfolios.

Identity Info

  • check_circleFull Name & Contact Details
  • check_circleProfessional License Numbers
  • check_circleInstitutional Affiliations

Clinical Data

  • check_circleCase Studies & Performance Metrics
  • check_circlePeer Reviews & Mentorship Logs
  • check_circleReadiness Score History
analyticsSection 2.0

How We Use Your Data

We process your data primarily to enhance your Empowered Readiness. This involves complex analysis of your career evidence against industry-standard healthcare benchmarks.

psychology
AI Mentorship Training

Your de-identified clinical entries help train our AI to understand nuanced healthcare challenges, providing better coaching for the community.

auto_graph
Readiness Benchmarking

We compare your skill set against real-time industry demands to suggest precise educational pathways.

lock
Account Security

We use authentication data to protect your account and verify your identity when you access the platform.

shareSection 3.0

Sharing Policy

We do not sell your personal data. We may share data with:

  • arrow_rightSupabase (database infrastructure)
  • arrow_rightOpenAI (AI coaching engine, anonymised)
  • arrow_rightStripe (billing only)
  • arrow_rightNo recruitment agencies without consent
scheduleSection 4.0

Retention

We retain your data for as long as your account is active or as needed to provide services:

  • arrow_rightAccount data: held for account lifetime
  • arrow_rightAI conversations: 24 months
  • arrow_rightBilling records: 7 years (legal requirement)
  • arrow_rightDeleted on account closure within 30 days
security

Enterprise-Grade Security

While we are a career platform, we treat all professional records with the clinical rigor of healthcare data providers. We use AES-256 encryption at rest, TLS 1.3 in transit, and SOC 2-compliant infrastructure for all data storage.

gavelSection 5.0

Your Rights (UK GDPR)

In accordance with UK GDPR and the Data Protection Act 2018, HCRH grants you full control over your career portfolio and clinical evidence.

Access

Request a complete export of your career readiness data at any time.

Rectify

Correct inaccurate certifications or outdated professional records.

Delete

Exercise your Right to be Forgotten and purge your account data permanently.

Still have questions about your data?

Our privacy team is available to discuss our data governance framework.