1. Introduction

RCPT EPA V2 ("we," "our," or "app") is a medical education assessment application developed and operated by the Royal College of Physicians of Thailand (RCPT). This privacy policy explains how we collect, use, and protect your information when you use our app.

2. Contact Information

• Organization: Royal College of Physicians of Thailand (RCPT)
• Email: privacy@rcpt.org
• Website: www.rcpt.org

3. Information We Collect

3.1 User Account Information

• Full name
• Email address
• Professional role (e.g., faculty, resident)
• Institution/Hospital affiliation
• Medical license number (if applicable)

3.2 Assessment Data

• Educational assessments and evaluations
• Performance records
• Progress tracking data
• Feedback and comments

4. Data Security

We implement appropriate security measures to protect your information:

• Encryption during transmission
• Secure authentication
• Access control and monitoring
• Regular security audits

5. Data Retention and Deletion

5.1 Data Retention

The Royal College of Physicians of Thailand (RCPT) retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, accreditation requirements, and maintain the integrity of training and assessment records.

• Assessment and training records are retained for a minimum of 5 years after completion of residency training or as required by applicable accreditation and regulatory requirements
• Account information is retained while the user account remains active.
• System logs and technical records may be retained for security, auditing, troubleshooting, and legal compliance purposes.
• When personal data is no longer required, it will be securely deleted, anonymized, or destroyed in accordance with applicable laws and organizational policies.

5.2 Data Deletion Requests

Users may request the deletion of their personal data by contacting RCPT through one of the following channels:

• Email: rcptmail@gmail.com
• Phone: 02-716-6744

To process a deletion request, RCPT may require verification of the requester's identity.

Upon receiving a valid request, RCPT will review and process the request within 30 days, unless retention of certain information is required by law, accreditation requirements, dispute resolution, security purposes, or other legitimate obligations.

If some data cannot be deleted due to legal or regulatory requirements, RCPT will inform the user of the reason and retain only the information necessary to comply with such requirements.

6. Contact Us