Who we share your data with
We use a small number of trusted companies to run MedShr. They process your personal data only on our instructions and under contract, and they may not use it for their own purposes, except where we say otherwise below. We review this list when we add or remove a provider.
Most of your data, including your profile, cases, images, verification documents and CPD records, is stored on Google Cloud in the UK and the European Union. The “Where” column below shows where each provider processes data.
International transfers
MedShr is based in the UK, so UK data protection law applies to your data wherever you live. When a provider processes data outside the UK, we protect it with one of these:
a UK adequacy decision, which covers the European Union, for example;
the UK Extension to the EU-US Data Privacy Framework, for certified US companies;
the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with the UK Addendum.
If you’re in the European Union, we use the EU equivalents. You can ask us for a copy of the safeguards that apply to your data.
Running MedShr
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Google Cloud | Hosting, databases, file storage, backups and our internal analytics | Everything you give us: profile, posts, cases and images, verification documents, CPD records, activity on MedShr | UK and EU (Belgium, London, EU) |
| Microsoft 365 | Converting documents you upload (such as Word files) to PDF. Each file is deleted as soon as it’s converted. | The documents you upload | UK |
| Amazon Web Services | Sending push notifications to the MedShr app | Your device’s notification token, your member ID and the notification text | Ireland (EU), then delivered through Apple or Google |
| Cloudflare | Streaming live and recorded webinars | Your IP address and viewing activity | Global |
| Sentry | Finding and fixing errors in our website and apps | Your member ID and technical details of the error. No name, email or IP address. | United States |
| Google reCAPTCHA | Protecting sign-in and sign-up from automated abuse | Your IP address, device and browser signals | Global |
| Slack | Internal alerts to our team (for example, when content is reported) | Your member ID and links to your profile or posts | United States |
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Twilio SendGrid | Sending our emails and newsletters, and receiving emails you send us | Your name, email address and the content of emails, and whether you opened or clicked them (with IP address and device). Emails you send us, with any attachments. | United States |
| Postmark | Sending some of our emails | Your name, email address and the content of emails | United States |
Payments
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Stripe | Taking payments for subscriptions, and paying partners | Your name, email, and what you bought. Card details go straight to Stripe; we never see them. | Global |
Stripe is also responsible in its own right for some payment data, for example to prevent fraud and meet financial regulations. See Stripe's privacy policy.
Webinars
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Slido | Questions and polls during webinars | Your name, your questions and poll answers, and your IP address | EU (Slovakia) |
AI tools our team uses
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Anthropic (Claude) | Helping our reviewers assess cases submitted for CPD accreditation. A member of our team always makes the decision. | The case and its discussion, including the names of members who commented | United States |
Anthropic may not use your data to train its models.
The MedShr app
| Provider | What they do for us | Your data they handle | Where |
|---|---|---|---|
| Google Firebase | App crash reports, app usage analytics, push notification delivery and app settings | Your member ID, device and app identifiers, crash details and how you use the app | Global |
| Branch | Making share and invitation links work, and opening the right screen when you follow one | Link and device information. On the website, only with your marketing consent: identifiers used to measure which links and campaigns bring people to MedShr. | United States / global |
Analytics and advertising (only with your consent)
On our website, these load only if you agree to analytics or marketing cookies. You can change your choice at any time with Cookie settings at the foot of any page. See our cookie policy.
| Provider | What for | Your data they handle | Where |
|---|---|---|---|
| Google Analytics | Understanding how MedShr is used (analytics consent) | Cookies, IP address, pages visited, your member ID | Global |
| Google Ads | Measuring sign-ups from our Google ads (marketing consent) | Cookies, IP address, ad click identifier | Global |
| Meta (Facebook, Instagram) | Measuring sign-ups from our Meta ads (marketing consent) | Cookies, IP address, ad click identifier. If you allowed marketing, a scrambled (hashed) email address when you confirm your account or are verified. | United States / global |
| Measuring sign-ups from our LinkedIn ads (marketing consent) | Cookies, IP address, ad click identifier. If you allowed marketing, a scrambled (hashed) email address when you confirm your account or are verified. | United States / global |
Google, Meta and LinkedIn also use this data for their own advertising purposes, under their own privacy policies. They're responsible for that use.
Services you choose to connect
We only share data with these when you ask us to.
Signing in with Google, Apple, Facebook or LinkedIn. If you choose to, the service you sign in with sends us your name and email address (or, with Apple, a private relay address if you choose to hide yours). That service is responsible for your account with it, under its own privacy policy.
FourteenFish (UK). If you connect your FourteenFish portfolio you may select CPD records, optionally including your reflections, to be sent to it.
Your organisation's sign-in. If you sign in through your society, they tell us who you are, and may confirm that you're a healthcare professional.
Sharing to social networks. If you share a post, the network you choose receives its title and a blurred version of its image.
Embedded content
Some pages include videos or content from YouTube or Vimeo. When you play them, those services receive your IP address and may set their own cookies.