Privacy Policy

Welcome to Medset (the “Website”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Information We Collect

We may collect and process the following categories of personal data:

• Personal Information: Name, email address, telephone number, postal address, account login details (if applicable), and any other information you voluntarily provide through forms, registrations, or correspondence.
• Technical Information: IP address, browser type and version, device information and operating system, time zone and location (where applicable), pages visited, session duration, and referral URLs.
• Cookies and Tracking Technologies: We use cookies and similar tracking technologies to improve your browsing experience, analyse website traffic, and deliver relevant content. You can control cookies through your browser settings or our site cookie consent settings.

2. How We Use Your Personal Data

We use your personal data to provide, manage, and personalise access to our Website and digital courses; process purchases, course enrolments, and certificates; respond to enquiries and provide customer support; send updates, newsletters, or promotional materials (where consent has been given); analyse usage to improve our services, content, and user experience; detect, prevent, and address security or technical issues; and comply with our legal and regulatory obligations. We do not sell or rent personal data to third parties.

3. Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

• Consent: Where you have explicitly agreed (e.g. to receive marketing emails).
• Contractual necessity: To provide services you have requested or purchased.
• Legal obligation: To comply with applicable laws or regulations.
• Legitimate interests: For purposes such as improving our services, maintaining security, and preventing fraud, provided these interests do not override your fundamental rights.

4. Sharing Your Personal Data

We may share your personal data with service providers who support our operations (e.g. payment processors, hosting providers, learning management systems, analytics platforms, and email services); professional tutors or course authors where necessary to administer your learning activities or certificate validation; regulatory or legal authorities if required by law or to protect our rights; and business transferees in the event of a merger, acquisition, or reorganisation of Medset Ltd. All third parties with access to your data are required to process it securely and only for authorised purposes in line with this Privacy Policy.

5. Data Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections, access controls, and regular security reviews. While we take reasonable precautions, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting obligations. When data is no longer required, it will be securely deleted or anonymised.

7. Your Rights

Under UK data protection law, you have the following rights: access – request a copy of the personal data we hold about you; rectification – request correction of inaccurate or incomplete data; erasure – request deletion of your data, subject to certain conditions; restriction – request that we limit how your data is processed; data portability – request a copy of your data in a structured, machine-readable format; objection – object to processing where we rely on legitimate interests; and withdraw consent – withdraw consent for marketing or other activities at any time. To exercise these rights, please contact us using the details below. We will respond within one month in accordance with the UK GDPR.

8. International Transfers

Your data may be processed or stored by our service providers outside the UK or EEA. Where this occurs, we ensure that appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) are in place to protect your data.

9. Third-Party Links and External Services

Our Website may contain links to third-party websites or embedded services such as video platforms, payment gateways, or analytics tools. We are not responsible for the privacy practices or content of these external services and encourage you to review their individual privacy policies.

10. Automated and AI-Assisted Tools

Some parts of our platform use artificial intelligence to provide learning feedback, analytics, or recommendations. These systems do not make automated decisions that have legal or significant effects on you. All AI-based outputs are intended for educational support only and should not be considered professional or clinical advice.

11. Marketing Communications

You may receive emails about new courses, updates, or offers if you have opted in. You can unsubscribe at any time by clicking the “unsubscribe” link in our emails or contacting us directly. We may still send important non-marketing communications, such as service or security updates.

12. Children’s Privacy

Our services are intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The latest version will always be available on this page, with the “Effective Date” shown at the top. Your continued use of our Website after any update constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our handling of your personal data, please contact us here or by post at Medset Ltd, 12 Bombay House, Whitworth Street, Manchester, M1 3AB. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at www.ico.org.uk