Privacy & Data

Privacy Policy

This Privacy Policy explains how the Academy may collect, use, store and share personal information when you browse the website, submit an enquiry, create a learner account, enrol in a program, complete assessments, request support, or use certificate and institutional services.

Last updated: September 2026
Learners, applicants & website visitors
Healthcare education platform
Complete the highlighted details before publishing

Add the Academy's legal entity, registered address, privacy/support email, applicable jurisdiction, actual analytics tools, payment providers, CRM/form services, LMS/video platforms and retention periods. Do not publish provider names or compliance claims unless they are actually used and verified.

1. Who We Are

This Privacy Policy applies to the website and education services operated by [INSERT LEGAL ENTITY / ACADEMY NAME].

The Academy provides professional education and upskilling for nurses, healthcare assistants, physiotherapy assistants, diagnostic support staff, home healthcare workers and other eligible healthcare-support professionals.

For questions about personal information, contact [INSERT PRIVACY / SUPPORT EMAIL].

2. Information We May Collect

The information we collect depends on how you use our services.

Identity & contact information Name, email address, phone number, country, city and other contact details you provide.
Professional & eligibility information Qualification, role, registration status where relevant, workplace information, experience and course eligibility details.
Account & learning information Login details, enrolled courses, progress, assessment activity, support requests and certificate records.
Transaction information Order details, payment status, invoices or receipts. Full payment-card data is typically handled by the payment provider rather than stored directly by us.
Communications Enquiry messages, counselling requests, email or messaging interactions, feedback and complaint records.
Technical information IP address, browser/device information, page activity, referral source and similar technical data where collected through the website.

3. How We Collect Information

Information may be collected when you:

  • submit a course, counselling, contact or hospital-training enquiry;
  • create an account or update your learner profile;
  • enrol in or pay for a course;
  • upload eligibility or verification documents;
  • complete learning activities, assessments or certificate requirements;
  • contact learner support or provide feedback;
  • use our website, where cookies or similar technologies are enabled;
  • interact with a third-party service integrated into the Academy platform.

4. Why We Use Personal Information

Depending on the context and applicable law, we may use personal information to:

  • respond to enquiries and provide course guidance;
  • assess course eligibility and suitability;
  • create and maintain learner accounts;
  • process enrolments and confirm payments;
  • provide course access and track learning progress;
  • administer assessments and issue or verify certificates;
  • provide learner, technical and institutional support;
  • prevent misuse, fraud and security incidents;
  • improve website performance, learning services and user experience;
  • send service communications and, where permitted, relevant educational or promotional updates;
  • meet accounting, legal, regulatory or record-keeping obligations that apply to us.

5. Qualification & Eligibility Documents

Some programs may require evidence of qualification, professional role or experience before admission or certification. If such documents are requested, we use them only for the relevant verification, admission, compliance or certificate process.

Important: We should collect only the documents reasonably necessary for the stated purpose. Any sensitive identity or professional documentation should be stored with appropriate access controls and retained only as long as needed for the relevant purpose or legal requirement.

6. Payments & Financial Information

Payment transactions may be processed through third-party payment providers. Those providers may collect payment-card, banking, identity or verification information under their own privacy policies.

The Academy may receive and store transaction information such as payment status, amount, date, transaction/reference number, invoice details and refund status where required for enrolment, accounting or learner support.

Payment provider(s): [INSERT ACTUAL PROVIDER(S) BEFORE PUBLISHING]

7. Cookies, Analytics & Similar Technologies

The website may use cookies or similar technologies for essential functionality, security, preferences, analytics, performance or marketing, depending on the tools actually enabled.

Where required, users should be given appropriate cookie information and choices before non-essential cookies are activated.

Analytics / advertising tools currently used: [LIST ONLY VERIFIED TOOLS, OR REMOVE THIS LINE]

8. Email, Phone, WhatsApp & Other Communications

If you submit an enquiry or enrol in a program, we may contact you about the requested service, eligibility, payment, account access, assessments, certificate processing or learner support.

Promotional messages should be sent only where permitted by applicable law and your preferences. You may use the unsubscribe mechanism provided in marketing email, or contact us to request that promotional communications stop.

Service messages that are necessary for an active enrolment or account may still be sent where appropriate.

9. When We May Share Information

We do not need to sell personal information in order to operate the Academy. Information may be shared with service providers only where reasonably necessary to operate the website and education services.

Examples may include:

  • learning-management and website hosting providers;
  • payment processors;
  • email, messaging, CRM or form platforms;
  • video, webinar or assessment providers;
  • certificate or verification service providers;
  • professional advisers, auditors or authorities where legally required;
  • institutional partners where necessary for an agreed training arrangement and properly disclosed.

Actual provider list / sub-processors: [ADD VERIFIED PROVIDERS IF YOU WANT THEM DISCLOSED HERE]

10. International Data Transfers

Some service providers may host or process information in countries other than the learner's home country. Where applicable law requires safeguards for international transfers, the Academy should use an appropriate transfer mechanism or provider arrangement.

The final wording for this section should reflect the Academy's actual legal entity, operating countries and service-provider locations.

11. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including learner support, certificate verification, financial records, dispute handling, security and applicable legal obligations.

Different records may require different retention periods. The final retention schedule should be documented internally and reflected here where required.

Enquiry data [INSERT RETENTION PERIOD]
Learner/account records [INSERT RETENTION PERIOD]
Payment/accounting records [INSERT RETENTION PERIOD REQUIRED BY YOUR JURISDICTION]
Certificate verification records [INSERT RETENTION APPROACH]

12. Data Security

We should use reasonable administrative, technical and organisational measures to protect personal information against unauthorised access, loss, alteration or disclosure.

No internet-based service can guarantee absolute security. Users should protect account passwords, avoid sharing login credentials and contact us promptly if they believe their account or personal information has been compromised.

13. Your Choices & Privacy Rights

Depending on where you live and the law that applies, you may have rights concerning your personal information. These may include rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent or information about processing.

These rights are not identical in every jurisdiction and may be subject to legal exceptions, identity verification and record-retention requirements.

To make a privacy request, contact [INSERT PRIVACY / SUPPORT EMAIL].

14. Children & Age Requirements

Programs are intended for learners who meet the stated course eligibility requirements. If a program may lawfully accept learners below the age of majority, the Academy should implement any consent, safeguarding and privacy measures required by the applicable jurisdiction.

Minimum age / special rule: [INSERT ONLY AFTER FINALISING ADMISSION POLICY]

15. External Websites & Third-Party Services

Our website may contain links to external websites or embedded third-party services. Their privacy practices are governed by their own policies. We encourage users to review those policies when leaving the Academy website or using an external service.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technology, providers, legal obligations or business practices change. The latest revision date should appear at the top of the page.

Where appropriate, material changes may also be communicated through the website, learner account or another suitable channel.

17. Contact Us About Privacy

For privacy questions or requests, contact:

  • Legal entity: [INSERT LEGAL ENTITY]
  • Registered address: [INSERT REGISTERED ADDRESS]
  • Privacy / support email: [INSERT EMAIL]
  • Applicable jurisdiction: [INSERT JURISDICTION]

Questions about your information?

Contact the Academy if you want to ask how your information is used, correct your account details, update communication preferences, or make a privacy-related request.

Privacy requests
Account corrections
Communication preferences
Learner support
Drafting note: this is a website-ready privacy-policy framework tailored to the proposed healthcare education platform. It intentionally does not claim compliance with a specific privacy regime or name service providers that have not been confirmed. Final wording should be matched to the Academy's actual legal entity, operating countries, systems, vendors and data practices before publication.