Privacy Policy
Effective Date: 29th March 2023
This Privacy Policy explains how your personal data is collected, used, and protected when you visit or interact with www.medefine.org, a website owned and operated by:
-
Medefine Education Group LTD (Company No. 13301127)
Registered Office: Office, 119 Regus, 16 Upper Woburn Place, London, WC1H 0AF
and its official academic and delivery partner:
-
Health Creation Group LTD (Company No. 13876539)
Registered Office: Flat 182 South Block County Hall, 1 B Belvedere Road, London, SE1 7GE
Together, we are committed to protecting your privacy and complying with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controllers)
Depending on the service or activity, either Medefine Education Group LTD or Health Creation Group LTD may act as:
-
Data Controller: Responsible for determining the purposes and means of processing your personal data.
-
Data Processor: Acting on behalf of the other company for the purposes of delivering services.
If you have questions about which entity is processing your data, please contact info@medefine.org.
2. What Data We Collect
We may collect and process the following categories of personal data:
-
Identity Data: Full name, date of birth, nationality
-
Contact Data: Email address, phone number, postal address
-
Education Data: School/university name, academic records, UCAT/IB/GPA scores
-
Payment Data: Billing address, payment method (processed securely via third-party providers)
-
Usage Data: IP address, browser type, access times, referring website
-
Marketing Preferences: Consent to receive updates, newsletters, or marketing
We do not collect or store special category data (e.g. health or biometric data) unless you explicitly provide it and consent to its processing.
3. How We Use Your Data
We process your personal data for the following lawful purposes:
Purpose
Lawful Basis
To register you for programmes, internships, or consultations
Contract
To communicate with you regarding services or updates
Legitimate Interest / Consent
To issue invoices and process payments
Legal Obligation / Contract
To improve our website, content, and services
Legitimate Interest
To send marketing communications (only with your consent)
Consent
You can opt out of marketing communications at any time by emailing us at info@medefine.org.
4. Sharing Your Data
Your data may be shared internally between Medefine Education Group LTD and Health Creation Group LTD when necessary to deliver a service you have requested. We may also share data with trusted third-party service providers, including:
-
Payment processors (e.g., Stripe, PayPal)
-
Email marketing platforms (e.g., Mailchimp)
-
Booking and CRM tools
-
Web analytics platforms (e.g., Google Analytics)
We ensure that all third parties processing data on our behalf comply with UK GDPR and only use your data as instructed.
We do not sell or rent your data to third parties.
5. International Data Transfers
We primarily store and process your data in the United Kingdom. If we use any service providers located outside the UK, we ensure appropriate safeguards are in place (e.g., adequacy decisions, standard contractual clauses) to protect your data.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including:
-
Student and client records: Up to 6 years (for legal/tax purposes)
-
Marketing data: Until you unsubscribe or withdraw consent
-
Inactive user data: Reviewed and securely deleted after 24 months of inactivity
7. Your Rights
You have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Request deletion of your data (where legally permissible)
-
Object to or restrict processing of your data
-
Withdraw consent at any time
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise your rights, please contact us at info@medefine.org. We will respond within 30 days.
8. Cookies
Our website uses cookies and similar technologies to improve your experience and analyse site traffic. For more details, please see our Cookie Policy.
9. Data Security
We implement appropriate technical and organisational measures to protect your data, including secure servers, encryption, and access controls. However, no system is 100% secure and we cannot guarantee absolute security.
10. Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please contact:
📧 info@medefine.org
📍 Medefine Education Group LTD
Office, 119 Regus, 16 Upper Woburn Place, London, WC1H 0AF
You may also contact Health Creation Group LTD at education@medefine.org