Legal
Privacy policy
What personal data we hold, why we hold it, how long we keep it and how to use your rights. Our free tools keep what you type in your own browser.
Who we are and what this privacy policy covers
This is the Healthcare Practise UK privacy policy. It explains how we handle personal data on this website, uk.healthcarepractise.com, and on our course portal, portal.healthcarepractise.com, where you buy and take courses. We are the controller of the personal data described here. You can contact us about anything in this policy at support@healthcarepractise.com.
Healthcare Practise UK is an independent online CPD and information provider for UK healthcare professionals. We are not affiliated with, approved by or endorsed by any regulator, including the GMC, NMC, HCPC, GDC, GPhC, GOC, GOsC, GCC and Social Work England, or by the NHS. We do not share your information with any regulator, employer or panel. If you choose to send your certificate or reflections to them, that is your decision and their own privacy notice then applies.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The terms and conditions explain the rules for buying and using courses.
Free tools: your entries stay in your browser
The free tools on this site, such as the reflective statement builder, the remediation readiness check, the testimonial request generator and the CPD and revalidation tracker, run entirely in your web browser. What you type is saved in your browser's local storage on your own device so you can come back to it. It is not sent to us, and we cannot see it, recover it or delete it for you.
- To remove your entries, use the clear or delete button in the tool, or clear this site's data in your browser settings.
- On a shared or work computer, clear your entries when you finish, or use a private browsing window.
- When you export a PDF or print, the file is created on your device. Where it goes after that is up to you.
Reflections and timelines can contain sensitive details about a concern or your health. Please do not enter patient names or anything that could identify a patient, colleague or complainant. Use initials or neutral descriptions, as you would in any reflective account.
Personal data we collect
When you buy and take a course on the portal
- Account details: your name, email address and a password, which is stored in encrypted (hashed) form.
- Order and billing details: billing name and address, email, the courses you bought and the order date and amount.
- Learning records: course progress, assessment answers and scores, completion dates and the certificates issued to you. Certificates show the name you give us, so please make sure it is correct.
- Payment: card payments are handled by our payment provider. We do not see or store your full card number.
When you contact us
Your email address, your message and anything you choose to attach. Please share only what we need to help you.
When you browse this site
Like any website, our hosting servers record basic technical data such as IP address, browser type and the pages requested. This is used for security and to keep the site working. Course prices on this site are fetched from the portal's product catalogue and contain no personal data. Our fonts are hosted on our own server, so loading a page does not send your data to a font provider.
Why we use your data and our lawful bases under UK GDPR
| What we do | Lawful basis |
|---|---|
| Create your account, process your order, give you course access and issue certificates | Contract |
| Keep order and payment records for tax and accounting | Legal obligation |
| Answer support requests and review refund requests | Contract and legitimate interests |
| Protect the site and portal from fraud, misuse and attacks | Legitimate interests |
| Send marketing emails, if you have opted in | Consent, which you can withdraw at any time |
We do not sell your personal data. We do not use it for automated decisions that have legal or similarly significant effects on you.
Cookies and similar technologies
The portal uses cookies that are strictly necessary to run a shop and a learning platform: keeping your basket, keeping you logged in and protecting forms. These do not need consent under the Privacy and Electronic Communications Regulations 2003.
The free tools use your browser's local storage, as explained above, only to save your own entries on your device. This website does not use advertising cookies. If we add analytics or any other non-essential cookies, we will update this policy first and ask for your consent where the law requires it.
Who we share data with
We share personal data only with service providers who help us run the site and portal, and only as far as they need it:
- website and portal hosting providers;
- our payment provider, to take payment and prevent fraud;
- email delivery services, to send order confirmations and replies to your messages.
They act on our instructions under contracts that require them to keep your data secure. We may also disclose data where the law requires it. Some providers may process data outside the UK. Where they do, we rely on the safeguards UK GDPR allows, such as UK adequacy regulations or the approved international data transfer agreements.
How long we keep your data
- Account and learning records, including certificates: while your account is open, so you can download your certificates again. If you ask us to close your account, we delete or anonymise these records unless we need to keep them for a reason below.
- Order and payment records: for as long as UK tax and accounting law requires.
- Support emails: for as long as needed to deal with your request and any follow-up.
- Server logs: for a short period, for security purposes.
Tool entries are never on our systems, so they stay on your device until you clear them.
Your rights
Under UK GDPR you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected, including the name on a certificate;
- ask us to delete your data;
- ask us to restrict how we use it;
- object to processing based on legitimate interests;
- receive data you gave us in a portable format;
- withdraw consent to marketing at any time.
Email support@healthcarepractise.com or use the contact page. We may need to confirm your identity first. We reply within one month, as UK GDPR requires, and tell you if a request is complex and needs longer. Some rights have limits; for example, we must keep certain order records by law.
If you are unhappy with how we have handled your data, please tell us first so we can try to put it right. You can also complain to the Information Commissioner's Office (ICO), the UK data protection regulator.
Security and changes to this policy
The site and portal use encrypted connections (HTTPS). Access to customer records is limited to people who need it to support you. No system is perfectly secure, so please use a strong, unique password for your portal account and tell us at once if you think it has been misused.
Our courses are for adult healthcare professionals and are not aimed at children. We may update this policy when our services or the law change. The date it was last reviewed is shown on this page. Common questions about the courses themselves are answered in the FAQ.
Frequently asked questions
Can you see what I type into the reflective statement builder?
No. The free tools store your entries in your own browser on your own device. Nothing is sent to us, so we cannot read, recover or delete those entries.
Do you tell my regulator or employer that I bought a course?
No. We do not share your details with any regulator, employer or panel. You decide whether to send them your certificate or other evidence.
Do you store my card details?
No. Card payments are handled by our payment provider. We receive confirmation that you paid, but never your full card number.
How do I get a copy of my data or have it deleted?
Email support@healthcarepractise.com from the address on your account and say what you need. We reply within one month. Some order records must be kept for tax and accounting purposes, and we will explain what we keep and why.
My name is wrong on my certificate. Can you fix it?
Yes. You have the right to have inaccurate data corrected. Contact support with your order details and the correct name.
Who can I complain to about how my data is used?
Please contact us first so we can try to resolve it. You also have the right to complain to the Information Commissioner's Office (ICO).