Legal

Privacy policy

Last updated: on publication.

Template — awaiting review. This page is a starting point drafted for a UK online education business. It is not legal advice. Have it checked and tailored before the site goes live, then remove this notice.

This policy explains what personal data Manchester Medical Academy (“we”) collects when you use this website, why we collect it, and what rights you have over it. We are the data controller for that information.

What we collect

Registration and payment details. When you enrol on a course, your name, email address and billing details are collected and processed by Stripe, our payment provider. Card numbers are never sent to or stored on our servers.
Correspondence. If you email us, we keep the message and our reply so we can deal with your enquiry and any follow-up.
Technical data. Our hosting provider records standard server information such as IP address, browser type and pages requested, in order to deliver the site securely and diagnose faults.

Why we use it

To take payment and give you access to the course you purchased (contract).
To answer your enquiries (legitimate interests).
To keep financial records required by law (legal obligation).
To keep the website secure and working (legitimate interests).

Who we share it with

We share data only with the providers needed to run the service — currently our payment processor (Stripe) and our hosting provider (Vercel). Both act on our instructions under their own data protection terms. We do not sell personal data or share it for advertising.

How long we keep it

Enrolment and transaction records are kept for six years to meet UK accounting requirements. Correspondence is kept for as long as needed to handle the matter and a reasonable period afterwards.

Cookies

This site does not use advertising or analytics cookies. Stripe sets cookies necessary to process payments securely and to prevent fraud when you go through checkout.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or erase it, object to or restrict how we use it, and ask for it to be ported elsewhere. To exercise any of these, email info@manchestermedicalacademy.uk. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

Contact

Manchester Medical Academy, Manchester, United Kingdom. Email info@manchestermedicalacademy.uk.