MedicalRotations

Privacy Policy

Last updated: December 2024

1. Introduction

This Privacy Policy describes how Verlam Global LLC ("MedicalRotations," "we") collects, uses, processes, stores, and protects personal information of:

  • Students
  • Clinics
  • Universities
  • Site visitors
  • Registered Users of the Platform

Use of the Platform implies acceptance of this Policy.

2. Information We Collect

We collect the following categories of data:

A. Data Provided Directly by the User

(including Students, Clinics, Universities)

  • Full name
  • Date of birth
  • Email
  • Phone
  • Address
  • Nationality
  • Passport/visa
  • Medical school or institution
  • Specialty
  • GPA
  • Documents (CV, diploma, insurance, immunizations, TB test, etc.)
  • Institutional data (contacts, student lists)
  • Administrative records
  • Stripe Connect data (for Clinics and Universities)

B. Technical and Navigation Data (automatic)

Collected during use of the site:

  • IP address
  • Approximate location
  • Device
  • Operating system
  • Browser
  • Cookies and unique identifiers
  • Search history
  • Event logs (clicks, conversions, funnels)
  • Audit logs (internal actions)
  • Login attempts
  • Error logs

C. Payment Data (via Stripe)

MedicalRotations does not store card numbers.

Payment data includes:

  • Stripe Customer ID
  • Payment Method IDs
  • Payment and transaction history
  • Refunds
  • Disputes
  • Stripe Connect onboarding data

3. Purpose of Processing

We use data to:

  • Manage user accounts
  • Process identity and documents
  • Administer rotations, bookings, and programs
  • Process and distribute payments via Stripe
  • Comply with legal and regulatory obligations
  • Internal analytics to improve the Platform
  • Service-related communications
  • Fraud prevention
  • Internal audits and compliance

5. Data Sharing

Data is shared only with essential third parties to operate the marketplace:

  • Stripe: Payments, identity, KYC/KYB verification
  • Cloud and secure storage providers
  • Document verification systems
  • Regulatory partners: When required by law
  • Clinics and Universities: As necessary for rotations

All third parties are bound by strict confidentiality contracts.

6. CCPA Declaration: We Do Not Sell Data

In accordance with the California Consumer Privacy Act, we declare:

  • MedicalRotations does NOT sell personal data.
  • We do NOT share data with third parties for targeted advertising.
  • The platform does NOT monetize or resell user information.

7. User Rights Under CCPA

California residents have the right to:

1. Right to Know

Request what personal information is collected, used, or shared.

2. Right to Delete

Request deletion of personal information, except when exceptions apply (tax, regulatory, fraud, audit, transaction records).

3. Right to Opt-Out

Not applicable as MedicalRotations does not sell data.

4. Right to Non-Discrimination

Users will not be discriminated against for exercising privacy rights.

8. Cookies and Tracking Technologies

We use:

  • Essential cookies: Session management
  • Security cookies: CSRF protection, authentication
  • Internal analytics cookies
  • Stripe cookies: Payment processing

We do NOT use third-party marketing cookies.

9. International Transfers

User data may be stored or processed in the U.S. or other countries using providers that meet equivalent security standards.

10. Data Retention

Data is retained for:

  • The life of the account, plus
  • The period required by:
    • Tax laws
    • Health regulations
    • Audit purposes
    • Fraud prevention
    • Dispute resolution

11. Security

We apply measures such as:

  • Encryption
  • Firewalls
  • Access control
  • Automated monitoring
  • HTTPS secure protocols
  • PCI certifications (via Stripe)

12. Privacy Requests

Users may exercise their rights by emailing:

📩 legal@medicalrotations.com

Include:

  • Full name
  • Registered email
  • Specific request

Additional verification may be required.

13. Changes to the Policy

MedicalRotations may update this Policy. The current version will be available on the Platform.

For more information about our general terms, please see our Terms of Service.