Privacy Policy

Effective from 18 September 2026.

This Privacy Policy covers www.prometricmedical.com and the related mobile app, both run by Prometric Medical Consultancy (referred to below as "Prometric Medical", "we" or "our"). Healthcare professionals use our site to check their eligibility for a Gulf licence, practise for licensing exams, book advice, apply for licensing support and join our talent pool. Each of those involves personal information, so this page sets out what we gather, what we do with it and the choices you have.

1. At a glance

• We collect what you type into our forms, what you upload, and a limited record of how the site is used.
• Card payments are handled by Stripe. Your card number never reaches our systems.
• We do not sell personal data.
• Every marketing email has an unsubscribe link, and you can ask us for a copy of your data, a correction or deletion at info@prometricmedical.com.

2. Who we are

The business responsible for the information described in this policy is:

• Trading name: Prometric Medical Consultancy
• Website: www.prometricmedical.com
• Registered legal entity: [to be completed by the company]
• Company registration number: [to be completed by the company]
• Trade / professional licence number: [to be completed by the company]
• Registered office address: [to be completed by the company]
• Email: info@prometricmedical.com

3. Information we collect

Details you enter in a form

Depending on the form, this can include your name, email address, phone or WhatsApp number, nationality, country of residence, profession, specialty, qualifications, years of experience, the health authority you are interested in, and any message you write to us. Forms that collect this kind of information include the contact form, the eligibility check, consultation and training bookings, talent pool registration, licensing service requests, and the form employers use to request a candidate profile.

Documents you upload

Some services need supporting files — for example a CV, degree or qualification certificate, an existing licence, a passport copy or a photograph. We only ask for the documents that the service in question requires.

Account information

If you create an account we store your name, email address and a protected (hashed) form of your password, together with the exams you are enrolled in, your attempts, answers, scores and progress, any applications linked to your account and any referral code you have used or shared.

Payment records

When you pay, we keep a record of what was bought, the amount, the currency, the status of the payment and the reference Stripe gives us. We do not receive or hold your full card number or security code.

Conversations and practice sessions

We keep messages sent through the live chat and the contact form so that we can reply and follow up. If you use the AI oral exam practice, the answers you give during a session are processed to produce your feedback and results.

Technical and usage information

Like most websites, we record the pages viewed, the approximate time of the visit, the page or campaign that led you to us, and basic browser and device details. Section 6 explains the cookies involved. If you allow notifications in your browser or in our app, we also store the technical token needed to deliver them.

4. How we use your information

• Providing what you asked for. Producing your eligibility assessment, running your practice exams, holding your booked consultation or training session, working on your licensing request and presenting your profile to employers when you have joined the talent pool.
• Keeping you informed. Confirmations, receipts, reminders, requests for a missing document and answers to your questions.
• Marketing, where permitted. Occasional emails about our services, which you can stop at any time (see section 7).
• Running and protecting the site. Measuring which pages and campaigns are useful, fixing faults, and filtering out spam, automated sign-ups and fraud.
• Legal and accounting duties. Keeping the business records we are required to keep and responding to lawful requests.

Where the law asks for a legal basis, we rely on the agreement between us for delivering a service you requested, on your consent for marketing and for sharing your profile with employers, on our legitimate interest in keeping the site secure and understanding how it is used, and on legal obligation for record-keeping.

5. Payments

Stripe is our payment processor. At checkout you enter your card details on a page hosted by Stripe, and Stripe handles them under its own privacy policy and security standards. Stripe tells us whether the payment succeeded and supplies limited details such as the amount, currency and a transaction reference, which we attach to your order.

6. Cookies and analytics

Cookies are small files your browser stores for a website. We use three kinds:

• Essential cookies that keep you signed in and let secure areas such as your exams and applications work. The site cannot function properly without them.
• Our own first-party traffic cookies (their names begin with "pm_"). They give your browser a random visitor and session identifier and remember how you first reached us — for example a search engine, a referring site or an advertising campaign. They are set by our own domain, are read only by us, and are used to count visits and to understand which channels lead to enquiries.
• Third-party measurement tags, such as Google Analytics and Google Ads, when enabled. These help us measure visits and whether our advertising works, and are governed by Google's own policies.

You can delete or block cookies in your browser settings. If you block the essential ones you will not be able to stay signed in, but the public pages will still be readable.

7. Email, WhatsApp and notifications

Service messages — receipts, confirmations, password resets, email verification and updates about an application or booking — are part of the service and are sent whenever they are needed. Marketing emails are separate: each one includes an unsubscribe link that takes effect without you needing to sign in, and you can also ask us to stop by writing to info@prometricmedical.com. If you contact us on WhatsApp, the conversation is also subject to WhatsApp's terms. Browser and app notifications can be switched off in your device settings at any time.

8. When we share information

We pass on personal information only where there is a reason to:

• Health authorities, verification bodies and exam providers, when you have asked us to help with a licensing application and the step in question requires it.
• Hospitals, clinics and other healthcare employers, when you have joined the talent pool or otherwise asked us to put your profile forward. Your applications page shows which employers your profile has been shared with.
• Companies that provide our infrastructure — website hosting, database and file storage, email delivery, payment processing (Stripe), analytics and the AI services behind features such as oral exam practice. They process information on our behalf and only for the purpose we engage them for.
• Authorities or advisers, where the law requires it or where it is necessary to establish or defend a legal claim.

We do not sell or rent personal data to anyone.

Some of these recipients are located in a different country from you. When information is transferred abroad we take reasonable steps to make sure it remains protected.

9. How long we keep information

We keep personal information for as long as it is needed for the purpose it was collected for — for example while your account is open or while an application is in progress — and afterwards for the period we are required to keep business, tax and accounting records. When information is no longer needed we delete it or remove the details that identify you. You can ask us to delete your information sooner; we will do so unless we are legally required to keep it.

10. Your choices and rights

You can ask us at any time to:

• tell you what personal information we hold about you and give you a copy;
• correct anything that is wrong or out of date;
• delete your account and the information connected to it;
• stop sending you marketing, or withdraw a consent you gave earlier;
• remove your profile from the talent pool or stop it being shared with employers.

Write to info@prometricmedical.com from the email address linked to your records so that we can verify the request. Depending on where you live, you may also have the right to complain to your local data protection regulator.

11. Security

Traffic to and from the site is encrypted, uploaded documents are kept in private storage that requires authorisation to open, and access to candidate records is limited to the team members who need it for their work. No online service can promise absolute security; if an incident puts your information at risk we will notify you and any relevant regulator as the law requires.

12. Age

The site is intended for qualified and trainee healthcare professionals. It is not aimed at anyone under 18, and we do not knowingly collect information from children.

13. Updates to this policy

We will revise this page when our practices change. The effective date and version shown on this page tell you which edition you are reading. If a change significantly affects how we use information you have already given us, we will let account holders know by email.

14. Contact us

Questions about privacy can be sent to info@prometricmedical.com.