Privacy Policy

MedicalVideo.store is an online store for digital medical education courses (board review and CME video courses), delivered as secure download links. For any privacy question or request, write to [email protected].

• Order data: your first and last name, email address, the courses you buy, price, currency, order date, order status and the payment reference from the payment provider.
• Account data (only if you create an account): username, email address and password. Passwords are stored encrypted (hashed); we cannot read them.
• Messages you send us: contact form, email or Telegram messages, including the details you choose to give us.
• Technical data: IP address, browser type, pages requested and time of the request, as recorded by our web server and our security services. We use them only for security, fraud prevention and to keep the site working.
• Payment data: card and PayPal details are entered directly with Stripe or PayPal. We never see or store your full card number.

• To process your order and deliver your course (we send the download link to your email address).
• To take payments and handle refunds under our Refund Policy.
• To answer your questions and give support.
• To protect the store and our customers against fraud and abuse.
• To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use it to build advertising profiles.

• Contract: processing your order, delivery, payment and support.
• Legal obligation: keeping order and payment records required by tax and accounting law.
• Legitimate interests: security, fraud prevention and keeping the website running.
• Consent: where the law requires it; you can withdraw consent at any time.

We share data only with the service providers we need to run the store, and only what each one needs:

• Stripe and PayPal: process your payment. Their own privacy policies apply to the data you enter with them.
• Brevo: sends our emails to you (order confirmations, delivery links, account emails).
• Google Drive (or pCloud / Mega on request): hosts your course files. When we share a course with you, your email address may be given to that service so you can open the files.
• Telegram: we receive a notification for each new order (order number, status, courses, total and your email address) so we can deliver quickly.
• Cloudflare: delivers and protects our website. All visits pass through Cloudflare, which processes technical data such as your IP address.
• Our hosting provider (Namecheap): stores the website and its database on its servers.

Some of these providers process data outside your country, for example in the United States. They protect it with their own safeguards, such as standard contractual clauses.

We use only cookies that the store needs to work, plus the payment and security cookies of our providers. We do not use analytics or advertising cookies.

• Cart: woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_* remember what is in your cart.
• Currency: PHPSESSID remembers the currency you choose (USD, EUR and others).
• Account: wordpress_logged_in_*, wordpress_sec_* and wordpress_test_cookie keep you signed in, only if you log in.
• Order source: sbjs_* cookies record how you reached the store (for example direct visit or search engine). WooCommerce saves this with your order; it is not shared with advertisers.
• Payment and security: Stripe and PayPal may set cookies on the checkout page to prevent fraud; Cloudflare may set a security cookie (__cf_bm) to tell people from bots.

You can delete or block cookies in your browser settings. If you block the cart or session cookies, the cart and checkout will not work.

• Orders and payment records: as long as needed to support your purchase and for the period required by tax and accounting law.
• Accounts: until you ask us to delete your account.
• Messages: as long as needed to answer and follow up your request.
• Server and security logs: for a short period, then deleted automatically.

You can ask us at any time to:

• tell you which personal data we hold about you and send you a copy;
• correct wrong data;
• delete your data or your account (we may have to keep order records that the law requires);
• restrict or object to some uses of your data;
• receive your data in a portable format.

Write to [email protected]; we answer within 30 days. If you live in the EU/EEA or the UK, you may also complain to your local data protection authority.

The whole website uses an encrypted connection (HTTPS). Payments are handled by Stripe and PayPal, passwords are stored hashed, and only the people who run the store can see order data.

Our courses are for medical professionals and students. The store is not meant for children under 16, and we do not knowingly collect their data.

We may update this policy when our store or the services we use change. The date at the top always shows the latest version.

Questions about this policy or your data: [email protected].