Privacy Notice

Last updated: 23 September 2026.

MSRAMocks is operated by Jambusar Learning Ltd (company number 17450638), registered in England and Wales, with its registered office at 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, England. For privacy enquiries contact admin@msramocks.com.

1. Information we collect

We collect information needed to provide and protect the service, including your email address, optional display name and exam date, authentication identifiers, purchase and access records, mock attempts, answers, flags, scores, review history and performance analytics. We may also process limited technical and security information such as request, device or browser information generated by our hosting and authentication providers.

2. Payments

Payments are processed by Stripe through Stripe-hosted Checkout. We do not intentionally store full payment-card numbers or card security codes. We retain payment references, plan, amount, status, customer reference and access dates needed for fulfilment, support, fraud prevention and accounting.

3. Why we use your information

We use personal data to create and secure your account; provide paid access; save progress; calculate results and analytics; display your optional exam countdown; respond to support and privacy requests; prevent abuse and fraud; maintain the reliability and security of the service; and meet legal, tax and accounting obligations.

4. Legal bases

Where UK data-protection law applies, we rely primarily on performance of our contract with you to provide your account and purchased service, our legitimate interests in operating and securing the platform, and compliance with legal obligations for records we are required to keep. Where consent is legally required for a particular optional use, we will ask for it separately.

5. Service providers

We use specialist providers to operate the service, including Supabase for authentication and database infrastructure, Stripe for payment processing, Resend for transactional email delivery, and Vercel for hosting and delivery. These providers may process information on our behalf or as independent controllers for parts of their own service, subject to their respective terms and privacy obligations.

6. International processing

Some service providers may process data outside the United Kingdom. Where required, we rely on lawful transfer mechanisms and provider safeguards designed to protect personal data when it is processed internationally.

7. Retention

Revision history is generally retained while your account remains active unless you use the available reset function or make a valid deletion request. Account and support information is kept only as long as reasonably needed for the relevant purpose. Payment and accounting records may be retained for longer where tax, accounting or legal obligations require this.

8. Your rights

Depending on the circumstances, you may have rights to access, correct or delete personal data, restrict or object to processing, receive certain data in a portable format, and complain to the UK Information Commissioner's Office. These rights are not absolute and lawful exemptions may apply.

9. Your choices

You can change your display name and exam date in Profile, reset your revision history from your account, and clear free-trial browser storage using your browser controls. Contact us if you need help with another privacy request.

10. Security

We use layered safeguards including authenticated sessions, server-side entitlement checks, database row-level security, restricted administrative credentials, HTTPS in production and Stripe-hosted payment entry. No internet service can guarantee absolute security, so we keep these controls under review.

11. Children

MSRAMocks is intended for people preparing for postgraduate medical recruitment and is not directed at children.

12. Contact and complaints

Privacy requests can be sent to admin@msramocks.com. If you are unhappy with how we handle personal data, you may also have the right to complain to the Information Commissioner's Office.