Privacy Notice

MediGuide (“MediGuide”, “we”, “us”), trading as MEDIGUIDE, is established in the Republic of Kosovo and publishes digital medical education guides. MediGuide is the data controller for the personal data described in this notice. You can reach us through the contact page of this website.

Account data (email address, password hash, account creation date) — to create and secure your account and to give you access to the guides you purchased. Legal basis: performance of a contract.

Purchase and entitlement data (order and transaction identifiers, purchased product, licence key, purchase date, amount) — to unlock content, provide support and meet accounting duties. Legal basis: contract and legal obligation.

Support messages (name, email, message content) — to answer your enquiry. Legal basis: legitimate interest in responding to users.

Technical and usage data (IP address, device and browser information, error logs, reading progress) — to keep the service secure and stable and to improve the product. Legal basis: legitimate interest.

We do not collect or store your card details. Payment data is handled by Paddle as Merchant of Record.

Service providers and subprocessors that host our platform, database, authentication and email delivery, acting on our instructions.

Paddle.com Market Ltd, our Merchant of Record, for the sale of our products, payment processing, fraud prevention, tax compliance, invoicing and refunds.

Professional advisers (legal, accounting) and public authorities where we are legally required to disclose information.

We never sell your personal data.

We are established in Kosovo and our providers may process data in the EEA, the United Kingdom or other countries. Where personal data of users in the EEA or UK is transferred, we rely on adequacy decisions or Standard Contractual Clauses together with appropriate technical safeguards; transfers from Kosovo are made in line with the Law on Personal Data Protection of the Republic of Kosovo.

Account and entitlement records are kept while your account exists, so that you keep access to what you bought. Purchase records are kept for as long as tax and accounting law requires (generally up to 10 years). Support messages are kept up to 24 months. Technical logs are kept up to 12 months. Afterwards data is deleted or anonymised.

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. Contact us and we will respond within one month.

You may also complain to the Information and Privacy Agency of the Republic of Kosovo, or to the data protection supervisory authority in your own country of residence.

We use appropriate technical and organisational measures, including encryption in transit, hashed credentials, row-level access control on our database and server-side delivery of purchased content, so that guides are only served to the account that owns them.

We use strictly necessary cookies and browser storage for sign-in sessions, your cart, your language choice and your reading position. Our payment provider sets cookies needed to run checkout securely. We do not use advertising cookies. You can clear or block cookies in your browser, but sign-in and checkout will then not work.

We may update this notice. The version published on this page is the current one, and the date below shows when it last changed.