Welsh School of Anaesthesia crest

Privacy Policy

Last updated: 05/08/2026

1. Who we are

The Welsh School of Anaesthesia (“we”, “us”, “our”) operates this course booking platform. We are committed to protecting your personal data and respecting your privacy.

2. What data we collect

  • Account data: name, email address, and role (trainee, educator, or administrator).
  • Booking data: courses you book, attendance records, and any feedback you provide.
  • Device / technical data: IP address and browser type collected via standard server logs.
  • Crash & diagnostic data: when the app or website crashes or hits an error we automatically collect a crash report — stack traces, in-app breadcrumbs, device model and OS version, and app version — together with a pseudonymous account identifier. Directly identifying details (such as your email) are scrubbed before the report is sent.

3. How we use your data

We use your data to:

  • Provide course booking and management services.
  • Send booking confirmations, reminders, and updates.
  • Generate attendance reports and certificates.
  • Improve our platform and training programmes.
  • Detect, diagnose and fix crashes and errors, and monitor the stability of the app and website.

4. Lawful basis

We process personal data on the basis of legitimate interests (running the training programme), contractual necessity (fulfilling bookings), and consent (where explicitly requested).

5. Data sharing

We do not sell your data. We may share it with:

  • Course organisers and educators for operational purposes.
  • IT service providers who host or support the platform under strict confidentiality.

5a. Sub-processors

We use the following sub-processors to run the platform. Each is bound by a data processing agreement and processes personal data only on our instructions:

  • Supabase — database, authentication and file storage for the platform.
  • Cloudflare — application hosting, content delivery and DDoS protection.
  • Lovable — application platform and email delivery infrastructure used to send transactional messages (booking confirmations, reminders, password resets).
  • Sentry (EU region) — crash and diagnostic monitoring; personal identifiers are scrubbed before events are sent.
  • Google and Apple — used only if you choose to sign in with those providers.
  • Expo — push notification delivery to the iOS/Android app (if you have installed it).

5b. International data transfers

Our infrastructure is hosted in the United Kingdom / European Economic Area (EEA) wherever practicable. Some sub-processors (for example Cloudflare's global network, Google, Apple and Expo) may process limited data outside the UK/EEA. Where that happens we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an equivalent adequacy decision, so your data continues to receive an essentially equivalent level of protection.

6. Your rights

You have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, or to request account deletion, email our privacy lead at amrit.dhadda@wales.nhs.uk. You can also start a deletion request from our Delete Account page.

You can download a copy of the personal data we hold about you (data portability) at any time from the Settings page using the "Download my data" option.

6a. Data retention

We keep personal data only as long as it is needed for the purposes above:

  • Active accounts: profile, bookings and feedback are kept for the duration of your training with the Welsh School of Anaesthesia.
  • After account deletion: personal data is removed within 30 days of a verified deletion request.
  • Attendance and certification records: may be retained for up to 7 years to meet training, audit and regulatory obligations, then deleted or anonymised.
  • Server logs and technical data: retained for up to 90 days for security and troubleshooting.
  • Anonymised statistics (no personal identifiers) may be kept indefinitely for programme reporting.

7. Cookies

We use essential cookies to maintain your session and support core platform functionality. See our Cookie Policy for more details.

8. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised date.