ResidencyKRD

Privacy Policy

Last updated 4 June 2026 · Version 1.2

Patient confidentiality warning: this system enforces a zero-patient-identifiers protocol. Logs are scanned and filtered to verify compliance with medical data security frameworks.

1. Scope & application

This Privacy Policy describes how ResidencyKRD collects, stores, protects and handles personal and professional data. It applies to all registered doctor residents, supervisors, directors and visitors in the Kurdistan Region who interact with the platform.

2. Information we collect

To provide functional rotation rosters and verified logbooks, the Platform collects:

  • Professional demographics: full name, medical licence number, Directorate of Health affiliation (Erbil, Sulaymaniyah, Duhok, Halabja), current board specialty and training year (R1–R5).
  • Clinical activity logs: the number of procedures performed, date of operation, role (primary surgeon, assistant) and supervising consultant references.
  • Academic evaluations: attending doctor feedback scores, Mini-CEX sheets, DOPS assessments and seminar presentations.
  • Technical data: logins, IP address, browser type and device information, for security auditing.

3. Patient confidentiality

ResidencyKRD is committed to protecting patient privacy. No patient identifiers are required or permitted in our databases.

Prohibited information check. Entering patient names, phone numbers, exact birth dates or national identity card images is strictly forbidden. The platform runs automated checks that flag logs resembling patient identifiers or full names, prompting coordinators to delete the offending entries.

4. Information sharing

We do not sell, rent or trade resident or supervisor data to third-party commercial networks. Academic performance data is shared only through official educational pathways:

  1. Board coordinators: the Kurdistan Board of Medical Specialties (KBMS) and hospital directorates access portfolios to verify graduation eligibility.
  2. Assigned supervisors: attending consultants in the active rotation ward can view the logbooks of residents currently assigned under their shift rosters.
  3. Educational audits: aggregate metrics of resident performance may be shared with directorate boards to assess hospital accreditation status.

5. Encryption & security

All data is encrypted in transit and at rest. The Platform implements:

  • TLS 1.3 for all transmissions between clients and servers.
  • Secure hashing (bcrypt) for login credentials.
  • Role-based access control, so residents cannot edit assessments or view another resident's scores without permission.

6. Portfolio retention

We retain resident profiles and academic logs for the duration of the residency programme plus a further five years after board graduation, in line with the academic audit requirements of the Kurdistan Ministry of Health. Residents may export their complete verifiable logbook portfolio as CSV or PDF at any point during or after that term.