Privacy Policy

Last updated: 14 October 2026

1. About this policy

This is the privacy policy for the Doctor Devify Hub at tools.doctordevify.com. It covers the hub homepage, every resource we publish under it (Ward on the Street, Foundation Ranker, the Pay Calculator and its Complete resources, the Pay Scales pages, the Payslip Explainer, the Tax Relief Calculator, the NHS staff pay scales, the NHS Staff Pay Calculator, the NHS staff Payslip Explainer, the Rota Compliance Check, Personalised Payslip Check and Automatic Correction Email for NHS staff, and Spec Select), the books at books.doctordevify.com, and the links page at links.doctordevify.com. The main site at www.doctordevify.com collects different things and has its own policy.

Each tool or product collects different things, so the per-area detail is split into its own section below. The shared parts (your rights, legal basis, security, contact) sit at the bottom and apply to everything.

2. Who we are

Doctor Devify Ltd ("we", "us", "our"), a UK-registered company, is the data controller. We are registered with the Information Commissioner's Office under reference ZC235234. The brand we use day-to-day is "Doctor Devify". To get in touch, email hello@doctordevify.com.

3. The hub homepage

The hub homepage at tools.doctordevify.com doesn't need an account. To understand which resources people find useful, we record anonymous events as you browse. They aren't linked to your identity and we can't connect them to you as a person.

4. The tools

4.1 Before You Rank

Before You Rank has now been brought under Ward on the Street, and its functionality is the same. What it keeps is in 4.2.

4.2 Ward on the Street

Ward on the Street publishes anonymous hospital reviews by resident doctors and by other NHS staff. It's free, writing a review needs no account, and we never ask for your name, email, GMC number or any other registration number. When you write a review we keep:

Your review: the hospital, the specialty, your grade group, when the job ended (as one of three broad answers), your ratings and your comment. For other NHS staff: your staffing group (such as nursing or pharmacy), the hospital, the department, your role, when you last worked there (one of two broad answers), your ratings and your comment. Pharmacy staff are also asked their pay band, which is never shown (a pharmacist's review shows as junior or senior); junior pharmacists and technicians can say what shift patterns they work, which is shown only together with other answers for that hospital, never with the review. Pharmacists and technicians can also select the other wards they cover; their ratings count towards each, and the wards are never shown with the review. We never ask anyone else their pay band, or anyone whether they still work there. No date is kept with it once it has been read.
A scrambled copy of your receipt code: the code is shown to you once, and what we keep can't be turned back into it. With the code you can check or withdraw your review.
Your internet address, scrambled: used for one day to stop automated abuse, and never stored with a review.
How the site is used: the pages opened, the hospitals picked from the search and, for other NHS staff, the staffing group chosen, with a random number for the visit that is forgotten when you close the tab, and no internet address or account. The review form is counted without that number, so a count can never be matched to a review, and the receipt page records nothing. Don't count my visits, on the cookie policy, turns it off.

If you sign in with a Doctor Devify account, we also keep:

Your role: asked when you create an account, such as your grade or your profession, and kept on your account. Change it on your account page. It is never shown beside a review.
Helpful votes: stored against your account. They count towards your badges and are used for nothing else.
Claimed reviews: when you claim a review with its receipt code, it is linked to your account so it appears in Your reviews on your account page and counts towards your badges. Only you can see the link: never beside the review or anywhere public. Remove a review from Your reviews and the link is deleted; it also goes if the review is withdrawn or your account is deleted. A review you don't claim is never linked to you.
Badges: which ones you have earned and when. They are never shown publicly.

Reports: anyone can report a published review. We keep the reason and any note you add with the review, and nothing about you.

Locum rates: anyone can send the locum rates they were paid, with no account: the hospital, the specialty, the grade, the rates and the month. Nothing about who sent them is kept with them. Your internet address, scrambled, is used for one day to limit how many are sent. Confirming a rate keeps the same details; if you are signed in, your account also gets the “making p” badge, which is kept apart from the rate.

Updates to a trust's details: if you send an update, for example to a trust's electronic patient record or a hospital's parking, we keep what you send, your role and how you know, so we can check it before it goes live.

Ward on the Street doesn't use Google Analytics. Because nothing links a review to you, we can only find yours from its receipt code, so keep it somewhere safe.

