Privacy Policy
Last updated
ProHealth Pathway - A division of Mednurse Consult ("we", "us", or "our",) is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal information provided through our website, services, and communications. By using our services, you consent to the practices described in this policy.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Personal Information
Full name, email, phone, date of birth, nationality, identification documents, professional documents (CV, nursing qualifications, NMC registration), employment history, payment information.
Technical Information
IP address, location data, browser type, device information, website usage data
Communication Records
Email correspondence, WhatsApp messages, consultation notes, support tickets
How We Use Your Information
Service Delivery
Providing visa document organisation, nursing relocation support, OSCE and CBT preparation, and consultations.
Communication
Scheduling consultations, appointment reminders, service updates.
Payment Records
Recording the bank transfers you tell us about and the receipts you upload, and confirming them against our accounts. We do not take card payments on the website.
Digital Product Delivery
Providing access to ebooks and study materials.
Marketing
Sending promotional materials and newsletters (opt-out available)
Legal Compliance
Complying with UK immigration laws and data protection regulations.
Legal Basis for Processing (UK GDPR)
Contract Performance
Fulfilling our service agreement with you
Consent
Where you have given explicit consent (e.g., marketing communications)
Legal Obligation:
Where required by UK immigration or data protection laws
Legitimate Interests
Business operations, fraud prevention, service improvement
Data Protection and Security
The measures we actually have in place to protect your personal data:
- Encrypted connections (HTTPS/TLS) between you and our website, app and servers
- Passwords stored only as salted hashes, never as the password itself; sign-in and reset codes stored only as hashes and valid for a short time
- Uploaded receipts and purchased files kept as private assets and served through short-lived signed links, not public URLs
- An authenticator code required before our team can change the bank accounts shown to you
- Access to customer data limited to named staff accounts
- Rate limits on sign-in, sign-up and payment forms to slow automated abuse
Data Sharing and Disclosure
We do not sell or rent your personal data to third parties. We may share your information only with:
Resend
Sending our emails to you — verification codes, password resets, booking and payment notices.
Cloudinary
Storing files: the payment receipts you upload, book and course files you buy, and practice-station images.
Contabo
Hosting our website, application and database servers.
Microsoft 365
Our team mailboxes and documents, including messages you send us.
Sentry
Error reporting from our mobile app, so we can fix crashes. It is configured not to send personal data.
YouTube
Streaming video course chapters, through the privacy-enhanced youtube-nocookie.com player.
Anthropic
Helping our team turn question documents into practice questions. No customer data is sent to it.
Banks
When you pay by bank transfer, our bank shows us the sender name and reference you used. We do not see your card or account details.
Professional Partners
UK immigration solicitors, recruitment agencies, healthcare employers (with explicit consent)
Regulatory Bodies
UK Home Office, NMC, or other authorities where required by law
Legal Requirements
Law enforcement if required by court order
Data Retention
Active client data
Duration of service provision + 6 years (UK business record-keeping requirements)
Financial records
7 years (UK tax law)
Marketing communications
Until you opt out or withdraw consent
Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data (subject to legal retention requirements)
Right to Restrict Processing
Request that we limit how we use your data
Right to Data Portability
Receive your data in a structured, commonly used format
Right to Object
Object to processing based on legitimate interests or for marketing
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint
File complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk
To exercise any of these rights, contact us at admin@prohealthpathway.org. We will respond within one month.
International Data Transfers
If we transfer data outside the UK, we ensure appropriate safeguards: EU-UK Standard Contractual Clauses, Data Processing Agreements, transfers to countries with UK government adequacy decisions.
Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from children. Contact us immediately if you believe we have collected information from a minor.
Changes to This Privacy Policy
We may update this policy periodically. Material changes will be communicated via email or website notice. This version was last updated on 8 October 2026.
Contact Information
For questions regarding this Privacy Policy or your personal data:
ProHealth Pathway (MedNurse Consult) Email: admin@prohealthpathway.org Whatsapp: +44 7555 688795