Privacy Policy

1. Introduction

At Emendari, we are committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you access or use our website, services, and all associated content (collectively, the "Platform"). By using the Platform, you agree to the practices outlined in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue your use of the Platform. Emendari is a UK-based company dedicated to providing educational resources tailored to medical students, particularly those at Medical University - Sofia (MUS). We collect and process data responsibly to enhance your learning experience while maintaining the highest standards of data protection. This Privacy Policy applies to all users of the Platform and any associated services provided by Emendari. For any questions or concerns regarding this Privacy Policy, or if you wish to exercise your rights under applicable data protection laws.


2. Information We Collect

When you use Emendari, we collect certain information to provide, enhance, and personalise your experience on the Platform. This includes personal data that you provide directly, data that is collected automatically through your interactions with the Platform, and data obtained from third-party services. The types of information we collect include personal details such as your name, email address, and account information provided during registration. We also collect payment information through our secure third-party payment processors to facilitate subscription transactions. Additionally, we gather usage data such as the notes and MCQs you access, your progress tracking activity, and other interactions with the Platform to improve our services and tailor content to your academic needs. Device information, such as your IP address, browser type, and operating system, is also collected automatically to optimise Platform performance and maintain security. Finally, we use cookies and similar tracking technologies to analyse activity, personalise your experience, and ensure the Platform operates efficiently. For more information on how cookies are used, please refer to the relevant section of this Privacy Policy.


3. How We Use Your Information

At Emendari, we use the information we collect to deliver and improve our services, ensure the security of the Platform, and provide you with a personalised experience. Your personal information, such as your name and email address, is used to create and manage your account, grant access to subscription features, and communicate with you about your account, including notifications of updates, changes, or issues. Payment information is processed securely to manage subscriptions and transactions. Usage data, such as the notes and MCQs you access and your progress tracking activity, is analysed to optimise the Platform and improve content relevance to your academic needs. We may also use your information to respond to customer support inquiries, address technical issues, or resolve disputes. Cookies and tracking technologies are used to remember your preferences, enhance functionality, and measure the effectiveness of our services. With your consent, we may send you marketing communications, promotions, or updates about new features and services. You can opt out of receiving these communications at any time. Additionally, we use your information to comply with legal obligations, enforce our Terms and Conditions, and protect the Platform from fraudulent or malicious activities. Our primary goal is to ensure that your experience on Emendari is seamless, secure, and tailored to your learning journey.


4. Sharing Your Information

At Emendari, we respect your privacy and only share your information when necessary to provide and enhance our services, comply with legal obligations, or protect the Platform. We may share your data with trusted third-party service providers who assist in delivering our services, such as payment processors to handle transactions securely, email marketing tools to send communications, and analytics platforms to help us understand how the Platform is used. These third parties are contractually obligated to protect your information and use it solely for the purposes specified by us. In certain circumstances, we may share your information to comply with legal requirements, such as responding to lawful requests from authorities or to meet applicable laws and regulations. If Emendari undergoes a business transition, such as a merger, acquisition, or sale of assets, your data may be transferred to the new owners as part of the business operations. We do not sell or rent your personal information to third parties for their marketing purposes. Any sharing of data is done with the utmost care to ensure your privacy is maintained.


5. Data Security

At Emendari, we prioritise the protection of your personal information and implement robust security measures to safeguard your data against unauthorised access, alteration, disclosure, or destruction. We use industry-standard encryption to secure sensitive information, such as payment details, during transmission and rely on secure servers and firewalls to protect stored data. Access to your personal information is restricted to authorised personnel, service providers, and partners who require it to perform their duties and are bound by confidentiality obligations. Regular security audits, system monitoring, and updates are conducted to ensure our Platform remains resilient against evolving threats. While we take every reasonable precaution to protect your data, no system can be guaranteed 100% secure. As a user, it is your responsibility to maintain the confidentiality of your account credentials and notify us immediately at [email protected] if you suspect any unauthorised access to your account. By using our Platform, you acknowledge and agree to these security measures and understand that while we strive to protect your data, we cannot completely eliminate all risks.


6. Data Retention

At Emendari, we retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by law. The specific duration of data retention depends on the type of information and the context of its use. For account data, such as your name, email address, and subscription details, we retain this information for as long as your account remains active and up to a reasonable period afterward to address any outstanding issues or inquiries. Payment information is retained securely by our third-party payment processors for the duration required by financial regulations and accounting practices. Usage data, including progress tracking and content interaction, is retained to improve your experience and provide insights for as long as your account is active or until the data is no longer necessary for analytical purposes. If you request the deletion of your data, we will securely erase your personal information unless retention is required to comply with legal obligations, resolve disputes, or enforce our Terms and Conditions. Anonymised or aggregated data, which does not identify you personally, may be retained indefinitely for research and analytical purposes.


