Privacy.

Who we are

ReadyForCST is an independent study tool run from Ireland. We’re responsible for the personal data described here. For anything about your data, email hello@readyforcst.com.

What we collect

• Your account: your name, email address and password. Your password is stored only as a secure hash, never in a form anyone can read.
• Sign-in sessions: when you log in, we record the session, including your IP address and browser details, to keep you signed in and protect your account.
• Your practice: the sessions you start, your answers and scores, the questions you flag, and which interview scenarios you’ve practised and when.
• Visits: anonymous page-view statistics (see “Cookies and analytics”).

We don’t collect payment details.

Why we use it

• To run your account and save your progress. We need this to provide the service you sign up for.
• To keep the service secure and to see which pages are used, so we can improve it. These are our legitimate interests in running a safe, working site.

We never use your data for advertising, and we don’t sell or share it for marketing.

Cookies and analytics

We only use sign-in cookies, which keep you logged in. They’re strictly necessary, so we don’t show a cookie banner.

We count visits with Vercel Web Analytics, which doesn’t use cookies or identify you. It groups visits using a code made from each request, which is discarded after 24 hours. It records the page address, the site you came from, your approximate location (country and city), and your browser, operating system and device type. See Vercel’s analytics privacy page.

Who handles it for us

• Vercel hosts the site and provides the analytics. Our servers run in Frankfurt.
• Neon runs our database and sign-in. It stores your account and practice data in Frankfurt and sends password-reset emails.

Both are US companies. They handle data for us under data processing agreements that include the EU’s Standard Contractual Clauses, and Vercel is also certified under the EU-U.S. Data Privacy Framework. These safeguards cover any access to your data from outside the European Economic Area.

Links to other sites

Answers link to the guidelines behind them, such as RCSI, NICE and HSE pages. Those sites have their own privacy policies.

How long we keep it

We keep your account and practice data while you have an account. Sign-in sessions expire on their own. If you ask us to delete your account, we delete it along with all your practice data.

Your rights

You can ask to see, correct or delete your data, to restrict or object to how we use it, or to get a copy to take elsewhere. Email hello@readyforcst.com from the address on your account, and we’ll reply within one month. There’s no delete button in the app yet, so email us to close your account.

If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission.

Who it’s for

ReadyForCST is for doctors applying for Core Surgical Training. It isn’t intended for anyone under 18.

Changes to this notice

We may update this notice. The date at the top shows when it last changed. See also our terms of use.