MSRA Privacy Notice
Version MSRA-PRIVACY-2026-10-26-v3
Who we are
BELMAR RADIOLOGY LIMITED (company 17047911) is responsible for personal information used to operate The MSRA Bank. Contact hello@theinterviewbank.com or write to 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom for privacy questions or requests.
Information and purposes
We receive information from you, your use of the bank, your chosen sign-in provider and payment providers. This includes account and contact details; practice answers, scores, timing, progress, bookmarks and notes; optional study preferences; reports and correspondence; purchase, refund and access records; and technical connection, security and error information. Card details are entered through the payment provider's checkout.
We use this information:
- To perform our agreement with you: provide accounts, study features, purchases, access and related support. Sign-in and necessary account details are required for these functions; optional preferences can be skipped.
- For legitimate interests: protect accounts, diagnose faults, investigate reports, improve educational material and understand service performance, using aggregate information where sufficient. These interests include maintaining a reliable service, educational quality and protecting legal rights.
- To meet legal obligations: retain required financial records and respond to lawful requests.
- With consent where required: optional marketing or other processing requiring consent. Creating an account or choosing study preferences does not subscribe you to marketing.
Do not include patient-identifiable or unnecessary sensitive information in notes, reports or messages. Practice marking is automated for learning; it does not make official recruitment or employment decisions.
Providers and AI assistance
Relevant providers include Lovable Cloud and its authentication/database infrastructure, Stripe and any disclosed merchant of record, email delivery services, and professional advisers or authorities where necessary. Google receives ordinary connection information when the site loads its web fonts. Provider roles and their own legal obligations vary by service.
We also use OpenAI/ChatGPT to assist content development, quality assurance, support, service analysis and administration. Where needed, this can involve relevant correspondence, account, transaction, feedback or usage information. We limit what is shared to the task and remain responsible for the work. Model training is disabled for this business use of ChatGPT; provider retention still applies. This does not mean every practice response is automatically sent to an AI model.
Some providers process information outside the UK, including Europe and the United States. Applicable transfer arrangements depend on the service used. Contact us for information about the arrangements relevant to your data and any applicable safeguards.
Retention and website measurement
We keep account and study records while needed for your account and requested learning history. Reports and correspondence are retained as needed to investigate, respond and address disputes; financial records follow applicable legal requirements. Security records are kept as needed for protection and incident investigation. AI-assisted work is subject to the task's continuing need and the provider's retention arrangements. Paid access expiry does not itself delete your account. You can request deletion; we will explain any information that must be retained.
Lovable visitor analytics is enabled for aggregate website measurement. The Cookie Notice explains its cookieless design and necessary browser storage.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability. You can withdraw consent at any time without affecting earlier lawful processing.
You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. Email hello@theinterviewbank.com to exercise your rights; we may need to confirm your identity. Deleting a shared account can affect other preparation areas, so please specify your request's scope.
You may complain to the Information Commissioner's Office. We will update this notice when processing changes and notify you of material changes where required.