Privacy Policy

1. Who we are

ExamCure provides online educational resources for healthcare licensing, residency-entry, professional and board-examination preparation.

In this Privacy Policy, “ExamCure”, “we”, “us” and “our” refer to ExamCure as the operator of the ExamCure website and learning services.

For personal information for which ExamCure determines the purposes and means of processing, ExamCure acts as the responsible data controller or equivalent responsible organisation under applicable law.

Privacy questions and requests may be sent to manager@examcure.com.

2. Scope of this Policy

This Policy applies to personal information processed through:

• the ExamCure website and its public pages;
• learner registration and account-management functions;
• free and paid courses, programmes and learning resources;
• question banks, quizzes, assessments and mock examinations;
• course purchases, payment confirmations and refund requests;
• support emails, forms, surveys and live-chat interactions;
• marketing subscriptions and communication preferences; and
• security, analytics and service-performance systems.

This Policy does not govern websites or services operated independently by third parties. Their own privacy notices apply to their processing.

3. Information we may collect

3.1 Account and identity information

Depending on how you use ExamCure, we may collect:

• your name;
• email address;
• telephone number;
• username or account identifier;
• country, region or general location;
• date of birth, where requested for account eligibility;
• profession, specialty or examination interest;
• university and graduation information;
• company or organisation information, where voluntarily provided;
• website details, where voluntarily provided; and
• account and communication preferences.

3.2 Purchase and transaction information

When you make a purchase, ExamCure may receive or maintain information such as:

• the course, programme or service purchased;
• the amount and currency;
• purchase date and transaction status;
• a payment-provider or order reference;
• limited billing information;
• payment failure or instalment status;
• refund, cancellation or dispute information; and
• tax or invoice information where applicable.

Payment credentials are generally collected and processed through the payment interface made available by the relevant payment provider. ExamCure does not ask you to send complete card numbers, card security codes, card PINs or online-banking passwords by email or live chat.

3.3 Learning and platform activity

We may collect information about your use of learning services, including:

• course and programme enrolments;
• access dates and access duration;
• lesson and content progress;
• quiz attempts, answers and scores;
• mock-examination activity;
• completion status;
• certificates issued;
• download and resource activity;
• login history and session activity; and
• support required during your learning.

3.4 Communications and support information

When you contact us, we may collect:

• email messages and contact-form submissions;
• live-chat messages;
• technical-support information;
• complaints, refund or transfer requests;
• survey responses;
• feedback and reviews voluntarily submitted; and
• records of how your request was handled.

3.5 Device, usage and technical information

We may automatically collect:

• IP address;
• browser and device type;
• operating system;
• language and approximate location settings;
• referring and exit pages;
• pages viewed and features used;
• session and cookie identifiers;
• login, error and security logs; and
• diagnostic and service-performance information.

3.6 Information you provide voluntarily

You may choose to provide additional information when communicating with ExamCure. Please do not send unnecessary confidential patient information, identifiable clinical records, examination content that you are prohibited from sharing, or another person’s personal information without lawful authority.

4. How information is collected

ExamCure may collect personal information when you:

• visit or navigate the website;
• create or update an account;
• enrol in a free or paid course;
• purchase a product or service;
• complete lessons, quizzes or assessments;
• submit a form or subscribe to communications;
• contact ExamCure for support;
• submit feedback, a review or survey response;
• use cookies or related website technologies; or
• interact with an approved service provider connected to ExamCure.

We may also receive limited information from payment, learning, communications, analytics, fraud-prevention and technical-service providers where necessary to operate ExamCure.

5. How we use personal information

We may use personal information to:

• create, maintain and authenticate learner accounts;
• provide free and paid educational services;
• activate and manage course access;
• record learning progress and assessment activity;
• process, reconcile and document transactions;
• manage instalments where offered;
• handle refunds, transfers, disputes and complaints;
• send account, purchase and service communications;
• respond to support requests;
• detect fraud, account sharing, misuse and security incidents;
• diagnose technical problems;
• maintain backups and service continuity;
• understand and improve website and learning performance;
• develop or improve educational content using aggregated insights;
• send promotional communications where permitted;
• maintain accounting, tax and business records;
• comply with applicable obligations; and
• establish, exercise or defend legal rights.

