The most important line on this page
We never ask for, never want, and must never receive patient information. Please do not send us clinical details, records, screenshots of a chart, or anything identifying a patient, not in a support email, not to illustrate a question, not ever. If you do send something like that, we will delete it and tell you we have.
Who controls your data
What we collect, and why
| Data | Why we have it | Lawful basis |
|---|---|---|
| Email address | To deliver your download and updates; to answer support email; to send the occasional product update if you asked for one | Performance of a contract; consent for marketing email |
| Name and billing country | Collected at checkout by Gumroad to issue your invoice and determine applicable tax | Contract and legal obligation |
| Specialty (optional) | Only if you choose to tell us, so we can prioritize which specialty modules to build next | Consent |
| Purchase record | Order number, product, amount, date. So we can honor refunds, reissue downloads and keep lawful records | Contract and legal obligation |
| Basic site analytics | Cloudflare's cookieless performance beacon: aggregate page counts and load times, so we know whether the site works. It sets no cookies, does no fingerprinting, and is not used to identify an individual visitor. No advertising cookies, no tracking pixels, no cross-site profiling | Legitimate interest |
We do not collect, and cannot see: your card number or any payment credentials; any patient data; your location beyond the billing country you give at checkout; anything about what you do inside the files after you download them.
Who processes it on our behalf
| Processor | What they handle |
|---|---|
| Gumroad, Inc. | Payment processing, invoicing and tax as merchant of record. They receive your name, email, billing country and payment details directly. We never see the payment details at any point. |
| Cloudflare, Inc. | Website hosting, content delivery, and any form submissions made on this site. |
| Email delivery provider | Sending your download link, receipts and any update emails you opted into. |
We do not sell your data. We do not share it for advertising. We do not rent, trade or otherwise pass your email address to anyone outside the processors above, who act only on our instructions.
International transfers
Our processors are based principally in the United States, so your data will be processed there and potentially in other countries where they operate. Where transfers are subject to UK or EU data protection law, they are made under the safeguards those processors maintain, including Standard Contractual Clauses. Details of each processor's own safeguards are published in their respective privacy documentation.
How long we keep it
Your rights
Depending on where you live, you have some or all of the following rights over your data:
- Access, ask for a copy of what we hold about you
- Correction, have anything inaccurate fixed
- Deletion, have it erased, subject to records we must lawfully keep
- Restriction and objection, limit how we use it, or object to processing based on legitimate interest
- Portability, receive it in a machine-readable format
- Withdraw consent, at any time, without affecting anything done before you withdrew it
- Complain, to your local data protection authority, if you think we have handled this badly
To exercise any of these, email support@theattending.net. We respond within 30 days, and in practice much sooner. It is one person reading the inbox, not a ticketing queue.
Cookies and measurement
This site sets one small cookie of its own: a source code such as "ig" or "fbus" that remembers which link brought you here, for thirty days, so a purchase can be credited to the right page. It holds no identity and never leaves this domain. For visitors located in the United States only, Microsoft Clarity records anonymous session analytics (where on a page people scroll and click) with every word of text and every field masked in the recording, and never on the de-identification tool or the check-in quiz. Visitors outside the United States do not receive Clarity at all. The checkout provider sets the cookies it needs to process your order, under its own notice.
Advertising measurement, United States only
For visitors located in the United States, the product pages listed below load the Meta pixel so we can tell whether an advertisement led to a page view or a click on a buy button. It records the page you viewed and a click on a buy link, nothing else: automatic collection of button text, form fields and page metadata is switched off, and Meta's Limited Data Use setting is applied so state privacy laws are honoured by location. The pages: /pocket-notes, /start, /twelve, /method, /failure-modes, /vault, /clinician-suite and /practice-suite.
Visitors outside the United States never receive the pixel. No consent banner is shown because none is needed: the tag is not loaded at all for the United Kingdom, the European Union or any other location. The pixel is never loaded on the de-identification tool, the free chapter page, the check-in quiz, the home page, article comment forms, or any page where you type or paste text or upload a file. Your email address, when you choose to give it, is never sent to Meta. To opt out of ad measurement in the United States, use your browser's tracking protection or your Meta ad settings; the site works identically either way.
Children
This product is sold to healthcare professionals and students in a healthcare profession. It is not directed at anyone under 18, and we do not knowingly collect data from anyone under 18.
Changes to this notice
If we change this notice materially, we will update the date at the top and, where the change affects how we use data you have already given us, tell you by email rather than relying on you re-reading this page.
Questions about privacy: support@theattending.net. See also our Terms of Sale and Refund Policy.