TA Medical, www.ta-medical.co.uk, decides how your information is used (the "data controller"). Contact: hello@frca-sim.co.uk. Registered with the Information Commissioner's Office, number Awaiting.
FRCA Sim has no advertising, no analytics service and no third-party tracking. We do not sell or share your information for marketing, and we do not send marketing email.
2. Using FRCA Sim without an account
Cases. The settings of a simulated case are held on our server while it is in use and deleted 15 minutes after its last activity. Use fictional patient details only.
Usage records. The case code and which type of screen joined, with times, kept for 90 days. These hold no name, account or network address.
Free session limit. A random identifier in a cookie, and a shortened network address (the first three parts of an IPv4 address, or the /48 of an IPv6 address), are stored with each free session for 2 days to apply the daily limits.
3. If you create an account
A free session started while signed in is recorded against your account, with the same shortened network address, for 2 days to apply the daily limit.
Account. Your email address; your password in a scrambled form that cannot be read back; when the account was created, when the email address was confirmed and when you last signed in.
Purchases. Which plan you have, its dates and status, and the reference numbers Stripe gives us for you and your purchases. Card details go straight to Stripe and never reach us.
Email links. Confirmation links last 3 days and password reset links 1 hour. We store only a scrambled form of each link.
Limiting misuse. A count of recent sign-in, sign-up and email requests, recorded against the email address used and a shortened network address, kept for up to 1 day.
We keep your account until you delete it.
4. Why we use it
To provide your account and the plan you bought: this is needed for our contract with you.
To limit misuse, keep the service secure and count overall usage: we have a legitimate interest in running a reliable service, and we use the least information that does the job.
To keep records of payments: the law requires this for tax purposes.
5. Who else handles it
Stripe takes payments and holds your payment details and billing history under its own privacy policy. Stripe may process information outside the UK, using the safeguards described in its policy.
Our hosting provider, in the UK, runs the server, sends our email and keeps standard server logs, which include full network addresses, for its own security and operation.
6. Cookies and storage on your device
Name
What it does
Lasts
frca_s (cookie)
Keeps you signed in. Set only when you sign in.
30 days
frca_b (cookie)
Identifies this browser for the daily free session limit. Set when you start a free session.
400 days
Browser storage
Your screen settings, the offline permission for a prepared device, and a copy of the app so it can start without a connection. These stay on your device.
Until you clear them
These are needed for the service to work, so there is no cookie banner. There are no advertising or analytics cookies.
7. Your choices and rights
Download. Your account page has "Download my data".
Delete. Your account page has "Delete account". This removes your account, sign-in details and plan records from our database at once and cancels any subscription. Backup copies are replaced within 14 days. Records of payments are kept by Stripe, and by us where tax law requires, for up to 6 years.
You can also ask us for a copy of your information, to correct it, to restrict or object to how we use it, or to delete it, by writing to hello@frca-sim.co.uk. We will reply within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
8. Children
FRCA Sim is intended for adults in medical training. Accounts are for people aged 18 or over.
9. Changes
We will update this page when what we collect changes. The date at the top shows the latest version.