Back to Medical Appraisal Hub

GDPR & Privacy Policy

How we use and protect your personal information.

This policy explains what Medical Appraisal Hub records, why it is needed, how it is used and the choices you have under UK data protection law.

Information recorded

  • Your signed-in account identifier, email address and name.
  • Your GMC number, selected medical grade or job title, specialty and NHS trust, health board or organisation.
  • The appraisal portfolio entries you choose to create, including procedure supervision levels and clinic-log information.
  • A senior’s name and professional email address when you choose to prepare a CBD or procedure verification request.
  • Appraisal request details, including contact information, GMC number, due dates and the work history you submit for suitability review.
  • Article questions or comments you choose to post, together with your chosen public display name and signed-in account identifier.
  • The date of your required privacy and safety acknowledgements.
  • Your optional marketing preference and when it was last changed.
  • Your separate optional third-party sharing preference and when it was last changed.

How the information is used

Account and profile information is used to provide your private portfolio, organise records and protect access. Marketing emails may only be sent when you actively choose the separate marketing option. It is not required to use the portfolio.

If you separately opt in to third-party sharing, only your name, email address and selected professional profile may be shared with relevant medical education, appraisal or portfolio-service partners. Portfolio entries are not shared for marketing.

Information submitted through the appraisal request form is used to assess suitability, understand your appraisal and revalidation timescale, and respond about possible arrangements.

When you request senior verification, the site records the senior’s contact details and the date the request was prepared. The message opens in your own email application for you to review and send; the senior verifies the record by replying to you.

Article discussions are public: your chosen display name, question or comment and posting date can be read by other visitors. Your account identifier is used behind the scenes to attribute and protect posting access and is not displayed with the comment.

Patient information

Do not enter names, dates of birth, NHS numbers, hospital numbers, addresses, exact dates or unusual combinations of facts that could identify a patient. Portfolio reflections and article discussions should be anonymised from the outset.

Your choices

You can revisit account creation to update your professional profile or withdraw marketing or third-party sharing consent. Individual portfolio entries can be edited or deleted from your dashboard. For an account access, correction or deletion request, contact Medical Appraisal Hub through the request page without including patient information.

Who is responsible

Harborne Medical Group Limited (company number 17421245), led by Dr Andrew Harborne, operates Medical Appraisal Hub and is responsible for the site’s use of this information. Service providers used to authenticate, host and operate the site may process information only as needed to provide those services.

Last updated 29 August 2026.