Privacy Policy

This policy explains how Doctor Devify Ltd (“we”, “us”, “our”) collects and uses personal data when you use The Schema. We are the data controller for the purposes of UK GDPR.

1. Data we collect

• Account data, when you sign up, such as your name, email address, and password (stored as a hash).
• Payment data, processed by our payment provider (Stripe). We don’t store full card details ourselves.
• Progress and notes, which you create as you use the Service. Where possible this is stored locally on your device. Where stored on our servers it is linked to your account.
• Technical data, such as browser type, IP address, and usage logs, collected automatically to keep the Service secure and working.

2. Why we use your data

• To provide and operate the Service.
• To process your payments and manage your subscription.
• To respond to your support requests.
• To improve the Service, including reviewing anonymised usage patterns.
• To meet legal and regulatory obligations.

3. Lawful bases

We rely on contract (to deliver the Service you’ve signed up for), legitimate interests (to run and improve the Service securely), and legal obligation where applicable. Marketing emails, where used, are sent only on the basis of your consent.

4. Who we share data with

• Service providers who host our infrastructure, process payments (Stripe), and send transactional email. They process data on our instructions only.
• Analytics providers, where used, to understand aggregated usage. We configure these to minimise personal data where possible.
• Authorities, where we’re legally required to disclose data.

We don’t sell your personal data.

5. International transfers

Some of our service providers are based outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as UK International Data Transfer Agreements or the EU Standard Contractual Clauses.

6. How long we keep data

We keep account data while your account is active and for a reasonable period afterwards to handle queries, disputes, and our legal obligations. You can request deletion at any time (see your rights below).

7. Your rights

Under UK GDPR you have the right to access, correct, delete, restrict processing of, port, or object to the use of your personal data. You also have the right to withdraw consent where we process on that basis. To exercise any of these, email us at hello@theschema.co.uk. You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

8. Security

We use appropriate technical and organisational measures to protect your data. No online service can guarantee absolute security, but we take it seriously and review our practices regularly.

9. Cookies

See our Cookie Policy for details on the cookies and similar technologies we use.

10. Contact

Data protection questions should be sent to hello@theschema.co.uk.

The Schema is a trading name of Doctor Devify Ltd.