01
Who this policy covers
This policy applies when you visit OslerMarket, create an account, use our learning and clinical tools, enter an Osler Round, sponsor a round, contact us, or otherwise use our website and related services.
Osler Market is the controller of the personal data described here. We operate from Kampala, Uganda. You can reach us at info@oslermarket.com, by phone or WhatsApp at +256 787 394 119.
02
Information we collect
We collect what is needed to run the service, record learning, support payments, and keep the platform secure.
- Account details: name, email address, password hash, profile photo, phone number, and authentication information from Google if you choose Google sign-in.
- Professional details: specialty, institution, professional category, specialist field, licence or registration number, and verification status.
- Learning activity: courses and cases viewed, saved or completed, quiz results, progress, time spent, streaks, Osler Points, leaderboard position, likes, investigation choices, and clinical discussion contributions.
- Marketplace and event activity: information you submit about jobs, equipment, CME events, resources, inquiries, and shared links.
- Rounds and sponsorships: mobile money number, payment reference, amount, payment status, entry attempts, answers, score, ranking, prize eligibility, sponsor name, organisation, and contact details.
- Uploads and communications: profile images, documents, clinical images, support messages, feedback, and other material you send us.
- Technical information: browser and device information, user agent, page or asset interactions, performance data, cookie identifiers, IP address, and security logs.
Some professional verification details and clinical inputs may be sensitive personal data under Ugandan law. Please provide them only where the feature asks for them.
03
Osler AI and clinical information
Osler AI is an educational and decision-support tool, not a patient record system.
When you use diagnosis, chat, case simulation, summary, quiz, or investigation-feedback features, the text, conversation history, case context, and any image you submit may be sent to an AI provider to generate a response. The current service uses Groq-hosted models. Text may also be processed by Google Gemini or OpenAI to create search embeddings, and search terms may be sent to services such as PubMed/NCBI or WHO ICD-11.
Do not enter a patient's name, phone number, address, medical record number, clear facial image, or any other detail that can identify the patient. You are responsible for obtaining any required permission and for complying with professional confidentiality duties before submitting clinical material.
AI output can be incomplete or wrong. We may retain generated summaries or related technical metadata to provide the feature, improve reliability, and avoid unnecessary repeat processing. We do not use Osler AI as the sole basis for decisions about your account, professional status, payments, or prize eligibility.
04
Why we use information
We use personal data to:
- create and secure accounts, authenticate users, and provide support;
- deliver courses, Osler Files, CME information, resources, AI tools, and personalised progress;
- award points, maintain leaderboards, moderate discussions, and verify professional eligibility;
- process Round entries, sponsorships, payment confirmations, winner records, Expert Reviews, Earnings balances, and mobile-money withdrawals;
- publish and manage jobs, equipment listings, events, and professional content;
- send transactional email or SMS about security, payments, entries, expert contribution deadlines, prizes, and withdrawals;
- measure performance, understand feature use, prevent abuse, investigate incidents, and improve the service;
- comply with law, enforce our terms, and protect users, patients, Osler Market, and the public.
Depending on the context, we process data with your consent, to perform our agreement with you, to comply with a legal obligation, for legitimate platform and security purposes, or on another basis permitted by Uganda's Data Protection and Privacy Act.
05
Names, leaderboard positions, and marketing
By creating an account you consent to OslerMarket using your real name and leaderboard position for marketing and promotional purposes.
This includes displaying your name and rank in public leaderboards, social-media posts, website features, newsletters, round result announcements, and other promotional materials that celebrate learner achievement on OslerMarket. We will use the name you provided at registration and any updates you make to your profile.
If you do not want your name or ranking used in this way, contact us at info@oslermarket.com and we will remove you from promotional materials going forward. Opting out does not affect your account, your points, or your access to the platform.
07
Storage and international processing
Some service providers process or store information outside Uganda. This includes cloud, analytics, authentication, payment, and AI services. Where personal data is processed outside Uganda, we take reasonable steps to use providers and safeguards appropriate to the information and the service being delivered.
Internet services cannot be guaranteed completely secure. We use access controls, encrypted connections, password hashing, restricted administration, and logging, but you should also use a strong password and protect your devices.
08
How long we keep information
We keep account and activity data while your account is active and for as long as reasonably needed to provide the service, resolve disputes, maintain learning and payment records, prevent fraud, and meet legal obligations.
Retention differs by record. Payment, audit, moderation, consent, and security records may be kept longer than ordinary profile content. Public contributions may remain with the discussion or learning material after account closure, but we may remove or de-identify the account link where appropriate.
10
Your choices and rights
Subject to applicable law, you may ask to access, correct, update, block, erase, or receive information about your personal data. You may object to direct marketing and withdraw consent where processing depends on consent.
Start by updating your account or email info@oslermarket.com. We may need to verify your identity. Some records cannot be deleted immediately where they are needed for payments, legal duties, fraud prevention, or the rights of others.
You may also complain to Uganda's Personal Data Protection Office. The governing law includes the Data Protection and Privacy Act.
11
Children
OslerMarket is intended for adults and healthcare trainees who can lawfully use the service. It is not directed to children under 18, and children must not create accounts or submit personal or clinical information without a lawful basis and the involvement of a parent or guardian where required.
12
Changes and contact
We may update this policy as the platform or law changes. We will change the effective date and provide a reasonable notice for material changes, including through the site, account notices, or email where appropriate.
Privacy questions and requests can be sent to info@oslermarket.com or Osler Market, Kampala, Uganda, telephone +256 787 394 119.