7. Cookies and Tracking Technologies

Emendari uses cookies and similar tracking technologies to enhance your experience on the Platform, personalise content, and analyse user activity. Cookies are small text files stored on your device when you visit the Platform, allowing us to recognise you and remember your preferences. We use different types of cookies, including necessary cookies to enable core functionality such as logging in and accessing your account, performance cookies to analyse how you use the Platform and improve its features, and functional cookies to remember your preferences and settings. In addition to cookies, we may use tracking technologies such as web beacons and pixels to measure the effectiveness of our communications and understand user engagement. Some of these cookies and technologies are provided by third-party services like Google Analytics, which help us gather insights into user behaviour and improve the Platform. You have the option to manage or disable cookies through your browser settings. However, please note that disabling cookies may affect the functionality of the Platform and limit your access to certain features. By continuing to use the Platform, you consent to our use of cookies and tracking technologies as outlined in this Privacy Policy.


8. User Rights

As a user of Emendari, you have certain rights regarding the personal data we collect and process. These rights are designed to give you control over your information and ensure that it is handled transparently and in accordance with applicable data protection laws, including the UK GDPR. You have the right to access your personal data and request a copy of the information we hold about you. If you believe any of your information is incorrect or incomplete, you have the right to request that we update or correct it. You may also request the deletion of your personal data, subject to any legal or contractual obligations requiring its retention. Additionally, you have the right to restrict or object to the processing of your data under certain circumstances, such as if you contest its accuracy or believe it is being processed unlawfully. You can also request the transfer of your data to another service provider in a structured, commonly used, and machine-readable format, where technically feasible. If you have provided consent for specific data processing activities, such as receiving marketing communications, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing conducted before your withdrawal. To exercise any of these rights, please contact us at [email protected], and we will respond to your request promptly, typically within 30 days. If you are not satisfied with our response or believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the United Kingdom. We are committed to upholding your rights and ensuring that your personal data is processed lawfully, fairly, and transparently. If you have any questions or concerns about your rights or how your data is handled, please do not hesitate to reach out to us.


9. International Data Transfers

Emendari is a UK-based platform, and the personal data we collect is primarily processed and stored within the United Kingdom. However, some of the services we use, including third-party providers for payment processing, analytics, and email communications, may involve transferring your data to servers located outside of the UK or the European Economic Area (EEA). When such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data and comply with applicable data protection laws, including the UK GDPR. For data transfers to countries that do not have an adequacy decision from the UK government or the European Commission, we rely on legally approved mechanisms, such as Standard Contractual Clauses (SCCs), to ensure that your data is afforded the same level of protection as within the UK. Additionally, we require our third-party service providers to adhere to strict data protection obligations, including maintaining security measures and using your data only for authorised purposes. By using the Platform, you acknowledge and agree that your data may be transferred, processed, and stored outside your country of residence, subject to the safeguards described in this Privacy Policy. If you have any questions or concerns about international data transfers or wish to obtain a copy of the safeguards in place for such transfers, please contact us at [email protected]. We are committed to ensuring the security and lawful handling of your personal data, regardless of where it is processed.


10. Changes to This Privacy Policy

Emendari reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or the features and functionality of our Platform. Any updates or changes to this Privacy Policy will be effective from the date specified in the revised version, which will be posted on our website. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. If we make significant changes to the way we collect, use, or share your personal information, we will notify you by prominent means, such as an email sent to the address associated with your account or a notification on the Platform. These changes will apply only to data collected after the revised Privacy Policy comes into effect unless otherwise specified. By continuing to use the Platform after changes to this Privacy Policy are posted, you acknowledge and agree to the updated terms. If you do not agree with the revised Privacy Policy, you must discontinue use of the Platform and may request the deletion of your account and associated data by contacting us at [email protected]. For any questions, concerns, or clarifications regarding updates to this Privacy Policy, please reach out to us, and we will be happy to assist. Your trust and privacy remain our top priorities.


11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please do not hesitate to contact us. We are committed to addressing your inquiries promptly and ensuring transparency in how we protect your privacy. You can reach us at: [email protected]. For matters related to your rights under data protection laws, including requests to access, correct, delete, or restrict your personal data, please include specific details in your communication so we can process your request efficiently. If you are not satisfied with our response or believe your data protection rights have been violated, you have the right to file a complaint with the Information Commissioner’s Office (ICO). 


We value your trust and are dedicated to safeguarding your personal information. Please do not hesitate to contact us with any feedback, questions, or concerns about our Privacy Policy or data protection practices.