What we keep

• Your account: name, email address, job role, the course track you chose, and your password (stored only in scrambled form, so nobody can read it).
• Teaching activity: the sessions you booked and whether you attended.
• Your logbook: the ultrasound scans you record, supervisor sign-offs and review notes.
• Uploaded scans (clips and images): if you use Upload a scan, the ultrasound clips and images you add and your electronic scan report. They must contain no patient-identifiable information, and text at the top and bottom of a clip is removed before it is uploaded. They are stored on the website's server in a private folder that cannot be opened from the internet, and are kept until you delete them (you can delete a scan while it is a draft or has been sent back) or your account is removed.
• Assessments: readiness, pass/fail results and final sign-off for each module.
• Security records: when you sign in, failed sign-in attempts, the network address they came from, and a log of administrative actions (for example a role change).
• Visit counts: simple anonymous counts of site use, which cannot identify you.

Why we keep it

To run the teaching sessions, to track each trainee's progress towards FAMUS / FUSIC accreditation, to let supervisors sign off scans and assessments, to contact you about your teaching, and to keep the site secure.

Who can see it

• You can see your own account, bookings, logbook and assessment results.
• Tutors and supervisors see the sessions they teach and the scans they are asked to sign off.
• Your uploaded clips, images and report can be seen only by you, the mentor or supervisor you choose to review them, and Admins or Super Admins who teach that part of the programme (FAMUS or FUSIC Heart). If you tick the optional teaching box, the tutor who signed your scan may nominate one of your clips for the Educational Resources > Pathology clips page. A Super Admin watches the clip, checks that it shows no patient-identifiable information, and decides whether to publish it. A published clip is a separate copy, shown to signed-in members of the site, with your name only if you agreed to be named. The copy stays on the site even if you later delete your scan or your account. To have a published clip removed, ask your tutor or a Super Admin and it will be taken down.
• Super Admins see logbook progress and assessments for all trainees, and manage accounts.
• The site administrator (Creator) can also see security records and take backups, for support and safety.
• We do not sell your information or use it for advertising.

How long we keep it

There is no fixed time limit. Your records are kept so that your training and accreditation can be shown whenever it is needed. You can ask for your account and records to be removed at any time (see below).

How we protect it

Access depends on your role. Passwords are scrambled and new passwords must meet length and strength rules. Repeated failed sign-ins temporarily pause an account, administrator accounts are signed out when idle, administrative actions are recorded, and the database is backed up daily to a protected location.