4.3 Foundation Ranker

Foundation Ranker has user accounts and a paid Complete tier. We collect:

Account info: your email address and name, provided at signup or received via Google sign-in.
Ranking preferences: the choices you make in the tool.
Usage data: the pages you open, what you click, how long you spend on a page, the site that referred you, any campaign tags on the link you arrived through, and your browser type and screen size. Tied to a random session ID, and to your account when you are signed in.
Payment data: a record of whether you've purchased Complete access. Payments are handled by Stripe.
Newsletter: if you opt in to The Ward Round newsletter at signup, we store your email, and your role if you gave one, for that purpose.
Postcode lookup: if you use the "sort hospitals by distance from your postcode" feature, your browser sends the postcode directly to postcodes.io to convert it into coordinates. It does not pass through our servers and we never store it. The distance is then worked out in your browser against hospital locations we already hold.

4.4 Pay Calculator

The Pay Calculator is free and open to everyone, and no account is needed to use it or to see your take-home figure. The numbers you type into the calculator stay in your browser, and only what you explicitly save is stored on our side. An account is needed for Doctor Pay Complete, and Complete is needed to save a salary or a rotation and to use the Rota Compliance Check, the Personalised Payslip Check, the Automatic Correction Email, Test Career Decisions and the advanced payslip breakdowns. We collect:

Usage stats which pages and panels you open and what you click, tied to a random ID, and to your account when you are signed in.
Which way Complete was offered to you: we sometimes try out different ways of offering Complete. Each browser is given one at random, saved to your account if you sign in.
Your account details if you create one: your email, and a display name, photo and career stage if you choose to add them.
Salary scenarios you save, stored against your account so you can compare them later. Only saved when you press save, and you can delete them at any time.
Rotations and salary analyses you build, the name you give a rotation, the trust or organisation you pick for it, its grade and dates, your rota, the figures on your work schedule, the payslip lines you type in to be checked, the correction email drafted from them and the calculator's answers, saved to your account as you go so you can come back to them. The organisation you name is never shared or shown to anyone else. You can delete a rotation and everything saved with it at any time.
Career decisions you test, the two sets of figures on Test Career Decisions, kept in your browser only. Nothing from that page is sent to us unless you save a salary.
Payment data: a record of whether you hold Complete. Payments are handled by Stripe, which receives your card details; we never see them.
Your acceptance of the estimate statement, the date you ticked it, kept in your browser and, when you are signed in, on your account, so you are not asked again on another device.
Your email, only if you opt in to email yourself a copy of your numbers or sign up to The Ward Round newsletter. Used solely for what you asked for.
Correction submissions: if you flag a mistake, we keep what you wrote so we can review and fix it. The email field is optional. If you attach a screenshot it is stored privately, is only opened by us to check the correction, and is deleted with it.
Course register of interest: if you register interest in the resident doctor finances course, we store your first name, email address, career grade, the topics you ticked and anything you write in the box, so we can tell you when it opens and build it around what people asked for. You can ask us to delete it at any time.
Your email, if you join the waiting list for the Rota Compliance Check, the Personalised Payslip Check and the Automatic Correction Email outside England: the address (your account's, if you join signed in), the nation you chose, the page you joined from and when. It is used only to tell you when they open. Ask us and we will take you off the list.

4.5 Payslip Explainer

The Payslip Explainer shows a worked example payslip with fixed figures. You do not enter anything and nothing about you is collected, stored or shared. No account is needed and none of it is personal to you. The only data involved is the same page-view count described above, tied to a random ID, and to your account if you happen to be signed in to the Pay Calculator.

4.6 Books

What we collect depends on which book you buy and how it's delivered.

Digital books: currently 42 Night Shift Lessons, sold here through our payment partner Stripe, and before that through Payhip.

