PASSONCOLOGY PRIVACY POLICY

1. INTRODUCTION

PassOncology ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our exam preparation platform for FRCR Part 1 Clinical Oncology certification.

By accessing or using PassOncology, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the platform.

2. INFORMATION WE COLLECT

2.1 Personal Information

When you register for an account, we collect:

• Full name
• Email address
• Country of residence
• How you discovered our platform (referral source)
• Password (stored in encrypted form)

2.2 Usage Information

We automatically collect certain information when you use our platform:

• Questions answered and your responses
• Performance data (accuracy rates, completion percentages)
• Time spent on questions and modules
• Module access and subscription history
• Device information (browser type, operating system)
• IP address
• Session information for security purposes

2.3 Payment Information

Payment processing is handled by Flutter wave, a PCI-compliant payment processor. We do not store your full credit card details on our servers. We only retain:

• Transaction reference numbers
• Payment confirmation data
• Subscription purchase dates and expiry dates
• Payment amounts

3. HOW WE USE YOUR INFORMATION

We use the information we collect to:

• Create and manage your account
• Provide access to subscribed modules and question banks
• Track your learning progress and generate performance analytics
• Identify weak areas and provide study recommendations
• Process payments and manage subscriptions
• Send transactional emails (payment receipts, account notifications)
• Enforce session limits (maximum 2 concurrent devices)
• Prevent fraud and unauthorized account sharing
• Improve our platform and user experience
• Respond to customer support inquiries
• Comply with legal obligations

4. INFORMATION SHARING AND DISCLOSURE

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who assist us in operating our platform:

• Supabase (database and authentication services)
• Flutterwave (payment processing)
• Zoho Mail (email delivery)
• Vercel (hosting services)

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If PassOncology is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. DATA SECURITY

We implement appropriate technical and organisational measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed using bcrypt with salt before storage
• Session tokens are stored in HTTP-only secure cookies
• We limit concurrent sessions to 2 devices per account to prevent unauthorized access
• Payment data is processed through PCI-compliant Flutter wave infrastructure
• Database access is restricted and protected by Row Level Security policies
• Regular security reviews and updates are performed

6. DATA RETENTION

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account information: Retained until you request account deletion
• Performance data: Retained for the duration of your account to provide analytics
• Payment records: Retained for 7 years for accounting and legal compliance
• Session logs: Retained for 90 days for security purposes

You may request deletion of your account and associated data by contacting us at support@passoncology.com.

7. YOUR RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access

You can access your personal information through your account dashboard, including your profile details and performance analytics.

7.2 Correction

You can update your account information through the settings page. Contact us if you need assistance correcting other data.

7.3 Deletion

You can request deletion of your account and personal data by contacting support@passoncology.com. Note that some information may be retained for legal compliance.

7.4 Data Portability

You can request a copy of your personal data in a structured, commonly used format.

7.5 Objection

You can object to certain processing of your data, such as marketing communications.

8. COOKIES AND TRACKING

We use essential cookies to:

• Maintain your login session
• Remember your device for session management
• Ensure platform security

We do not use third-party advertising or tracking cookies. We may use analytics tools to understand how users interact with our platform to improve our services.

9. CHILDREN'S PRIVACY

PassOncology is designed for medical professionals and students who are at least 18 years old. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will delete it promptly.

10. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using PassOncology, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of PassOncology after any changes indicates your acceptance of the updated Privacy Policy.

12. CONTACT US

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 3 days.