UK Data Protection & GDPR

Privacy Policy

Last updated: August 2026 · Breakthrough Medical Solutions Ltd

Breakthrough Medical Solutions Ltd ("Breakthrough", "we", "us" or "our") respects your privacy and is committed to protecting personal information in compliance with the UK GDPR and the Data Protection Act 2018.

1. Information We May Collect

Depending on how you use Breakthrough, we may collect:

  • Name and contact information;
  • Account and login information;
  • Educational institution, course and cohort information;
  • Simulation session activity and timestamps;
  • Learning progress, diagnostic telemetry and clinical reasoning performance data;
  • Technical information such as browser, device and IP information;
  • Communications and feedback submitted through the platform.

2. How We Use Information

We may use information to:

  • Provide, operate, and maintain Breakthrough;
  • Create and manage active educational simulation sessions;
  • Provide student consultation and educator console functionality;
  • Maintain platform security and protect against misuse;
  • Improve platform performance and reliability;
  • Provide cohort analytics and educational reasoning insights;
  • Communicate with faculty and authorized users;
  • Comply with legal and accreditation obligations.

3. Student Learning Data

Where Breakthrough is deployed by an educational institution, educators or authorized administrators may be able to access relevant student activity, session participation, diagnostic scores, and debrief performance information.

The specific information available depends on the institution's configuration and institutional agreement with Breakthrough.

4. AI Processing

Some Breakthrough features use third-party AI services to generate simulated patient responses and other educational outputs.

We aim to minimize unnecessary personal information sent to AI services and design AI features around the structured clinical simulation data required for the experience. No real patient data is used in simulated AI scenarios.

5. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure or destruction.

All data transmission is encrypted using modern TLS protocols. However, no internet-based service can guarantee absolute security.

6. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required by law or agreed with an educational institution.

7. Your Rights

Depending on applicable UK data-protection law, you may have rights relating to your personal information, including rights to access, correct, delete, or restrict certain processing.

Requests can be submitted using the contact details provided below.

8. Children's Data

Breakthrough is intended primarily for higher-education and professional medical education. Where the platform is provided through an institution, the institution may have additional responsibilities regarding student data.

9. Changes

We may update this Privacy Policy from time to time. The latest version will always be published on this page.

10. Contact

For privacy enquiries or data-protection requests, contact Breakthrough Medical Solutions Ltd at:

privacy@breakthrough-med.co.uk