Privacy Policy

1. Data Controller

Foundation Ranker 2026 is operated by Doctor Devify Ltd ("we", "us", "our"), which acts as the data controller for the personal data collected through this service. You can contact us at hello@doctordevify.com.

2. Personal Data We Collect

We collect and store the following categories of data in our database (hosted on Supabase in the EU):

2.1 Account Information

Your email address and name, provided at signup or received via Google OAuth.

2.2 Ranking Preferences

The specialty and hospital preferences, priority settings, and feature selections you make when using the ranking tool.

2.3 Usage Data

Information about how you use the service, including interaction patterns, device information (such as screen size), and referral source.

2.4 Payment Data

Records of whether you have purchased Complete access. We do not store your card details; payment processing is handled entirely by Stripe.

2.5 Newsletter

If you opt in to "The Ward Round" by Doctor Devify (tips, tools and resources for foundation doctors), we store your email address for that purpose.

3. How We Use Your Data

• Providing the service: Generating your personalised rotation rankings, saving your preferences, and managing your account.
• Processing payments: Handling Complete upgrade purchases via Stripe and delivering your bonus ebook coupon.
• Service improvement: Analysing usage data to understand how the service is used, identify issues, and make improvements.
• Aggregated insights: We may use aggregated, non-identifying data to produce general insights about rotation popularity. These insights are derived from collective usage patterns and do not identify individuals.
• Newsletter:If you opted in to "The Ward Round" by Doctor Devify, we will use your email address to send you tips, tools and resources for foundation doctors. You can unsubscribe at any time.

4. Legal Basis for Processing

We process your personal data under the following legal bases (UK GDPR):

• Contract: Processing necessary to provide you with the service you have signed up for, including generating rankings, saving preferences, and processing payments.
• Legitimate interests: Collecting usage data to improve the service and generate aggregated insights. We have assessed that this processing does not override your rights, as the data is used to improve the product you are using and aggregated insights do not identify individuals.
• Consent:Sending you "The Ward Round" newsletter, where you have opted in. You may withdraw consent at any time by unsubscribing.

5. Third-Party Services

We use the following third-party services that may process your data:

6. Cookies

We use essential cookies for authentication and payment processing, plus Google Analytics 4 cookies to understand how visitors use the site. We do not use advertising or targeted tracking cookies. For full details, see our Cookie Policy.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the service. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons. Anonymous, aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data. All data is transmitted over encrypted connections (HTTPS), authentication is managed through industry-standard providers, and our database is hosted in the EU via Supabase. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Our primary database is hosted in the EU via Supabase. Some third-party services (such as Stripe and Google) may process data outside the United Kingdom. Where this occurs, we ensure that appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions, in compliance with UK data protection law.

10. Your Rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data.
• Right to restrict processing: Request that we limit how we use your data.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent (e.g. the newsletter), you may withdraw it at any time.

To exercise any of these rights, contact us at hello@doctordevify.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are significant, we will make reasonable efforts to notify you (for example, via email or an in-app notice).

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at: