docbray.com Legal

Privacy Policy

The DocBray Foundation is committed to protecting your privacy. This policy explains what we collect, how we use it, and the rights you have.

Effective · January 24, 2025 Last updated · June 24, 2026

Our commitment to your privacy

The DocBray Foundation (“we,” “our,” or “us”) is a volunteer mentorship effort led by Dr. Christopher L. Bray. We are committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or work with us during mentorship.

Information we collect

We collect only what we need to respond to you and to mentor effectively:

  • Information you send us: when you use our contact form, we collect your name, email address, and the message you write. If you choose to share more during mentorship — by email or otherwise — we receive whatever you send.
  • Academic and professional materials: if you share them with us, this may include your specialty and training level, CV, transcripts, personal statements, letters, evaluations, and program rankings. You decide what to share.
  • Technical information: like any website, ours is reached through a web request that includes your IP address and basic browser/device details. Our hosting provider processes these in standard server logs for security and reliability.

How we use your information

  • To respond to your questions and provide mentorship, guidance, and feedback.
  • To provide and improve our educational resources and tools.
  • To understand, in aggregate, how the site is used so we can make it better.
  • To keep the site secure and to meet legal obligations.

We do not use your information for advertising, and we do not send marketing email without your consent.

Data security

We treat anything you share with care. Communications and materials are protected in transit using industry-standard encryption, and access is limited to people who genuinely need it for your mentorship.

We rely on reputable service providers and handle clinical or academic materials in line with the privacy standards of HIPAA and FERPA. No method of transmission or storage is ever perfectly secure, but we take reasonable, ongoing measures to protect your information.

Academic records and FERPA

Any academic materials you submit — residency applications, transcripts, letters of recommendation, personal statements, evaluations, program rankings, and similar education records — are handled with the same level of confidentiality as sensitive personal records, consistent with the Family Educational Rights and Privacy Act (FERPA).

Your rights regarding academic materials

  • Inspect and review the education records we hold for you.
  • Request amendment of records you believe are inaccurate or misleading.
  • Control disclosure: we will not share personally identifiable information from your education records without your written consent, except where the law permits or requires it.

We will never share your academic materials for marketing or commercial purposes, or for any use unrelated to your educational and professional development, without your explicit written consent.

Information sharing

We share information only in narrow circumstances:

  • Service providers who help us operate — for example, our website host (Cloudflare), the messaging service that delivers contact-form submissions to us (Telegram), and our email provider (Microsoft 365). They process information only to provide their service.
  • With your direction — for example, sharing your application materials with a program at your request.
  • When required by law, or to protect the rights, property, or safety of the Foundation or others.

Anything we post publicly, including on social media, will never reveal your personal or identifying information without your specific permission.

Cookies and analytics

This site does not use advertising cookies or third-party cross-site tracking. If site analytics are enabled, we use Cloudflare Web Analytics, which is privacy-first and does not use cookies or collect personal data — it only helps us understand aggregate traffic. Our host also keeps standard, short-lived server logs for security and performance.

Your rights

You have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate information.
  • Request deletion of your information, subject to legal requirements.
  • Opt out of any optional communications at any time.
  • Withdraw consent for processing where applicable.

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights, including the right to know what personal information we collect and to request its deletion. To exercise any of these rights, just contact us.

Data retention

We keep your information only as long as needed for the purposes described here, or as required by law. When it is no longer needed, we securely delete or anonymize it.

Children’s privacy

Our services are intended for medical trainees and professionals and are not directed to individuals under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. When we do, we will revise the “Last updated” date above. Significant changes will be made clear on this page.

Contact us

If you have any questions, concerns, or requests about this policy or your information, please reach out through the contact form — we read every message.

Contact the Foundation