Who we are
The Major Incident Simulator is provided by The Pre-Hospital Classroom, which is the data controller for the personal data described here. Contact us at thomas.downie@theprehospitalclassroom.co.uk.
What we collect
- Free trial requests: your name, email address and, if you give it, your organisation.
- Contact form and bug reports: your name, email address, organisation and the message you send.
- Instructor sessions: the instructor's name and organisation, the names instructors enter for their learners, and learners' exercise results (scores, timings and decisions) when they are saved to a training record.
- Administrator accounts: email address and password (stored by our authentication provider in hashed form).
- Usage data: anonymous page-view statistics. These do not use cookies and do not identify you.
The simulator is a training tool. Please do not enter real patient information or details of real incidents.
How we use it
- To issue and validate access codes and trials (performance of a contract).
- To run instructor-led sessions and show learners' results to their instructor (performance of a contract).
- To answer enquiries and fix reported problems (legitimate interests).
- To understand how the site is used and keep it secure (legitimate interests).
We do not sell personal data and we do not use it for advertising.
Storage on your device
The simulator stores your sign-in state, preferences and exercise progress in your browser's local storage so an exercise survives a page reload. This stays on your device and you can clear it at any time from your browser settings. We do not use advertising or tracking cookies.
Service providers
We use the following providers to run the service. They process data on our behalf:
- Vercel — website hosting and cookieless analytics.
- Supabase — database and administrator authentication.
- Resend — delivery of emails sent from the site.
- Mapbox — map imagery; your browser requests map tiles directly from Mapbox.
- Google Fonts — typefaces; your browser requests them directly from Google.
- AI model providers via the Vercel AI Gateway — radio messages you type to the simulated control room, with a summary of the exercise state, are sent to an AI model to generate the reply.
- Shopify — purchases are completed in our Shopify store, which handles payment under its own privacy policy. We never see your card details.
Some of these providers process data outside the UK. Where they do, transfers are covered by the safeguards those providers put in place, such as the UK International Data Transfer Addendum.
How long we keep it
We keep personal data only for as long as it is needed for the purposes above. You can ask us to delete your data at any time and we will do so unless we are required by law to keep it.
Your rights
Under UK data protection law you have the right to access, correct, delete or restrict the use of your personal data, to object to its use, and to receive a copy of it. To exercise any of these rights, email thomas.downie@theprehospitalclassroom.co.uk. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.