Privacy Policy

CatchMed is an independent, non-profit, voluntary student-led project operated by the site owner. The site owner decides how CatchMed uses personal data and is the contact point for privacy questions.

Contact: contact@catchmed.co.uk

CatchMed may collect your email address, authentication and account information, university and year group, specialty interests, opportunity-type preferences, location and format preferences, email frequency choices, saved account preferences, opportunity-email consent status, consent date, consent source and related audit information where recorded, and unsubscribe status.

If you use Save and remind me later, CatchMed stores the stable IDs of opportunities you save, your selected reminder date basis and offset, whether requested reminder emails are globally enabled, and operational delivery records used to prevent duplicates and investigate failures.

For personalised opportunity emails, CatchMed may also keep campaign and recipient records, identifiers of opportunities matched or sent, email delivery status, timestamps, and email provider identifiers.

If you contact CatchMed, the service may collect your enquiry and the contact details you provide. CatchMed may also process security, rate-limiting and abuse-prevention information, plus analytics information where analytics are enabled.

CatchMed is not designed to collect medical records or sensitive clinical information.

CatchMed uses data to provide authentication and account access, store preferences, show and recommend relevant opportunities, send consented personalised opportunity updates, send specific service reminders you request for saved opportunities, avoid repeatedly emailing the same opportunity, process unsubscribe and preference changes, record campaign delivery, troubleshoot failures, respond to enquiries and correction requests, secure the service, prevent abuse, understand general service usage where compliant analytics are enabled, and improve CatchMed.

CatchMed does not sell personal data.

Members receive personalised opportunity emails only when they have opted in. If you opt in, CatchMed uses your saved opportunity, specialty and location preferences to select listings that may be relevant to you.

This matching does not determine your eligibility for, or access to, any opportunity. It does not make admissions, employment, funding or clinical decisions. Matching may omit relevant opportunities or include opportunities that are not suitable for you.

You can change your saved preferences or unsubscribe at any time. You should verify every listing with the original source before applying, attending, paying, relying on a deadline, or making a decision.

Agreeing to the Terms is not the same as consenting to personalised opportunity emails. Requested saved-opportunity reminders are controlled separately from those marketing preferences.

Opportunity-email consent and product-update consent are separate. Unsubscribing from opportunity updates does not delete your account, and disabling reminders does not remove your saved opportunities.

CatchMed uses service providers to run the service. Supabase provides authentication and database services. Vercel provides hosting, infrastructure and analytics. Cloudflare provides security and abuse-prevention checks. Resend delivers requested saved-opportunity reminder emails and preference-matched opportunity emails where the member has separately consented to those updates.

The provider handling CatchMed's contact mailbox processes contact messages. Provider responsibilities and locations are governed by their applicable terms and data-processing arrangements.

The feedback form and voluntary support links lead to Google Forms and Revolut respectively. Those third parties collect information you choose to give them under their own notices; CatchMed does not receive payment-card or bank-account credentials from those links.

These providers process information only as needed to provide their services to CatchMed.

Some providers may process data outside the United Kingdom. CatchMed aims to use providers and contractual safeguards appropriate for international data processing, but provider infrastructure can change over time.

Account and preference data is kept while an account is active and only as long afterwards as needed for security, legal obligations or administration. Identifiable campaign-recipient and provider-delivery records are retained for 90 days after campaign completion. Member-opportunity email history used to prevent duplicate opportunity emails is retained while the member's account remains active.

After account deletion, CatchMed aims to delete or anonymise member-linked email history within 30 days unless an unresolved delivery, security incident, fraud concern or legal requirement temporarily requires retention. Aggregate campaign metadata that does not identify a recipient may be retained for up to 12 months for service-quality review. These periods are currently checked through a monthly manual retention review; automated deletion is not promised.

Removing a saved opportunity or changing reminder settings does not immediately erase the minimal delivery audit. Terminal reminder delivery records are scheduled for deletion 90 days after the target occurrence. Processing or acceptance-uncertain records are retained until safely reconciled and then follow that 90-day period. Temporary provider-response evidence is retained for no more than 30 days when under CatchMed's control, and application or hosting logs for no more than 7 days when under CatchMed's control.

Deleting the underlying authentication account cascades deletion to saved opportunities, reminder selections and associated reminder delivery records. Account deletion is currently handled by request; CatchMed aims to complete valid erasure requests within 30 days unless a legal exception applies. A minimum suppression or audit record may be retained where necessary to respect an unsubscribe or legal duty. Security logs are retained only for as long as reasonably necessary. Contact correspondence is retained while enquiries are handled and for a limited administrative period. A minimal suppression record may be retained after unsubscribing so the address is not accidentally emailed again.

CatchMed reviews retention and does not intend to keep identifiable data longer than necessary.

Authentication and security technologies may be essential to operating the service. CatchMed does not use advertising cookies.

Vercel Web Analytics and Speed Insights are used to understand aggregate website usage and technical performance. CatchMed code does not deliberately send email addresses, member IDs or saved preferences to these analytics tools. Opportunity links in emails may include generic campaign-source parameters, but not a member or email identifier. Google Analytics is not loaded. CatchMed will not add analytics requiring prior consent without first providing an appropriate consent choice.

You may request access to your personal data, correction, deletion where applicable, restriction where applicable, portability where applicable, object to direct marketing, withdraw email consent at any time, unsubscribe using the link in any opportunity email, update saved preferences, or raise a concern about how your data is used.

Send privacy requests to contact@catchmed.co.uk. Account deletion is a manual request at present. You may also complain to the UK Information Commissioner's Office.

CatchMed uses reasonable technical and organisational safeguards to protect the service. No internet service can promise absolute security.

This notice may be updated as the service develops. When it changes, the visible Last updated date will change too.