Privacy Policy
MentoraMed respects your privacy and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and UK GDPR.
Last updated: 24 July 2026
1. Who We Are (Data Controller)
The controller responsible for processing your personal data is:
- Entity: MentoraMed (sole proprietorship / eenmanszaak, trading as MentoraMed)
- Address: Burgemeester Tellegenstraat 1, 1073 KA Amsterdam, The Netherlands
- KVK number: 42043250
- Email: info@mentoramed.com
2. What Data We Process
- Account Information: Name, email address, and (if you use Google Sign-In) the Google profile details you authorise.
- Usage Data: Progress, answered questions, diagnostic performance, mastery/IRT scores, and study analytics.
- Payment Data: Processed securely by Stripe. We receive limited transaction and status information (e.g. payment success and a masked card reference); we do not store full card numbers on our servers.
- Technical Data: Device identifier, IP address, and browser information, used for security, diagnostics, and fraud prevention.
3. Purposes and Legal Bases for Processing
| Purpose | Legal basis |
|---|---|
| Creating and managing your account; providing and personalising the adaptive study platform | Performance of a contract (GDPR Art. 6(1)(b)) |
| Processing payments and managing subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Sending essential service and support messages | Performance of a contract (Art. 6(1)(b)) |
| Platform security, diagnostics, fraud prevention, and service improvement | Legitimate interests (Art. 6(1)(f)) — keeping the Platform secure, reliable, and improving it |
| Complying with legal, tax, and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Any optional communications you opt into (if offered) | Consent (Art. 6(1)(a)) |
Where we rely on legitimate interests, we have balanced those interests against your rights and freedoms. You may object to such processing.
4. Data Sharing and Processors
We share personal data only with essential service providers that help us operate the Platform, including:
- Stripe — payment processing;
- Our hosting infrastructure provider — storage and delivery of the Platform;
- Our email delivery provider — sending account and support messages;
- Google — only if you choose Google Sign-In.
We never sell your personal data and do not use it for third-party advertising.
5. Your Rights
Under the GDPR and UK GDPR, you have the right to access, rectify, erase, restrict processing of, or export your personal data. To exercise any right, email us at info@mentoramed.com.
6. Security & Retention
We apply appropriate technical and organizational measures (such as SSL/TLS encryption) to protect your data. Account and usage data are retained for the active life of your account. Transaction records are retained as required by Dutch tax law (7 years).