1. Who we are
The data controller for the purposes of applicable data protection law is White Coat Academy (WCA) (“WCA”, “we”, “us”), operating the White Coat Academy website and member platform. Registered / contact address: Türkiye.
Privacy contact: whitecoat.contact@gmail.com
2. What data we collect
Depending on how you use WCA, we may process:
- Account data — name, email address, password (stored in hashed form), profile details you choose to provide.
- Application & course data — information you submit in forms, course applications, certificates, and training history.
- Communications — messages you send to WCA staff through the platform and related notifications.
- Technical data — IP address, browser type, device information, and security logs where necessary to protect the service.
- Consent records — confirmation that you accepted our Terms and this Privacy Policy, optional marketing preferences, and timestamps.
3. Why we use your data
We process personal data to:
- create and manage your member account;
- verify your email and secure access to the platform;
- process applications, courses, certificates, and member support;
- send service-related emails (verification codes, account security, certificate delivery, application status, staff replies to your messages);
- send optional marketing emails only if you have given separate consent;
- maintain platform security, prevent abuse, and comply with legal obligations.
4. Legal bases
Where applicable (including GDPR and Turkish KVKK principles), we rely on: performance of a contract or steps prior to entering a contract (account and applications); legitimate interests (security, fraud prevention, improving our educational services); legal obligation; and, where required, your explicit consent (for example optional marketing emails).
5. How long we keep data
We retain personal data only as long as necessary for the purposes above, including while your account is active and for a reasonable period afterwards for legal, audit, or dispute-resolution purposes. Certificate and application records may be kept longer where required for accreditation, verification, or regulatory reasons.
6. Who we share data with
We do not sell your personal data. We may share data with trusted service providers who help us operate the website (hosting, email delivery, security) under appropriate confidentiality and data-processing arrangements, or when required by law, court order, or to protect the rights and safety of WCA, our members, or others.
7. International transfers
Our infrastructure or service providers may be located outside your country. Where data is transferred internationally, we take steps reasonably required to protect it in line with applicable law.
8. Security
We implement appropriate technical and organisational measures designed to protect personal data, including encrypted connections (HTTPS), access controls, and secure password storage. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security of information transmitted to or stored on the internet.
9. Your rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion or restriction of processing in certain circumstances;
- object to certain processing, including direct marketing;
- withdraw consent where processing is based on consent (without affecting prior lawful processing);
- lodge a complaint with a supervisory authority.
To exercise your rights, contact whitecoat.contact@gmail.com. We may need to verify your identity before responding.
10. Children
WCA is intended for medical students and healthcare learners. The platform is not directed at children under 16, and we do not knowingly collect personal data from children without appropriate authority.
11. Cookies
We use essential cookies and similar technologies required for login, security, and basic site functionality. If we use analytics or non-essential cookies, we will describe them here or in a separate cookie notice and, where required, obtain consent.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date. Continued use of the platform after changes may require renewed acceptance where legally required.
13. Contact
Contact: whitecoat.contact@gmail.com
See also our Terms of Use.
This document is provided for transparency. It does not constitute legal advice. WCA recommends independent legal review for your organisation’s specific obligations.