Where reasonably possible, ExamCure may use aggregated or de-identified information for analytics, research, content planning and service improvement. Such information is not intended to identify an individual.

6. Grounds for processing

Depending on the activity and applicable law, ExamCure may process personal information because:

• processing is necessary to provide a requested service or fulfil an agreement;
• you have given valid consent;
• processing is necessary to comply with an applicable obligation;
• processing supports a legitimate operational, educational, security or business interest that is not overridden by your rights;
• processing is necessary to prevent fraud or protect accounts and systems;
• processing is necessary to establish or defend legal rights; or
• another lawful ground is available under applicable law.

Where processing relies on consent, you may withdraw that consent, subject to legal and operational limitations. Withdrawal does not make earlier lawful processing invalid.

7. Payments

Payments are handled through the payment options displayed during the ExamCure checkout process. Payment providers may collect payment credentials directly through their interfaces and apply their own privacy and security terms.

ExamCure may receive limited information such as:

• confirmation that payment was completed or declined;
• the amount, currency and date;
• a transaction or payment reference;
• limited billing information;
• refund or dispute status; and
• limited payment-method descriptors.

Never send ExamCure complete card credentials, CVV codes, PINs, one-time banking passwords or online-banking passwords by email, form or live chat.

8. Cookies and analytics

ExamCure and its service providers may use cookies and similar technologies to operate the website, remember preferences, maintain sessions, measure performance and, where enabled and permitted, support analytics or marketing.

Cookie categories may include:

• Essential cookies: required for security, login and core website operation.
• Preference cookies: used to remember settings and choices.
• Analytics cookies: used to understand website and service use.
• Marketing cookies: used only where such tools are active and permitted.

For further information, read the ExamCure Cookie Policy. Where a cookie-preference tool is available, you may use it to manage optional cookies.

9. Marketing communications

ExamCure may send educational updates, product announcements, offers or other promotional communications where you have requested them or where another lawful basis permits them.

You may unsubscribe using the unsubscribe option in a promotional email or by contacting manager@examcure.com.

Opting out of promotional communications does not prevent ExamCure from sending necessary account, purchase, security, access, policy or support messages.

10. When information may be shared

ExamCure may disclose personal information to service providers or other parties when reasonably necessary for the purposes described in this Policy.

Recipients may include:

• learning-platform and course-delivery providers;
• payment and transaction-processing providers;
• website hosting, infrastructure, backup and security providers;
• email, messaging and customer-support providers;
• analytics and service-performance providers;
• fraud-prevention and account-security providers;
• professional advisers such as accountants or legal advisers;
• public authorities, courts or law-enforcement bodies where disclosure is required or lawfully requested; and
• a successor organisation in connection with a legitimate merger, restructuring, financing, acquisition or transfer of all or part of the business.

Service providers should receive only the information reasonably required to perform their assigned functions and remain subject to applicable contractual, confidentiality, security or legal obligations.

ExamCure may also disclose information where reasonably necessary to investigate fraud, security threats, unlawful activity, account abuse, intellectual-property infringement or violations of the Terms and Conditions.

11. International data transfers

ExamCure provides online services and may use service providers that operate from, maintain infrastructure in or process information in countries outside the UAE or outside your country of residence.

Where required, ExamCure seeks to use appropriate contractual, organisational, technical or other lawful safeguards for international processing and transfers.

Data-protection standards and government-access rules may differ between countries. You may contact ExamCure for further information about relevant transfer arrangements.

12. Data retention

ExamCure retains personal information only for as long as reasonably necessary for the purpose for which it was collected and for legitimate operational, security, accounting, tax, dispute-resolution and legal requirements.

