Wellseen
The short version
Wellseen is a private MCAT coaching programme. This page says exactly what we collect, why, who else sees it, how long we keep it, and how to make us delete it. We collect as little as the programme can run on.
- What we collect
- Your email if you want emails, your details if you book or enrol, your study data while you are a student, and your application if you apply to work here.
- What we never do
- Sell it, rent it, share it for advertising, or track you across the web.
- Who else sees it
- Seven named companies, each doing one job for us. They are listed in full below.
- How to get it deleted
- Email [email protected]. We reply within 30 days.
Who we are
Wellseen runs the Wellseen MCAT coaching programme and this website. We decide what happens to the personal information described here, which in European law makes us the data controller for it.
Email · [email protected]
California, United States. We have no public postal address; write to the email above and we will answer anything you would have posted.
Write to that address for anything on this page: a copy of your data, a deletion, a correction, or a question. A person reads it.
What we collect
In short: your email if you ask for emails, your details if you book or enrol, your study data if you are a student, your application if you apply for a job, and ordinary server logs from anyone who loads a page.
| When | What we collect | Where it is held |
|---|---|---|
| You subscribe to the newsletter | Email address | beehiiv, our email platform |
| You book a call | Name, email, and anything you type into the booking form | Calendly, our scheduling tool |
| You enrol | Name, email, billing address. Card numbers go straight to Stripe and never reach us at all | Stripe, our payment processor |
| You are a current student | Your study plan, daily check ins, practice scores, session notes and messages with your coach | The Wellseen student portal |
| You apply for a role | Name, email, LinkedIn, city and country, resume, your written answers, and which of our channels you would post on | Our Google Workspace account |
| You email us | Your message and anything in it | Google Workspace |
| Anyone loads a page | IP address, browser and device type, the page requested, the referring page, and the time | Vercel, our host, in standard server logs |
| Anyone loads a page | Anonymous visit statistics: the page, the referring page, approximate location, browser, operating system, device type and the time. No cookie is set and nothing is tied to your IP address | Vercel Web Analytics |
| Anyone loads a page | The same request details as the server logs: IP address, browser, the page requested and the time | Cloudflare, which every request passes through on its way to our host |
That is the whole list. There is no advertising pixel on this site, no cross-site tracking, no session recording, and no profile of you sold or rented to anyone.
What we deliberately do not collect
- Card numbers, CVVs or bank credentials, which Stripe handles on their own systems.
- Health records, or any medical information about you.
- Your precise location. We ask applicants for a city and country so we can work out time zones; that is as fine-grained as it gets.
- Anything about you from a data broker. Every piece of information we hold came either from you or from your own browser loading a page.
Why we collect it, and our legal basis
Under the UK and EU GDPR every use of personal data needs a lawful basis. Ours:
| What we do | Why | Legal basis |
|---|---|---|
| Send the newsletter | Because you asked for it | Consent, which you can withdraw from the unsubscribe link in any email |
| Run the call you booked and follow up on it | You asked to speak to us | Steps taken at your request before a contract |
| Deliver the coaching you paid for | It is the thing you bought | Performance of our contract with you |
| Review your job application | To decide whether to hire you | Steps at your request before an employment contract, and our legitimate interest in hiring well |
| Keep the site up, and stop abuse | Security and reliability | Our legitimate interest in a working, un-attacked service |
| Keep records of payments and refunds | Tax and accounting rules | Legal obligation |
Where we rely on legitimate interests we have weighed them against your rights, and you can object at any time using the contact details above.
If you apply for a job
Applications through our careers page are read by the Wellseen founders and, where relevant to the role, by the coaches you would work alongside. Your resume and answers are stored in our Google Workspace account.
- Asking whether you are comfortable posting on our channels is a question, not a requirement. Ticking none of the boxes does not count against you.
- If we hire you, your application becomes part of your employment or contractor record and is kept for as long as that relationship and the law require.
- If we do not, we keep the application for 12 months in case something else opens up, then delete it. Tell us at any point and we will delete it sooner.
How long we keep it
| What | How long |
|---|---|
| Newsletter subscription | Until you unsubscribe, then removed within 30 days |
| Booking and call notes | 24 months from the call |
| Student account and study data | While you are enrolled, then 24 months, then deleted. Ask sooner and we will delete sooner |
| Payment and refund records | 7 years, because tax law says so |
| Job applications from people we did not hire | 12 months |
| Server logs | Up to 30 days |
| Emails you send us | 24 months, unless the thread is a contract or a complaint, which we keep longer |
Your rights
Wherever you live, you can ask us to do all of the following, and we will:
- Show you what we hold. A copy of your data, in a form you can read.
- Correct it if it is wrong.
- Delete it. We will, unless a law makes us keep a specific record, payment history for example, in which case we will tell you exactly what is staying and why.
- Export it in a machine-readable file you can take elsewhere.
- Stop or limit a particular use, including any use resting on legitimate interests.
- Withdraw consent at any time, without it affecting anything done before you withdrew it.
- Opt out of marketing. One click in any email.
Email [email protected]. We reply within 30 days, usually much sooner, and we will not charge you or treat you differently for asking. We may need to check you are who you say you are before we hand over a copy of anything.
If you are in the EU or the UK
You can complain to your national data protection authority, and to the UK Information Commissioner's Office at ico.org.uk. We would rather you came to us first, but it is your right either way.
If you are in California
You have the rights above under the CCPA and CPRA, plus the right to know what categories we collect and disclose, set out in full in the tables on this page, and the right not to be discriminated against for exercising any of them. An authorised agent may make a request for you with written proof. As stated above, we do not sell or share your personal information, so there is no opt-out link to give you.
Where your data goes
Wellseen is run from the United States and most of the companies listed above are in the United States. If you are in the UK, the EU or anywhere with similar rules, your information will be transferred there.
For those transfers we rely on the Standard Contractual Clauses in our contracts with each provider, and on the EU–US and UK–US Data Privacy Frameworks where the provider is certified under them.
How we protect it
- Everything travels over HTTPS. There is no unencrypted route into this site.
- Data sits encrypted at rest with our hosting and database providers.
- Access is limited to the people who need it to do their job, over accounts with two-factor authentication.
- Card details never touch our systems. Stripe holds them, and Stripe is certified to PCI DSS Level 1.
No system is perfectly secure and we will not pretend otherwise. If a breach ever affects your information we will tell you and the relevant regulator, without undue delay and within 72 hours of becoming aware of it where the law requires that.
Children
Wellseen is built for people preparing for the MCAT, which in practice means undergraduates and graduates. It is not directed at children, and we do not knowingly collect anything from anyone under 16.
If you believe a child has given us information, email [email protected] and we will delete it.
Changes to this policy
When we change something here we change the date at the top. If a change materially affects what we do with your information, we will email everyone on our list and every current student at least 30 days before it takes effect, so that you have time to object or leave.
We will not apply a new purpose retroactively to data we already hold without asking you first.
Contact
Wellseen
California, United States. We have no public postal address; write to the email above and we will answer anything you would have posted.
Wellseen operates from California, and this policy is governed by California law. Where you live somewhere that gives you stronger rights, those laws apply too: nothing here takes away a right you have under your own country's law.