Privacy & learner accounts
Last revised: 19 October 2026. This information explains how the new TDNSC learning site is designed to handle information.
Who manages the information?
The Dental Nurse Study Co. operates this revision platform. To ask about personal data or your account, use the contact page. Full business/controller identification and a dedicated privacy contact must be confirmed before launch.
Information you provide and why
- Account: your email address, one-time code verification record, and a limited-duration session used to sign you in. Codes expire after 10 minutes; sessions stop being valid after up to 14 days.
- Forum: a public username, your discussions and replies, moderation status and submission dates. Your email is held privately to link the forum profile to your verified account, not displayed on public posts. Moderators can review pending content.
- My Notes and learner profile: selected revision text, notes you write, optional unit tags, highlight categories, and the original resource page are stored in the private account database. Your chosen avatar and public username may appear beside approved forum content. Resource requests or purchase-support messages are stored privately for staff review. Never upload or type patient-identifiable information in notes or requests. The service operator must establish data retention and deletion procedures before launch.
- Purchases: a verified account email, Stripe checkout reference, product keys, amounts and entitlement records so that paid resources can be delivered. The website does not store full payment-card numbers.
- Revision and basket: the browser stores your basket, free practice progress and reading choices on your device. These can be lost if browser data is cleared, and the basket itself does not verify payment.
Services involved
The design uses Cloudflare for hosting/database, Resend for sending verification emails and Stripe for payment. Actual processor contracts, locations, onward sharing and any safeguards for international transfers must be checked before the live services are enabled. No marketing consent is implied by creating an account.
Sign-in and security
A session uses a secure HttpOnly cookie and a server-side hash. We limit repeated email-code requests and forum submissions. The public forum never needs to show an email address. Please do not post patient-identifiable information, medical records, personal contact details or passwords. Posts are reviewed before publication, but moderation cannot guarantee every statement is accurate or private.
Retention and deletion
Verification codes are valid for 10 minutes and sign-in sessions for up to 14 days; these are validity periods and do not themselves describe when database records are permanently deleted. Published or rejected posts, payment records and entitlements may need different retention periods. The operator must define and implement a deletion/retention schedule before full launch.
Your choices and rights
Under UK data-protection law you may have rights to access, correct, erase, restrict or object to some processing, and to request a copy of relevant data. Rights depend on the purpose and lawful basis. Contact TDNSC using the contact form for privacy questions; an account deletion tool is not yet available. You can also complain to the Information Commissioner's Office.
What happens on checkout?
Stripe checks payment on its own secure checkout page. TDNSC grants purchased access only after the server confirms a completed, paid payment. Previous Zite purchases are not automatically linked to this platform; if you already paid on the old website, continue accessing that website and contact TDNSC rather than paying again.
Privacy review outstanding: confirm the data controller's official identity/contact, lawful bases (including any legitimate interests assessment), processor agreements, transfer safeguards, collection of any analytics/cookies, retention periods, incident process and data-subject request procedure.