← Back to MedX Careers
Privacy Policy
Last updated: March 2025 · MedX Careers ·
support@medxservice.com
MedX Careers is an independent NHS career coaching service. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we protect it in plain English.
1. Who We Are
MedX Careers is an independent career coaching service helping healthcare professionals secure NHS roles. We are not affiliated with NHS England, NHS Jobs, or any NHS Trust.
Data controller: MedX Careers
Contact: support@medxservice.com
WhatsApp: +44 7721 220920
2. What Data We Collect
We only collect data that you voluntarily provide to us. This includes:
- Your name and email address (from the booking enquiry form)
- Your phone number, if you choose to provide it
- The NHS Band and service you are interested in
- Any information you share in the free-text message field
- Your CV, supporting statements, or job descriptions you send us for coaching
- Communications via email or WhatsApp
We do not collect payment card details. Payments are processed by third-party providers (Stripe, PayPal) under their own privacy policies.
3. How We Use Your Data
We use your personal data solely to:
- Respond to your enquiry and arrange your free discovery call
- Deliver the coaching service you have paid for
- Send you your completed supporting statement, CV rewrite, or interview notes
- Follow up on your application progress (only if you invite us to)
- Improve our services based on anonymised feedback
We will never sell your data, share it with third parties for marketing purposes, or use it to send you unsolicited communications.
4. Legal Basis for Processing (GDPR)
Under UK GDPR, we process your personal data on the following legal bases:
- Contract performance: to deliver the coaching service you have purchased
- Legitimate interests: to respond to your enquiry before a contract is formed
- Consent: where you have explicitly agreed to receive follow-up communications
5. How Long We Keep Your Data
We retain your personal data for as long as necessary to deliver our service and comply with legal obligations:
- Enquiry data (no purchase): deleted within 6 months of last contact
- Client data (purchase made): retained for 2 years for service continuity, then securely deleted
- Financial records: retained for 7 years as required by HMRC
6. Your Rights Under UK GDPR
You have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate data
- Erasure: ask us to delete your data ("right to be forgotten")
- Restriction: ask us to limit how we process your data
- Portability: receive your data in a portable format
- Objection: object to processing based on legitimate interests
To exercise any of these rights, email us at support@medxservice.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.
7. Data Security
We take reasonable technical and organisational measures to protect your data, including:
- Secure email communications
- Password-protected storage of client documents
- Limited access — only the coaching team handles your data
- No storage of payment card details on our systems
8. Third-Party Services
We use the following third-party tools to operate our service:
- Formspree: processes booking form submissions (formspree.io)
- Netlify: hosts this website (netlify.com)
- WhatsApp Business: client communications (Meta Platforms)
- Google Fonts: website typography (fonts.google.com)
Each provider operates under their own privacy policy. We only share the minimum data necessary for these services to function.
9. Cookies
This website does not use tracking cookies or analytics tools. Google Fonts may set a minimal technical cookie. We do not use advertising or profiling cookies.
10. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top will always reflect the most recent version. Continued use of our services after changes constitutes acceptance of the updated policy.
11. Contact Us
For any privacy-related questions or to exercise your rights: