How we use and protect your personal information.

Information recorded

• Your signed-in account identifier, email address and name.
• Your GMC number, selected medical grade or job title, specialty and NHS trust, health board or organisation.
• The appraisal portfolio entries you choose to create, including procedure supervision levels and clinic-log information.
• A senior’s name and professional email address when you choose to prepare a CBD or procedure verification request.
• Appraisal request details, including contact information, GMC number, due dates and the work history you submit for suitability review.
• Five-minute call requests, including your name, email address, mobile number, preferred date and time, and any optional note.
• Webinar registration details, including your name, email address, mobile number, GMC number, grade, specialty and organisation.
• Article questions or comments you choose to post, together with your chosen public display name and signed-in account identifier.
• The date of your required privacy and safety acknowledgements.
• Your optional marketing preference and when it was last changed.
• Your separate optional third-party sharing preference and when it was last changed.
• If you allow usage analytics: the page visited, access time, referring website domain, device type, approximate city, region and country, a random browser identifier, and whether the browser confirms an app installation. On iPhone or iPad, the first launch from the Home Screen is used as confirmation instead. If you arrived through a Google advert, the same choice also controls whether a completed appraisal request or call booking is measured as a conversion. Your IP address is not stored by Medical Appraisal Hub.

How the information is used

Account and profile information is used to provide your private portfolio, organise records and protect access. Marketing emails may only be sent when you actively choose the separate marketing option. It is not required to use the portfolio.

If you separately opt in to third-party sharing, only your name, email address and selected professional profile may be shared with relevant medical education, appraisal or portfolio-service partners. Portfolio entries are not shared for marketing.

Information submitted through the appraisal request form is used to assess suitability, understand your appraisal and revalidation timescale, and respond about possible arrangements.

Five-minute call request details are used to contact you and confirm whether your preferred appointment time is available.

Webinar registration details are used to administer the session and send joining information. Updates about future webinars are sent only when you choose the separate optional webinar-updates box.

When you request senior verification, the site records the senior’s contact details and the date the request was prepared. The message opens in your own email application for you to review and send; the senior verifies the record by replying to you.

Article discussions are public: your chosen display name, question or comment and posting date can be read by other visitors. Your account identifier is used behind the scenes to attribute and protect posting access and is not displayed with the comment.

First-party usage analytics are used to understand how the website is accessed and to improve its pages and services. With the same optional choice, Google Ads may record that an advert led to a completed appraisal request or five-minute call booking. No form contents, email address or enhanced-conversion data are sent to Google for this measurement, and advertising personalisation stays disabled. The master administrator can see recent consented visits in aggregate and by approximate location, together with consented app-install confirmations, but these records are not linked to a signed-in doctor. Individual first-party analytics records are retained for up to 90 days.

Patient information

Do not enter names, dates of birth, NHS numbers, hospital numbers, addresses, exact dates or unusual combinations of facts that could identify a patient. Portfolio reflections and article discussions should be anonymised from the outset.

Your choices

You can revisit account creation to update your professional profile or withdraw marketing or third-party sharing consent. Individual portfolio entries can be edited or deleted from your dashboard. For an account access, correction or deletion request, contact Medical Appraisal Hub through the request page without including patient information.

You can allow or decline first-party usage analytics and change that decision at any time using the Usage privacy link in the website footer. Withdrawing your agreement stops future visit recording and removes the analytics identifier from your browser. It also stops future Google Ads conversion measurement from this browser.

Who is responsible

Harborne Medical Group Limited (company number 17421245), led by Dr Andrew Harborne, operates Medical Appraisal Hub and is responsible for the site’s use of this information. Supabase provides account authentication and processes email addresses and securely protected password credentials for that purpose. OpenAI Sites and Cloudflare provide website, database and evidence-file infrastructure. These providers process information only as needed to provide those services. Google processes consented advertising-conversion signals when a visitor who arrived through an advert submits an appraisal request or books a five-minute call.