Data Protection & Confidentiality Policy- Revalidation Ready

Effective Date: March 2026

1. Purpose

This policy sets out how Revalidation Ready collects, handles, stores and protects personal data, and how confidentiality is maintained in all aspects of our services.

We are committed to ensuring that personal data is processed lawfully, fairly and securely, and that confidentiality is respected at all times.

2. Scope

This policy applies to:

  • All personal data processed by Revalidation Ready
  • All users of our website, services and resources
  • Any data shared with us through forms, communication or membership use

This includes both digital and, where applicable, any manual records.

3. Legal Framework

Revalidation Ready operates in accordance with:

  • The UK General Data Protection Regulation (UK GDPR)
  • The Data Protection Act 2018

We ensure that all personal data is processed in line with these legal requirements.

4. Principles of Data Protection

We adhere to the following principles:

  • Personal data is processed lawfully, fairly and transparently
  • Data is collected for specified, explicit and legitimate purposes
  • Data is limited to what is necessary (data minimisation)
  • Data is accurate and kept up to date
  • Data is retained only as long as necessary
  • Data is processed securely and protected against unauthorised access

5. What Data We May Handle

  • We may process the following types of data:
  • Name and contact details (e.g. email address)
  • Account or membership information (if applicable)
  • Communications or enquiries submitted to us
  • Usage data from our website or platform
  • Any information voluntarily provided as part of reflective or professional development activities

We do not knowingly collect unnecessary or excessive personal data.

6. Confidentiality

We recognise the importance of confidentiality, particularly in a professional and healthcare-related context.

  • We are committed to:
  • Treating all user information as confidential
  • Not disclosing personal or identifiable information without consent, unless required by law
  • Ensuring any sensitive or reflective content shared by users remains private
  • Limiting access to data only where necessary

Confidentiality will only be breached where there is a legal obligation to do so.

7. Data Storage and Security

We take appropriate technical and organisational measures to protect personal data, including:

  • Secure website hosting and encrypted connections (SSL)
  • Restricted access to data
  • Use of secure third-party service providers
  • Regular monitoring for potential security risks

We aim to prevent:

  • Unauthorised access
  • Data loss
  • Misuse of personal information

8. Data Sharing

We do not sell or trade personal data.

We may share data with trusted third parties where necessary, such as:

  • Payment processors
  • Website and hosting providers
  • Email or communication platforms

All third parties are expected to comply with data protection requirements.

9. Data Retention

Personal data is retained only for as long as necessary to:

  • Provide our services
  • Meet legal or regulatory requirements
  • Resolve disputes or enforce agreements

When data is no longer required, it will be securely deleted or anonymised.

10. User Responsibilities

Users are responsible for:

  • Ensuring that any information they provide is accurate
  • Avoiding the sharing of identifiable third-party information unless appropriate consent has been obtained
  • Maintaining the confidentiality of their own account details

11. Your Rights

Under UK data protection law, individuals have the right to:

  • Access their personal data
  • Request correction of inaccurate data
  • Request deletion of data
  • Restrict or object to processing
  • Withdraw consent where applicable

Requests can be made by contacting us at:

hello@revalidationready.co.uk

12. Breach Management

In the event of a data breach, we will:

  • Assess the risk to individuals
  • Take immediate steps to contain and mitigate the breach
  • Notify relevant authorities where required
  • Inform affected individuals where appropriate

13. Policy Review

This policy will be reviewed periodically and updated where necessary to reflect legal, operational or technological changes.

14. Contact

For any questions regarding this policy or how your data is handled, please contact:

Revalidation Ready

Hello@revalidationready.co.uk