MedStock.wiki Privacy Policy Last Updated: October 2, 2026

1. Data Controller & Contact MedStock.wiki is the data controller responsible for your personal information. If you have any questions about this policy or how we handle your data, please contact us at: [email protected].

2. The Data We Collect & Why To provide our community platform and features, we collect the following types of data:

• Account Data: When you register, we collect your username, email address, and profile details to administer your account and grant community access.
• Health & Medication Data (Special Category Data): If you choose to use our “Medication Manager,” submit ratings, or upload patient media, we collect information regarding your medication usage, treatment progress, and history.
• Community Data: We store chat logs, patient media database uploads, and medication reviews that you choose to submit.
• Technical Data: We collect basic browser data and IP addresses required by Cloudflare to ensure the security and performance of the site.

3. Our Lawful Basis for Processing Under UK GDPR, we must have a lawful basis to process your data:

• Explicit Consent: We process your Health & Medication Data strictly based on your explicit consent (UK GDPR Article 9(2)(a)). You must actively opt-in when submitting this data, and you can withdraw your consent at any time.
• Legitimate Interests: We process Account, Community, and Technical data based on our legitimate interest in running a secure, functional, and moderated community platform.

4. Data Sharing & Third Parties MedStock.wiki is a community platform. Information you share in reviews, chat rooms, and public profile sections can be viewed by other registered users. Private data in your Medication Manager remains visible only to you unless you explicitly choose to share it. We do not sell your data to third parties. We use trusted service providers, such as Cloudflare, solely to host and secure the website.

5. Data Retention We retain your account and associated medication data for as long as your account remains active. If you delete your account, or request erasure, your personal data will be permanently removed from our active databases.

6. Your Privacy Rights Under UK privacy law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Request that we delete your account and associated data.
• Withdraw Consent: Withdraw your consent for us to process your health data at any time.

To exercise any of these rights, please email [email protected]. If you are unhappy with how we have handled your data, you have the right to complain to the Information Commissioner’s Office (ICO).