Anonymous usage stats tied to a random ID (page views, CTA clicks, slideshow tab views, FAQ opens). Not tied to your identity.
Your purchase: the email you bought with and, for a gift, the email of the person it is for; the name you give at checkout; what you paid; Stripe's references for the payment; your download code; how many times your copy has been downloaded; and your stamped copy, kept privately so every download is the same file. We use these to deliver the book, to let you download it, and for bookkeeping.
The stamp on your copy: every page carries the email it was bought for, the date and time of purchase and an order reference, so a copy can be traced to its purchase.
Your account: if you have a Doctor Devify account with the same email, the book appears in its Purchases and Billing tab.
Payment: Stripe receives your card details and billing details to take the payment; we never see your card.
The Ward Round: only if you choose yes at checkout, the email you bought with is added to it, and you can leave from any of its emails.
Purchase record from Payhip: for a copy bought on Payhip, Payhip sends us your email, name, product, purchase date and amount, so we can fulfil delivery and bookkeeping.
Billing data held by Payhip: Payhip itself receives your email, name, card details and billing address to process the payment, under its own privacy policy.

Paperback books: currently NHS Hot Topics, sold through Amazon.

Anonymous usage stats tied to a random ID (page views, CTA clicks with destination "amazon", slideshow tab views, FAQ opens). Not tied to your identity.
No data from Amazon: we don't receive purchase data from Amazon. Once you click through, Amazon's own terms and privacy policy apply.

4.7 The Affiliate Programme

If you arrive through an affiliate's link, or a page address ending in ?ref=, a cookie called dd_ref holds that affiliate's code for thirty days so that a paid resource you buy in that time is credited to them. It identifies the affiliate, not you; it is not essential, and clearing your cookies removes it. Choosing Don't count my visits on the cookie policy removes it and stops it being set again in that browser.

If you buy in that time, or type an affiliate's code at checkout, we record which affiliate the sale is credited to, what you paid and the discount. We check the account you bought with only to make sure an affiliate is not paid for buying through their own code. The affiliate is never told who you are: they see a count of sales and an amount. Affiliates' own details are covered by the programme's privacy policy at /affiliates/privacy.

The bonuses that come with a digital book (the Pastest discount code, the creator tips and the handover guide) are inside the book itself.

4.8 Campaign links

If you arrive through one of our campaign links, a cookie called dd_campaign records which campaign brought you, for thirty days. If you make an account or buy a paid resource in that time, we note against your account which campaign it came from. It is not essential, and clearing your cookies removes it. Choosing Don't count my visits on the cookie policy removes it and stops it being set again in that browser.

4.9 NHS Staff Money Resources

The NHS Staff Pay Calculator is free and open to everyone, and no account is needed to use it. The numbers you type into it stay in your browser, and when you are signed in they are also saved to your account, so they are there on any device. The Tax Relief Calculator is free and needs no account either: what you type into it stays in your browser, and the usage stats below count only which kinds of cost you entered, your relief rate and the totals, never your pay. The Rota Compliance Check for NHS staff, the Personalised Payslip Check and the Automatic Correction Email are part of NHS Staff Pay Complete, a subscription, and need an account, because your rotas and payslips are saved to it. We collect:

Usage stats which pages and panels you open and what you click, tied to a random ID, and to your account when you are signed in.
Which way Complete was offered to you: we sometimes try out different ways of offering Complete. Each browser is given one at random, saved to your account if you sign in.
Your account details if you create one: your email, and a display name, photo and career stage if you choose to add them.
Your calculator figures, if you are signed in: the band, pay step, hours, tax code, student loans and pension choice you entered, saved to your account so they are there on any device. Delete your account and they go with it.
Rotas you check, the name you give a rota, the organisation you pick for it, its band and dates, your contracted hours, whether you work nights or have agreed to work more than 48 hours a week, and the shifts you set up and paint, saved to your account as you go so you can come back to them. The organisation you name is never shared or shown to anyone else. You can delete a rota at any time.
Correction emails you write from a rota: your name, the recipient's name if you add it, where you work, the start date (or, for an email to payroll, the payslip month), which findings you include and any changes you make to the wording, saved with that rota so it is there when you come back. We never send the email; you copy, print or open it in your own email. It is deleted with the rota.
Payslips you check against a rota: your pay step, high cost area, any recruitment and retention premium, pension choice and student loan plans; for each month, the figures and hours you copy from your payslip, its tax code and pension percentage, and the days you mark as annual leave, sickness, a swap or an extra shift. They are saved with that rota and deleted with it.
Your email, if you join the waiting list for the Rota Compliance Check, the Personalised Payslip Check and the Automatic Correction Email: the address (your account's, if you join signed in), the nation, the page you joined from and when. It is used only to tell you when they open. Ask us and we will take you off the list.
Payment data: a record of whether you hold NHS Staff Pay Complete, and when it renews or ends. Payments are handled by Stripe, which receives your card details; we never see them.
Your acceptance of the estimate statement, the date you ticked it, stored in your browser, and with your account when you are signed in so you are not asked again on another device.
Your email, only if you sign up to The Ward Round newsletter. Used solely for that.
Correction submissions: if you flag a mistake, we keep what you wrote so we can review and fix it. The email field is optional. If you attach a screenshot it is stored privately, is only opened by us to check the correction, and is deleted with it.