Retention considerations may include:

• the duration of your account or course access;
• the nature and sensitivity of the information;
• the need to maintain transaction and invoice records;
• refund, chargeback and complaint periods;
• fraud-prevention and security requirements;
• applicable limitation periods;
• legal, regulatory, accounting or tax obligations; and
• the technical operation of backup and disaster-recovery systems.

When information is no longer reasonably required, ExamCure may delete, anonymise or securely isolate it, subject to technical and legal limitations.

13. Information security

ExamCure seeks to use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information and the risks involved.

Safeguards may include:

• account authentication and access controls;
• role-based or need-based access restrictions;
• secure service providers;
• encryption where supported and appropriate;
• logging, monitoring and fraud detection;
• backup and recovery arrangements;
• security updates and technical maintenance; and
• confidentiality obligations for authorised personnel.

No internet transmission, online platform or storage method can be guaranteed to be completely secure. You are responsible for protecting your password and should notify ExamCure promptly if you suspect unauthorised access to your account.

14. Your privacy rights and choices

Depending on applicable law and the circumstances, you may have the right to:

• request information about how your personal information is processed;
• request access to personal information held about you;
• request correction of inaccurate or incomplete information;
• request deletion where legally available;
• request restriction or cessation of certain processing;
• object to certain processing;
• withdraw consent where processing relies on consent;
• request data portability where applicable and technically feasible;
• opt out of promotional communications; and
• raise a complaint concerning the handling of personal information.

To exercise a privacy right, email manager@examcure.com using the subject line “Privacy Request”.

Please describe your request and identify the email address associated with your account. ExamCure may request reasonable identity verification before disclosing, correcting, transferring or deleting information.

A request may be limited or refused where permitted or required by law, including where information must be retained for security, fraud prevention, accounting, tax, legal claims, contractual performance or the protection of another person’s rights.

ExamCure does not charge a fee merely for making an ordinary privacy request. A fee or refusal may apply only where expressly permitted by applicable law, such as for a manifestly unfounded, repetitive or excessive request.

15. Account deletion

You may request account deletion by emailing manager@examcure.com from the email address associated with your account.

Deleting an account may end access to purchased and free courses, progress records, certificates and other account features. Before submitting a deletion request, download any information you are entitled and technically able to retain.

ExamCure may retain limited transaction, accounting, legal, security, complaint or fraud-prevention records after an account has been closed. Removal from active systems and expiration from backup systems may follow different technically reasonable schedules.

16. Children

ExamCure’s services are designed for adult healthcare professionals, graduates, students and examination candidates. You must be at least 18 years old to independently create an ExamCure account or purchase a service.

ExamCure does not knowingly invite children to submit personal information or purchase services. If you believe a child has provided personal information contrary to this Policy, contact manager@examcure.com so the matter can be reviewed.

17. Third-party websites and services

ExamCure may link to examination authorities, professional bodies, payment services, social networks, educational references and other external websites.

ExamCure does not control the privacy practices of independently operated third parties. Review the privacy policy and terms of each external service before providing information to it.

18. Automated decisions and profiling

ExamCure may use automated systems for routine functions such as authentication, security alerts, fraud detection, progress tracking, content recommendations or communication scheduling.

ExamCure does not currently intend to make decisions that produce legal or similarly significant effects on learners solely through automated processing without appropriate review.

Contact ExamCure if you believe an automated process has materially affected your account or access and you would like the matter reviewed.

19. Changes to this Privacy Policy

ExamCure may update this Privacy Policy when its services, providers, processing activities or applicable requirements change.

The revised version will be posted on this page and the “Last updated” date will be changed. Where a change is material, ExamCure may provide additional notice through the website, learner account, email or another appropriate channel.

Where fresh consent is legally required for a new processing activity, ExamCure will request that consent before relying on it.

20. Contact and privacy complaints

Contact ExamCure if you have a question, privacy request or complaint regarding personal information.

Please include enough information to explain your concern, but do not send passwords, complete payment-card credentials, confidential patient records or unnecessary sensitive information.