Privacy Notice

1. Who we are

This notice covers the ETRMPractice simulator at app.etrmpractice.com. We are Deeray Mulitimedia Ltd, trading as ETRMPractice, based in England and Wales. Our registered company details are provided in our Terms of Service. We are the controller of the personal data described here. Contact us at support@etrmpractice.com. Our website, etrmpractice.com, has its own privacy notice.

2. What we collect

• Account: your email address, display name, sign-in details (held by our authentication provider), plan, and when you last used the service.
• Practice and learning: your progress, assessments and bookmarks, and the synthetic records you create, with an activity log showing what changed.
• Payment: your plan and subscription status, amounts, dates and references from our payment provider. The payment provider collects your card details; we do not see or store them.
• Support: messages you send us and our replies.
• Technical: IP address, browser and device details, and security logs.

You must give us your email address to create an account and payment details to buy a plan; without them we cannot provide the service.

3. Why we use it and our legal bases

• To create your account, provide the service and take payment: it is necessary for our contract with you.
• To keep the service secure, prevent abuse, fix faults and answer your messages: our legitimate interests.
• To keep accounting and tax records and meet other legal duties: legal obligation.

We do not sell personal data and we do not make decisions about you based solely on automated processing.

4. Who we share it with

We share personal data with service providers that support:

• Secure hosting, database storage and account sign-in.
• Payment processing and fraud prevention.
• Application email delivery.
• Our support mailbox and customer assistance.

Payment providers may also process information for their own legal and fraud-prevention purposes under their own privacy notices. We may disclose data where the law requires it.

5. Transfers outside the UK

Some of these providers may process data outside the UK. Where they do, we rely on the transfer safeguards in their data processing terms. Email us if you would like more information about these safeguards.

6. Sign-in storage and cookies

We use cookies or similar browser storage that are necessary to keep you signed in and to run the service securely. If we ever add analytics or other non-essential cookies, we will ask for your consent first and update this notice.

7. How long we keep it

We keep personal data only as long as we need it for the purposes above.

• Account and practice data: while your account is open. When you ask us to close or erase it, we will delete or anonymise it without undue delay, except records we must keep by law.
• Payment and invoice records: as long as accounting and legal requirements need.
• Support emails: as long as needed for your enquiry and follow-up.
• Technical logs: as long as needed for security and fixing faults.
• Backups: deleted data can remain in backups until they expire on the backup schedule. We keep backups protected and do not use them for other purposes.

8. Your rights

You can ask for access to your personal data, correction, erasure, restriction of use and, in some cases, a portable copy. Email support@etrmpractice.com; we will respond within the time the law requires.

You have the right to object to our use of your data where we rely on legitimate interests.

You can complain to the Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live, though we would appreciate the chance to resolve your concern first.

9. Changes

We will update this page if our practices change and show the date of the latest version.