4.10 The link in bio

Until Spec Select opened, you could join its waiting list on our link in bio at links.doctordevify.com. Spec Select is our free UK specialty training hub. We keep the email address you gave, which version of the page you joined from (TikTok, Instagram or the plain address) and when. It is used only to tell you that Spec Select is open. Ask us and we will take you off the list.

4.11 Spec Select

Spec Select is free and open to everyone. Most of it needs no account; seeing your score in a score calculator needs a free one. We collect:

Usage stats which pages and sections you open and what you click, tied to a random ID, and to your account when you are signed in.
Your account details if you create one: your email, and a display name, photo and career stage if you choose to add them.
Your scores, if you use a score calculator while signed in: what you chose in each category and your total, for each specialty, so the calculator opens on them on any device. Reset in the calculator removes them.
Your Compare choice, if you are signed in: the specialties you picked to compare, so they are the same on any device. Taking them out of Compare removes them.
The interview preparation waiting list, if you join it on a specialty's page: your name, email and grade, the specialty, the year you plan to apply and whether you are interested in mock interviews, so we can tell you when The Schema's preparation for that specialty is ready. If you join for Internal Medicine Training, your email also goes to Kit for The Schema's free teaching series.
Reviews of Spec Select, if you leave one: your star rating and what you write, and a display name and email only if you add them. We read reviews before any is shown.
Correction submissions: if you flag a mistake on a specialty page, we keep what you wrote so we can review and fix it. If you attach a screenshot it is stored privately, is only opened by us to check the correction, and is deleted with it.
Ideas for what to build next: what you suggest, the part of Spec Select it is about, and your email only if you add it.
Offers to share a tips video: your name, email, what you do, your social accounts, the specialty and anything you tell us to declare, so we can get in touch about your video.

5. What we use your data for

Contract: for what we need to deliver to you when you have an account or buy from us (saving what you choose to save, taking payment for Foundation Ranker Complete, Doctor Pay Complete, NHS Staff Pay Complete and the books, and providing the service you signed up for), for a signed-in doctor's helpful votes, claimed reviews and badges on Ward on the Street, and for saving the rotas you check in NHS Staff Money Resources.
Legitimate interests: for usage data across the Hub, which is tied to a random ID and not to you. The resources on the Hub, apart from Ward on the Street, share one random ID, so we can see how many people use more than one of them. In Foundation Ranker and NHS Staff Money Resources, where you are signed in, the same events are also tied to your account so we can support it and see how it is used. It is used to run and improve what we publish, and nothing about it is sold or used to advertise to you. On Ward on the Street it also covers publishing reviews, reading them against the guidelines first, handling reports, and the one-day abuse check on your scrambled internet address.
Consent: for The Ward Round newsletter, for the "email me a copy of my numbers" feature, and for the Spec Select waiting list on our link in bio. You can withdraw at any time by unsubscribing or by emailing us.
Strictly necessary: for the cookie set by a preview link, which is what lets the page open for you.

6. Who else touches the data

To run the Hub we use the providers below. Where they process personal data on our behalf they do so as our data processors under appropriate agreements, and each may handle limited technical data (such as IP addresses) when serving its part of the service.

Supabase: our database, user accounts and file storage. Hosted in the United Kingdom.
Vercel: hosting and content delivery for this site and for every tool published under it. Requests are handled in the United Kingdom.
Stripe: payments for Foundation Ranker Complete, Doctor Pay Complete, NHS Staff Pay Complete, and books and digital products. It uses the billing address you give at checkout to work out any tax due.
Resend: delivery of the emails we send, such as those to verify an account or reset a password, and those about a purchase, such as an ebook's download code.
Kit (formerly ConvertKit): delivery of The Ward Round newsletter, if you subscribe to it: your email and, if you gave one, your role. And The Schema's free teaching series, if you join Spec Select's waiting list for Internal Medicine Training: your email.
Automated text-checking software: checks the words of each Ward on the Street review against its guidelines before it goes live. It receives the review's words and the details given on the form, never anything that identifies who wrote it, acts only on our instructions, and does not use what it receives to train its systems. It may process this outside the United Kingdom, under the safeguards in its data processing terms.

