Parents/Guardians Consent Statement

1. Introduction

MedZone recognizes that many students using our UCAT preparation platform are under the age of 18. This Parental Consent Statement explains the rights and responsibilities of parents and guardians, and how we protect young users' data and privacy.

2. Who Needs Parental Consent?

Parental or guardian consent is required for:

• Users under the age of 18 in the UK
• Users under 16 in most EU countries (per GDPR requirements)
• Any minor as defined by applicable local laws

If your child falls into these categories, we require verifiable parental consent before they can create and use a MedZone account.

3. What Are You Consenting To?

By providing consent, you are agreeing that your child may:

3.1 Create and Use an Account

• Register for a MedZone account with their email address and personal information
• Access UCAT practice questions and mock exams
• Use the AI Tutor feature for personalized guidance
• Track their progress and performance over time

3.2 Data Collection and Processing

You consent to MedZone collecting and processing:

• Personal information (name, email, school year, UCAT test date)
• Performance data (question attempts, scores, time spent, skill mastery)
• Usage data (features used, session duration, device information)
• AI Tutor interactions (questions asked, feedback provided)

All data is used solely to provide educational services and improve your child's UCAT preparation. We do not sell or share personal data with third parties for marketing purposes.

3.3 Communications

• Important account and subscription updates
• Progress reports and performance insights
• Educational tips and study recommendations
• Technical notifications and support responses

Note: You can opt out of optional communications while still receiving essential service-related messages.

4. Parent/Guardian Oversight Features

MedZone offers parent oversight accounts that allow you to:

4.1 Monitor Progress

• View your child's overall progress and performance trends
• See practice session history and mock exam scores
• Track study time and activity levels
• Identify strengths and areas needing improvement

4.2 Manage Subscription

• Purchase and manage subscriptions on behalf of your child
• Buy individual mock exam papers
• Update payment methods and billing information
• View payment history and invoices

4.3 Account Controls

• Manage privacy settings
• Request data access or deletion
• Update account information
• Revoke consent at any time

Important: Parent oversight requires your child's permission to link accounts. This ensures transparency and maintains trust while providing appropriate supervision.

5. Setting Up Parent Oversight

To link your account to your child's:

1. Your child sends a parent invite from their account settings
2. You receive an email invitation with a unique secure link
3. Create a MedZone parent account or log in to an existing account
4. Accept the invitation to link accounts
5. You can now view your child's progress dashboard

Note: Your child must initiate the invitation. This ensures they are aware of and agree to parent oversight.

6. Your Child's Privacy

While you have oversight, we also respect your child's privacy:

• Your child is notified when you view their progress
• They can see what information you can access
• Direct messages with support staff are private unless your child chooses to share them
• AI Tutor conversations are visible to you for educational oversight

We believe in balancing appropriate parental oversight with helping students develop independence and responsibility for their studies.

7. Your Rights as a Parent/Guardian

Under GDPR and UK data protection law, you have the right to:

7.1 Access Your Child's Data

Request a complete copy of all personal data we hold about your child in a machine-readable format.

7.2 Correct Inaccurate Data

Request correction of any inaccurate or incomplete personal information.

7.3 Delete Your Child's Data

Request deletion of your child's account and associated data at any time.

7.4 Restrict Processing

Request that we limit how we process your child's data while maintaining their account.

7.5 Withdraw Consent

Revoke your consent at any time, which will result in account closure.

To exercise these rights, contact us at privacy@medzone.co with proof of guardianship.

8. Data Protection and Security

We take extra care to protect children's data:

• All data is encrypted in transit and at rest
• Access to children's data is strictly limited to authorized personnel
• We conduct regular security audits and assessments
• We comply with GDPR, UK GDPR, and other applicable data protection laws
• We maintain detailed records of consent and data processing activities

For full details, see our Privacy Policy and Data Protection Addendum.

9. Age Verification

When a user indicates they are under 18 during registration:

1. We request a parent/guardian email address
2. We send a consent request email to the parent/guardian
3. The parent/guardian must verify their identity and provide consent
4. Only after consent is received can the account be fully activated

If consent is not provided, the account will remain inactive and be deleted after 30 days.

10. Responsibilities

10.1 Parent/Guardian Responsibilities

• Ensure your child understands how to use the platform safely and appropriately
• Review the Terms & Conditions and Code of Conduct with your child
• Monitor your child's usage as you deem appropriate
• Keep your payment information secure
• Report any concerns to us promptly

10.2 Student Responsibilities

Your child is responsible for:

• Using the platform appropriately and following our Code of Conduct
• Keeping their password secure
• Being honest during practice and mock exams
• Reporting any technical issues or inappropriate content

11. When Your Child Turns 18

When your child reaches 18 (or the age of majority in your jurisdiction), they gain full control over their account. At that time:

• They can remove parent/guardian oversight if they choose
• They become solely responsible for the account
• You will be notified of this transition
• They can choose to continue sharing progress with you voluntarily

12. Withdrawing Consent

You may withdraw consent at any time by:

• Contacting us at privacy@medzone.co
• Using the account deletion option in settings
• Sending a written request to our postal address

When consent is withdrawn, your child's account and all associated data will be deleted within 30 days. Any active subscriptions will be canceled and prorated refunds issued where applicable.

13. Questions or Concerns

If you have questions about this consent statement, your child's data, or how we protect young users, please contact us:

Email: privacy@medzone.co
Parent Support: parents@medzone.co
Phone: Available through account dashboard
Address: MedZone Ltd, London, United Kingdom

You may also lodge a complaint with the UK Information Commissioner's Office atico.org.uk.