Patient confidentiality warning: this system enforces a zero-patient-identifiers protocol. Logs are scanned and filtered to verify compliance with medical data security frameworks.
1. Scope & application
This Privacy Policy describes how Tandrwst collects, stores, protects and handles personal and professional data. It applies to all registered doctor residents, supervisors, directors and visitors in the Kurdistan Region who interact with the platform.
2. Information we collect
To provide functional rotation rosters and verified logbooks, the Platform collects:
- Professional demographics: full name, medical licence number, Directorate of Health affiliation (Erbil, Sulaymaniyah, Duhok, Halabja), current board specialty and training year (R1–R5).
- Clinical activity logs: the number of procedures performed, date of operation, role (primary surgeon, assistant) and supervising consultant references.
- Academic evaluations: attending doctor feedback scores, Mini-CEX sheets, DOPS assessments and seminar presentations.
- Technical data: logins, IP address, browser type and device information, for security auditing.
3. Patient confidentiality
Tandrwst is committed to protecting patient privacy. No patient identifiers are required or permitted in our databases.
Prohibited information check. Entering patient names, phone numbers, exact birth dates or national identity card images is strictly forbidden. The platform runs automated checks that flag logs resembling patient identifiers or full names, prompting coordinators to delete the offending entries.
5. Encryption & security
All data is encrypted in transit and at rest. The Platform implements:
- TLS 1.3 for all transmissions between clients and servers.
- Secure hashing (bcrypt) for login credentials.
- Role-based access control, so residents cannot edit assessments or view another resident's scores without permission.
6. Portfolio retention
We retain resident profiles and academic logs for the duration of the tandrwst programme plus a further five years after board graduation, in line with the academic audit requirements of the Kurdistan Ministry of Health. Residents may export their complete verifiable logbook portfolio as CSV or PDF at any point during or after that term.
You can ask us to remove your data at any time: see delete your account or delete your data.