Privacy Policy

This Privacy Policy explains how RegenerateMSKClinic ("we", "us") collects, uses and protects your personal data when you use our education platform. We are committed to the UK GDPR and the Data Protection Act 2018.

1. Data we collect

• Account data: name, email address, role and password (stored hashed).
• Learning data: enrolments, course progress, quiz attempts, assignment submissions and certificates.
• Payment data: transaction records and amounts (card details are processed by our payment provider, not stored by us).
• Technical data: IP address, device and browser information, and audit logs for security.

2. How we use your data

• To provide the platform, deliver courses and issue certificates.
• To process purchases and prevent fraud.
• To send service notifications and respond to support requests.
• To comply with legal obligations and protect our legitimate interests.

3. Lawful bases

We rely on performance of a contract (to deliver the service you purchase), legitimate interests (security and improvement), consent (where required, e.g. non-essential cookies) and legal obligation (e.g. financial records).

4. Data retention & location

Personal data is retained only as long as necessary, then deleted or anonymised. Data is hosted within the UK/EU region in line with UK GDPR residency requirements.

5. Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your data. You can exercise access and erasure directly from your profile, or see our GDPR Policy.

6. Contact

For privacy questions or to exercise your rights, contact us via the contact page.