Privacy policy
Last updated 6 September 2026
We collect as little as we can, say plainly what we do with it, and never sell it. This policy explains what we collect, why, and the choices you have.
What we collect
Account details (name, email, password — stored only as a secure hash), order and payment records, programme enrolment and progress, and your communication and consent preferences.
With your permission, we also collect privacy-respecting analytics about how the site is used. We never collect diagnoses, clinical notes, or free-form health information — please don't send them to us.
How we use it
To deliver what you buy, run programmes and events, send receipts and service messages, and — only with your consent — newsletters and marketing.
Your choices and rights
You can change communication and consent preferences in your account at any time, request a copy of your data, or ask us to delete your account. Withdrawing consent stops optional collection from that point forward.
Who sees your data
Staff access is role-based and logged. Payment details are handled by our payment provider; we store only confirmation references. We never sell or rent personal data.
This is a draft prepared for review. It requires approval by a qualified legal adviser before public launch.