Data Collection and Processing Principles

Medi4School, operated in the United States of America, adheres to strict protocols regarding the collection and processing of user data in compliance with applicable data protection regulations. Our website gathers personal and non-personal information to fulfill legitimate educational and operational purposes. We ensure that personal data is collected lawfully, fairly, and transparently, with precise documentation regarding the type and reason for data collection. The principle of data minimization is rigorously employed; only essential information required for system integrity, security, analytics, and service improvement is gathered. All information provided by users, including but not limited to IP addresses, device details, browsing activity, and voluntary submissions, is treated with the highest standards of confidentiality and integrity. Usage of data for direct marketing or profiling without express, informed consent is firmly prohibited. Moreover, user access logs are maintained securely and are accessible only to authorized personnel, and all forms of data collection activities are periodically audited to uphold compliance and trust.

User Rights and Data Subject Requests

Medi4School recognizes users’ rights concerning their personal information, including the right to request access, rectification, erasure, or restriction of processing. Users are entitled to transparency regarding how their data is utilized and can seek confirmation of whether or not personal data concerning them is being processed. Upon submission of a verifiable request, individuals are provided with a detailed record of data held, its relevant uses, third-party disclosures, and retention criteria. Should inaccuracies be identified, users retain the right to request corrections. Additionally, individuals may request deletion of data in circumstances consistent with statutory requirements or object to processing activities that do not serve a contractual or legal purpose. Medi4School undertakes to respond to data subject requests within a reasonable and specified timeframe, employing secure means to authenticate the identity of the requester and prevent unauthorized access. For any such requests, users may contact the data controller, Declan Frobisher, at [email protected].

Data Security and Retention

Medi4School implements robust data security measures to safeguard information against unauthorized access, loss, alteration, or destruction. Security protocols encompass the use of encryption, secure storage facilities, regular security assessments, access controls, and compliance with contemporary best practices. Personal information is stored only as long as necessary for the purposes delineated in our operational policies, or as mandated by law. Regular audits ensure the appropriateness and accuracy of retention schedules, minimizing data exposure. Upon the fulfillment of data retention obligations, information is permanently deleted through secure means to prevent reconstruction or misuse. Employees and contractors are trained in data protection principles and are legally bound by confidentiality commitments, ensuring that data privacy is upheld at every organizational level. Should a data breach occur, affected individuals will be promptly notified in accordance with applicable legal requirements, and remedial measures will be taken without delay.

Lawful Basis for Data Use

Every action involving personal data on Medi4School is undertaken based on a clearly identified lawful ground. Data is processed either through explicit user consent, fulfillment of contractual obligations, legal compliance, or in furtherance of legitimate educational interests that align with user expectations. Consent, where required, is obtained through unambiguous affirmative actions and can be withdrawn at any time without affecting the lawfulness of prior processing. The legal basis is transparently communicated to users at the point of data collection, especially where sensitive or special categories of data are implicated. No automated decision-making processes or profiling activities are performed that would significantly affect users’ rights or freedoms unless required by regulation or with the user’s explicit consent. Queries regarding the legal grounds for data processing can be directed to our data controller at [email protected].

Third Party Data Sharing and International Transfers

Medi4School strictly limits sharing of personal data with third parties unless necessary for the function of essential services, fulfillment of regulatory requirements, or where users have provided informed consent. All third-party partners and service providers are thoroughly vetted and required to adhere to confidentiality, integrity, and security standards consistent with this policy. Where data is transferred internationally, rigorous assessments are conducted to ensure that adequate protection measures are in place, in compliance with relevant US legal standards. Cross-border data transfers are subject to contractual safeguards designed to secure users’ privacy and regulatory rights. Medi4School does not sell user data under any circumstances and maintains a public register of third-party processors for transparency. Disclosure to government or law enforcement agencies is made only in response to valid legal demands, ensuring users’ rights are preserved wherever possible.

Children’s Privacy and Educational Rights

Medi4School is committed to protecting the privacy of minors and complying with all applicable child privacy and educational record acts in the United States of America. Special attention is devoted to the processing of personal data belonging to students under 18 years of age. Where applicable, verifiable parental or guardian consent is required prior to collecting or using such data beyond what is inherently necessary for the operation of educational resources. All data regarding minors is processed securely, with stringent controls to limit access, prevent misuse, and ensure information is not publicly disclosed. Educational and parental rights concerning student data are upheld, allowing for review and correction by authorized parties. School officials or educators using Medi4School for instructional purposes are obligated to notify and obtain appropriate permissions from families when collecting information from students, maintaining full compliance with relevant state and federal laws regarding children’s privacy.

Contact and Oversight

Should users have any questions, concerns, or require further clarification regarding their data rights, the processing of personal information, or wish to exercise any legal privilege detailed in this policy, they are encouraged to directly contact the owner and data controller:

Declan Frobisher
Headingley Carnegie Stadium
St Michael's Lane
Headingley
Leeds
LS6 3BR
United Kingdom
Email: [email protected]

Medi4School provides prompt and thorough responses to all data protection inquiries and will facilitate communication with regulatory authorities when necessary. Complaints or disputes that cannot be resolved internally are escalated to the appropriate legal entities, where users maintain the right to lodge complaints regarding the processing of their personal data.