GP Journey ("we", "us", "our") is the data controller for personal data collected through gpjourney.com and the GP Journey dashboard. Contact: Vital Loop Holding Limited, support@gpjourney.com.
We have not appointed a formal Data Protection Officer; for any privacy question or request, contact us at the email above.
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract with you |
| Delivering question banks, mock exams, and study tools | Performance of a contract with you |
| Processing payments | Performance of a contract with you |
| Tracking your study analytics so the dashboard can show your progress | Performance of a contract with you |
| Sending essential account emails (confirmation, password reset, receipts) | Performance of a contract with you / legal obligation |
| Preventing unauthorised sharing of copyrighted content (e.g. account-linked watermarking) | Legitimate interest: protecting our copyrighted content and paying customers |
| Responding to support queries | Performance of a contract with you / legitimate interest |
| Marketing emails (if you opt in) | Consent |
| Advertising and remarketing on Meta (Facebook/Instagram), if you accept marketing cookies | Consent |
We use the following processors to run the Service. Each only receives the data it needs to perform its function, under a data processing agreement:
We do not sell your personal data to third parties. See our Cookie Policy for details on cookies and similar technologies, including how to opt out of advertising cookies.
Some of our processors (e.g. Vercel's global CDN) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards recognised under GDPR, such as Standard Contractual Clauses, as implemented by those providers.
| Data type | Retention |
|---|---|
| Account details (name, email) | Kept while your account is active; deleted or anonymised within 30 days of you closing your account, or within 30 days of your subscription lapsing without renewal |
| Study data (attempts, scores, progress) | Same as account details: deleted alongside your account |
| Payment records | Kept for 6 years after the transaction, as required by Irish tax law, even after your account is closed |
| Support emails | Kept for 2 years to handle follow-ups, then deleted |
If you ask us to delete your account, we'll do so within 30 days, except for the payment records we're legally required to retain.
Your study analytics (readiness scores, weak-domain breakdowns) are used only to power your own dashboard. We don't use them to make automated decisions that have a legal or similarly significant effect on you (e.g. we don't decide your exam eligibility or ranking; that's entirely down to ICGP and the official process).
Under GDPR, you have the right to:
To exercise any of these rights, contact us at support@gpjourney.com.
We use industry-standard measures to protect your data, including encrypted connections (HTTPS), encrypted password storage, and database-level access controls that ensure your study data and answers are only ever accessible to your own account.
The Service is intended for healthcare professionals and trainees aged 18 and over, and is not directed at children. We do not knowingly collect data from anyone under 18.
We may update this Privacy Policy from time to time. Material changes will be notified by email or an in-app notice.
Questions or requests regarding your personal data: support@gpjourney.com
Supervisory authority: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (dataprotection.ie)