Disclaimer: This Privacy Policy template is provided for general informational purposes only and does not constitute legal advice. Data protection compliance under the UK GDPR and Data Protection Act 2018 depends on your specific data processing practices. You should consult a qualified data protection solicitor or privacy specialist prior to publishing.
Last Updated: 18/06/2026
Welcome to myfrcr.com (the "Website"), operated by Jelshaker LTD ("we", "us", or "our"). We are committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Website, register an account, or purchase access to our medical exam preparation materials, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
For the purposes of applicable data protection law, Jelshaker LTD is the Data Controller responsible for your personal data.
We may collect, store, and process the following categories of personal data about you:
Identity Data: First name, last name, username, title, and medical speciality or professional stage (if voluntarily provided).
Contact Data: Email address, billing address, and phone number.
Account & Profile Data: Account login credentials, password, order history, subscription status, exam performance metrics, completed quiz modules, and study preferences.
Financial Data: Payment card details and billing information. (Note: Payment transactions are processed directly by our third-party payment processors [e.g., Stripe/PayPal]; we do not store full payment card numbers on our servers).
Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and device identifiers.
Usage Data: Information about how you navigate, search, and use our Website and educational features.
We collect data from and about you through:
Direct Interactions: When you register an account, purchase a subscription, attempt practice questions, contact customer support, or sign up for newsletters.
Automated Technologies: As you interact with our Website, we automatically collect Technical and Usage Data using cookies, server logs, and similar technologies.
Third Parties: We may receive personal data about you from third-party payment processing platforms, security providers, and technical infrastructure services.
Under the UK GDPR, we must have a lawful basis to process your personal data. Below are the ways we process your data and the legal bases we rely on:
Account Registration & Management
Data Collected: Identity Data, Contact Data
Lawful Basis: Performance of a contract with you
Order Processing & Payment Delivery
Data Collected: Identity Data, Contact Data, Financial Data, Account Data
Lawful Basis: Performance of a contract with you
Educational Tracking & Quiz Scores
Data Collected: Identity Data, Account Data, Usage Data
Lawful Basis: Performance of a contract with you
Network Security & Fraud Prevention
Data Collected: Technical Data, Usage Data
Lawful Basis: Legitimate interests (defending our platform and preventing unauthorised account sharing)
Administrative Emails & Password Resets
Data Collected: Contact Data, Account Data
Lawful Basis: Performance of a contract with you
Direct Marketing Communications
Data Collected: Contact Data
Lawful Basis: Consent (or Legitimate interests for existing customers)
Tax & Legal Compliance
Data Collected: Identity Data, Contact Data, Financial Data
Lawful Basis: Compliance with a legal obligation
We do not sell, rent, or trade your personal data to third parties. We may share your personal data with trusted third-party service providers solely to operate our platform:
Payment Processors: Secure payment service providers (e.g., Stripe, PayPal) to process payments.
IT & Cloud Infrastructure: Web hosting, cloud database, and server infrastructure providers (e.g., AWS, Cloudflare, DigitalOcean).
Analytics Providers: Services that help us understand user traffic and platform performance (e.g., Google Analytics).
Professional Advisers & Regulators: Lawyers, auditors, or legal authorities where required by law or to defend legal claims.
When we transfer your personal data outside the United Kingdom, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
The destination country has been deemed to provide an adequate level of protection for personal data by the UK Government.
We use specific standard contractual clauses (including the UK International Data Transfer Agreement or Addendum) approved for use in the UK.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. Access to your personal data is restricted to employees, contractors, and service providers who have a business need to know and are bound by strict confidentiality obligations.
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or tax requirements.
Account & Subscription Data: Retained for as long as your account remains active, plus up to 6 years following account closure for financial tax reporting and legal defence purposes.
Inactive Accounts: We reserve the right to archive or delete accounts that have been inactive for more than 24 months.
Under UK data protection law, you have the following rights regarding your personal data:
Right of Access (SAR): The right to request a copy of the personal data we hold about you.
Right to Rectification: The right to request that we correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal data under certain conditions.
Right to Restrict Processing: The right to request that we suspend processing of your personal data.
Right to Data Portability: The right to request the transfer of your personal data to you or a third party in a structured, commonly used format.
Right to Object: The right to object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Where we rely on consent to process your data, you have the right to withdraw it at any time.
To exercise any of these rights, please contact us at privacy@myfrcr.com. We aim to respond to all valid requests within one month.
Our Website uses cookies and similar technologies to distinguish you from other users, ensure security, and improve website performance. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Please refer to our Cookie Policy for detailed information about the cookies we use.
You have the right to make a complaint at any time to the UK supervisory authority for data protection issues:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Website: https://ico.org.uk
We would, however, appreciate the chance to address your concerns directly before you approach the ICO, so please contact us in the first instance.
We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated "Last Updated" date. Significant changes will be communicated to registered users via email.
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Email: privacy@myfrcr.com
Registered Address: myFRCR.com 18-20 High Street, Stevenage, Hertfordshire, United Kingdom, SG1 3EJ