Effective Date: March 6, 2025
INTRODUCTION
Medical English Courses is committed to protecting the privacy of its customers and ensuring compliance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. This Privacy Policy outlines how we collect, use, store, and protect your personal data when you interact with our website, purchase our courses, or use our services.
1. DATA CONTROLLER
DATA STORAGE LOCATION
Medical English Courses acts as the Data Controller for the personal data collected through our website and services. If you have any questions about this policy or how your data is handled, please contact us at:
Email: admin@medenglishcourses.com
2. PERSONAL DATA WE COLLECT
We collect only the personal data necessary for the provision of our services. This includes:
- Contact Information: Name, email address, phone number.
- Account Information: Username and password.
- Payment Information: Billing address and payment details (processed securely by third-party payment providers).
- Course Preferences: Selected courses, subject areas of interest.
- Technical Data: IP address, browser type, and activity on our website (collected via cookies).
3. HOW WE USE YOUR PERSONAL DATA
We collect and process your personal data for the following purposes:
- To provide access to purchased courses and manage your account.
- To communicate with you regarding course updates, technical support, or customer service inquiries.
- To issue certificates of completion.
- To comply with legal obligations under Irish law.
- To send marketing communications (only with your explicit consent).
4. LEGAL BASIS FOR PROCESSING
We process your personal data based on one or more of the following legal grounds:
- Performance of a contract: To provide you with access to purchased courses.
- Consent: For sending marketing communications (you can withdraw consent at any time).
- Legal obligation: To comply with applicable laws and regulations.
- Legitimate interests: For improving our services and ensuring website security.
5. DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:
- Payment records are retained for tax compliance purposes.
6. SHARING OF PERSONAL DATA
We do not sell or share your personal data with third parties except:
- With trusted service providers (e.g., payment processors) who assist in delivering our services.
- When required by law or to comply with legal processes.
- All third parties are contractually obligated to protect your data in compliance with GDPR.
7. YOUR RIGHTS
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data held by us.
- Right to Rectification: Correct inaccurate or incomplete information.
- Right to Erasure (“Right to Be Forgotten”): Request deletion of your personal data where it is no longer needed for its original purpose.
- Right to Restrict Processing: Limit how we process your data in certain circumstances.
- Right to Data Portability: Obtain a copy of your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.To exercise these rights, please contact us at admin@medenglishcourses.com. Proof of identity may be required.
8. DATA SECURITY
We implement appropriate technical and organizational measures to ensure the security of your personal data against unauthorized access, loss, or misuse. These measures include encryption, pseudonymization, secure servers, and regular security audits.
9. COOKIES
Our website uses cookies to enhance user experience and analyze website traffic. Cookies are small text files stored on your device. You can manage cookie preferences through your browser settings.
For more details on how we use cookies, refer to our Cookie Policy.
10. INTERNATIONAL DATA TRANSFERS
If we transfer your personal data outside the European Economic Area (EEA), we will ensure that adequate safeguards are in place as required under GDPR (e.g., Standard Contractual Clauses).
11. COMPLAINTS
If you believe that we have violated your rights under GDPR or Irish law, you have the right to lodge a complaint with the Irish Data Protection Commission:
- Website: www.dataprotection.ie
- Phone: +353 57 8684800
12. CHANGES TO THIS POLICY
We reserve the right to update this Privacy Policy at any time in response to changes in legal requirements or business practices. Updates will be posted on this page with a revised “Effective Date.”
By continuing to use our services after changes are made, you accept the updated policy.
This Privacy Policy ensures compliance with GDPR and Irish Data Protection Act 2018 while safeguarding user privacy effectively.