entertheloop

Privacy Policy

Last updated:

1. Who We Are

EnterTheLoop is operated by Grayscale Medical Ltd, a company registered in England and Wales. Our registered address is in London, United Kingdom.

For data protection purposes, Grayscale Medical Ltd is the data controller. If you have questions about this policy, contact us at privacy@entertheloop.ai.

2. What Data We Collect

We collect the following types of personal data:

  • Account information: name, email address, and password when you register.
  • Professional information: professional category, regulatory registration number (e.g. GMC, NMC, GPhC, HCPC), qualifications, CV/resume, and credentials you upload.
  • Usage data: pages visited, features used, and interaction data collected via cookies and analytics tools.
  • Communication data: emails, newsletter subscriptions, and waitlist sign-ups.

3. How We Use Your Data

We use your personal data to:

  • Create and manage your account.
  • Verify your professional credentials against public regulatory registers.
  • Match you with relevant AI career opportunities.
  • Send you relevant communications including role matches, platform updates, and newsletters (with your consent).
  • Improve our platform and services through analytics.
  • Comply with legal obligations.

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

  • Consent: for marketing communications and newsletter subscriptions.
  • Contract: to provide our recruitment matching services when you register.
  • Legitimate interest: to improve our platform, prevent fraud, and ensure security.
  • Legal obligation: to comply with applicable laws and regulations.

5. Data Sharing

We may share your professional profile (excluding sensitive personal data) with AI companies seeking medical professionals, only after you have been verified and matched. We do not sell your personal data.

We use the following third-party services:

  • Supabase: database and authentication (EU-hosted).
  • Vercel: hosting and deployment.
  • Resend: transactional email delivery.
  • PostHog: product analytics (EU-hosted).

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Request erasure of your data.
  • Restrict or object to processing.
  • Data portability.
  • Withdraw consent at any time.

To exercise these rights, email privacy@entertheloop.ai. We will respond within 30 days.

8. Cookies

We use cookies and similar technologies. For details, see our Cookie Policy.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on our website.

11. Contact

If you have questions about this privacy policy or wish to exercise your data rights, contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.