Privacy notice
Primary Source Verification Guide is an information website. We collect very little about you, and only what you choose to send us.
Last updated 15 October 2026.
In short
- You can read every page without giving us any personal information.
- If you use the contact form or sign up for circular alerts, we keep what you send so we can answer you or send the alerts – nothing else.
- We do not sell your information, and we do not share it with the DHP, the Ministry of Public Health or any PSV provider.
- You can ask us at any time to show, correct or delete what we hold about you.
Who we are
This website, gbsqchp.com, is published by MRP Business Consulting (“we”, “us”). We decide how the information described here is used. We are an independent information service: we are not the Department of Healthcare Professions, the Ministry of Public Health, or DataFlow, QuadraBay, AVS or any other verification provider.
What we collect and why
When you send a message through the contact form
We collect your name, email address, and – if you choose to give them – your phone or WhatsApp number, the country you trained in, the topic you pick and your message. We also record which page of the site you came from. We use this only to understand your question and reply to you. The message is saved in our database and forwarded to our email inbox.
Please do not send passport copies, certificates, medical information or other documents through the form or chat. We do not need them to answer your question, and we cannot process a verification for you.
When you sign up for DHP circular alerts
We collect your email address, the profession you select and the page you signed up from. We use them only to email you when a DHP rule, fee or timeline we track changes, and to understand which professions the alerts are useful for. You sign up by choice and can leave at any time.
Technical information when you visit
Like every website, our server records basic technical information about each request – IP address, browser type, the page asked for and the time – to keep the site running and secure. To stop the contact form being abused we briefly keep a count of messages per IP address; that count is held in memory for ten minutes and never stored.
Cookies
The site itself sets no cookies for visitors. We do not use advertising or tracking cookies. A login cookie is used only by our own staff when they sign in to edit the site.
Who processes your information for us
We use these service providers to run the site. They handle your information only on our behalf:
| Provider | What it does for us |
|---|---|
| OVHcloud | Hosts the web server that runs this site. |
| MongoDB Atlas (MongoDB, Inc.) | Hosts the database where contact messages and alert sign-ups are stored. |
| Amazon Web Services (Amazon SES) | Delivers the email that forwards your contact message to our inbox, and our replies. |
| Microsoft 365 | Our email inbox, where we read and answer your message. |
We do not sell, rent or trade personal information. The site does not show advertising; if that ever changes, this notice will be updated first. We would disclose information to a public authority only where the law requires us to.
Where your information is stored
We work online only, and our service providers operate data centres in several countries, so your information may be stored or processed outside the country you live in. We choose established providers that protect the data they hold for us.
How long we keep it
- Contact messages: as long as we need to answer you and deal with any follow-up, and no longer than 24 months after our last reply.
- Alert sign-ups: until you ask to be removed. Every alert email will include a way to unsubscribe.
- Server logs: a short period, normally about two weeks, after which they are deleted automatically.
How we protect it
The whole site runs over an encrypted (HTTPS) connection. Contact messages and sign-ups can be read only by signed-in staff accounts, access to the database is restricted and password-protected, and staff passwords are stored in hashed form.
Your choices and rights
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct anything that is wrong;
- delete your information, or remove you from the circular alerts;
- stop using your information for a purpose you previously agreed to.
Send your request through the contact page using the same email address you gave us, so we can confirm it is you. We reply within 30 days. If you are not satisfied with our answer, you can complain to the data protection authority in your country.
Children
This site is written for healthcare professionals and employers. It is not aimed at children, and we do not knowingly collect information from anyone under 18.
Changes to this notice
When we change how we handle personal information we update this page and the date at the top. If a change is significant we will say so on this page.
Contact
Questions about this notice or about your information: use the contact page.