Card details for Foundation Ranker Complete and for book and digital-product purchases are handled directly by our payment processors and never stored by us.

We don't sell, rent or share your data with any third party for marketing purposes.

7. How long we keep things

Doctor Devify accounts: until you ask us to delete your account. We'll process deletion requests within 30 days, except where we're legally required to keep something.
Rotas you save in NHS Staff Money Resources, and the payslips you check against them: until you delete them or your account.
The NHS Staff Money waiting list: until we have told you the resources are open, or sooner if you ask us to take you off it.
Spec Select's interview preparation waiting list: until we have told you preparation for your specialty is ready, or sooner if you ask us to take you off it.
Offers to share a tips video: until we have replied, and while your video is shown if it is published.
The Spec Select waiting list: until we have told you Spec Select is open, or sooner if you ask us to take you off it.
Anonymous usage stats: up to 24 months, then deleted.
Newsletter: until you unsubscribe.
Email-a-copy feature: not kept beyond the email being sent.
Correction submissions: until reviewed and resolved, and any attached screenshot is deleted with them.
Ward on the Street reviews: a published review is shown for three years if the job ended, or you last worked there, in the last year, and for one year otherwise, and is then no longer shown or counted. You can withdraw yours at any time with its receipt code, and it is deleted.
Ward on the Street reports: kept with the review they are about, and deleted with it.
Ward on the Street abuse checks: one day.
Helpful votes, claimed reviews and badges: until you delete your account. A claimed review's link to your account goes sooner if you remove it from Your reviews or the review is withdrawn.
Course register of interest: until the course opens and we have told you, or until you ask us to remove you, whichever comes first.
The Doctor Money waiting list: until we have told you the checks are open in your nation, or sooner if you ask us to take you off it.
Preview-access cookies: seven days, then auto-removed by your browser.
Purchase records, for books and subscriptions: kept while we're legally required to (UK tax law: six years from the end of the relevant accounting period).
Your stamped copy of an ebook: kept for as long as the purchase stands, so every download is the same file, and deleted when you ask.

8. Security

All Hub traffic is served over encrypted HTTPS. Our database and the servers that handle requests are both hosted in the United Kingdom, and access is restricted to authorised Doctor Devify staff. Authentication is managed through Supabase. No method of transmission or storage is completely secure, and we can't guarantee absolute security, but we follow standard practice.

9. International transfers

Both halves of the service run in the United Kingdom. Our database is hosted by Supabase in the UK, and the servers that handle requests are Vercel functions in the UK. Your data is stored and processed in the UK.

Some of our providers are US companies, so a limited amount of technical data may still be accessed from outside the UK, for example when their staff support the service. Payments (Stripe), newsletter delivery (Kit), the emails we send (Resend) and the automated checking of Ward on the Street reviews are handled by US providers by their nature. Where personal data is transferred outside the UK we rely on the standard safeguards under UK data protection law, such as the UK International Data Transfer Addendum to the EU standard contractual clauses, or a relevant adequacy decision.

10. Your rights

Under UK GDPR you have the following rights:

Access: ask for a copy of any personal data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your personal data.
Restriction: ask us to limit how we use your data.
Portability: receive your data in a structured, machine-readable format.
Objection: object to processing based on legitimate interests. For the usage counts on the hub, its books and links pages and Ward on the Street, choosing Don't count my visits on the cookie policy stops them in that browser straight away.
Withdraw consent: for the newsletter or email-a-copy features, withdraw consent any time by unsubscribing or emailing us.

To exercise any of these rights, email hello@doctordevify.com. We'll reply within a month. You can also complain to the ICO at ico.org.uk.

11. Changes

We may update this policy. Changes are posted on this page with a new revision date. Where changes are significant, we'll make reasonable efforts to flag them (for example, via email to account holders or an in-app notice).

12. Contact

Doctor Devify Ltd
Email: hello@doctordevify.com