1. Introduction & Overview
Study Prometric (SMC-Private) Limited (“Study Prometric”, “we”, “us”, or “our”) operates the online medical education and licensing examination preparation platform located at studyprometric.com (the “Site” or “Service”).
We are dedicated to safeguarding your personal privacy and adhering strictly to international data protection regulations, including the European Union General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and recognized digital advertising integrity standards. This Privacy Policy details the types of information we collect, how it is used and protected, and the rights you possess regarding your personal data.
2. Information We Collect
We collect information in three ways: information you directly provide, information collected automatically during site navigation, and information provided by secure third-party payment processors.
A. Information You Voluntarily Provide
- Account Credentials: Full name, email address, password hashes, and user profile preferences.
- Professional Demographics: Healthcare profession (e.g. Doctor, Registered Nurse, Pharmacist, Dentist, Physiotherapist), targeted Gulf licensing authority (e.g. DHA, SMLE/SCFHS, MOHAP, DOH/HAAD, OMSB, QCHP), and expected examination date.
- Inquiries & Support: Communications, feedback reports, support tickets, or messages submitted via email or WhatsApp.
B. Automatically Collected Usage Information
- Device & Network Data: IP address, browser type and version, language settings, operating system, device screen resolution, and referring website URLs.
- Interaction Telemetry: Pages visited, question response timestamps, test completion metrics, time spent on study modules, and navigation patterns.
C. Payment Information
All financial transactions and premium subscriptions are processed directly through PCI-DSS compliant payment gateways (including Stripe and PayPal). Study Prometric does not store, capture, or have access to full credit card numbers or banking passwords.
3. Google AdSense & Third-Party Advertising Disclosures
Study Prometric displays advertisements served by third-party advertising partners, notably Google AdSense (a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google and its advertising partners adhere to strict digital advertising standards. Please review the following disclosures regarding how advertising data is processed:
- Third-Party Cookie Usage: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to Study Prometric or other websites across the Internet.
- Google Advertising Cookies: Google's use of advertising cookies (such as the DoubleClick cookie) enables it and its partners to serve ads to our users based on their visit to our site and/or other sites on the Internet.
- Personalized Advertising: Ads shown to you may be customized based on aggregated demographic signals, prior search queries, or web browsing activities to ensure educational relevance.
How to Opt Out of Personalized Advertising:
You retain the absolute right to opt out of personalized advertising at any time through any of the following official opt-out portals:
Note: Opting out of personalized advertising does not mean you will no longer see advertisements; rather, the ads displayed will be generic and not tailored to your browsing behavior.
4. Cookies & Web Beacons
Cookies are compact text files stored on your computer or mobile device when accessing online services. We utilize the following categories of cookies:
Essential Cookies
Required for secure authentication, token management, session state retention, and fraud protection.
Analytics Cookies
Provided by Google Analytics 4 to track anonymized page visits, traffic sources, and exam simulator latency.
Advertising Cookies
Deployed by Google AdSense to prevent ad fatigue, verify viewability, and serve relevant educational promotions.
You can configure your browser to decline cookies, delete stored cookies, or notify you whenever a cookie is transmitted. Please note that disabling essential cookies may impact the proper functionality of the simulated exam engine and account login.
5. How We Use Your Information
Study Prometric utilizes collected personal data solely for justifiable operational and educational objectives:
- To furnish access to 30,000+ medical MCQs, simulated CBT examinations, and AI diagnostic rationales.
- To compute individual performance analytics, topic weaknesses, and readiness probability scores.
- To manage subscriptions, issue invoices, and process secure account verifications.
- To transmit critical platform notices, password resets, and curriculum guideline updates.
- To detect, investigate, and prevent malicious actions, account piracy, or violations of our Terms of Service.
6. European & UK Privacy Rights (GDPR)
If you reside within the European Economic Area (EEA) or the United Kingdom, you hold specific legal rights under Articles 15–22 of the General Data Protection Regulation (GDPR):
To exercise any GDPR right, email our Data Protection Desk at privacy@studyprometric.com. Requests will be fulfilled within 30 calendar days at no administrative charge.
7. California Consumer Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act of 2018 as amended by the CPRA, California residents are entitled to know what personal data categories we collect, use, and disclose.
Non-Sale of Personal Data: Study Prometric has never sold, rented, or traded personal consumer data to third-party data brokers, and will not do so in the future.
Right to Non-Discrimination: We will never deny services, alter prices, or provide differing levels of service if you choose to exercise your privacy rights under California law.
8. Children’s Online Privacy Protection (COPPA)
Study Prometric is designed solely for adult medical students, healthcare practitioners, and licensing applicants aged 18 and older. We do not knowingly solicit or collect personal information from individuals under the age of 16. If we become aware that a child under 16 has submitted personal data without verified parental consent, we will promptly expunge the data from our databases.
9. Data Security & Storage
We implement defense-in-depth technical and organizational measures to safeguard your information against unauthorized access, loss, or alteration. These include TLS 1.3 cryptographic protocols for data in transit, encrypted database volumes at rest (AES-256 via Supabase), strict row-level security (RLS) policies, and multi-factor authentication for administrative access.
10. Contact Us & Data Protection Inquiries
If you have questions, comments, or data privacy requests regarding this Privacy Policy or our compliance practices, please contact us: