EM Learning Centre

Privacy

Effective date: 16 May 2026 1. Who we are EM Learning Centre at emlearningcentre.co.uk is operated by EM Learning Centre of [registered address — please complete in Legal…

Effective date: 16 May 2026

1. Who we are

EM Learning Centre at emlearningcentre.co.uk is operated by EM Learning Centre of [registered address — please complete in Legal Pages settings] (“we”, “us”). We are the data controller for the personal data described in this policy. Contact us about anything related to data protection at info@emlearningcentre.com.

2. The personal data we collect

We collect and process the following categories of personal data.

2.1 Information you give us

  • Account information: your name, email address, password (stored as a one-way hash), country, and any optional profile fields you complete.
  • Subscription and payment information: the plan you purchase, the date of purchase, and payment confirmation tokens. Card details are handled by Stripe and are not stored on our servers.
  • Communications: messages you send us by email, contact form, in-app chat, or social channels, and our replies.

2.2 Information collected automatically

  • Learning activity: the lessons you open, your quiz attempts and answers, OSCE activity, scores, time spent and progress flags. This is used to provide the service (so you can resume where you left off, see your scores, etc.) and to maintain the integrity of timed assessments.
  • Technical data: IP address, browser and device type, referring website, pages visited, and similar information collected through server logs and cookies. See our Cookie Policy for the cookies we use.

2.3 Information from third parties

  • If you register or sign in via a third-party identity provider (for example Google), we receive basic profile details from that provider in line with its own privacy notice and your settings with them.

3. Why we process your data (lawful bases under UK GDPR)

We rely on the following lawful bases under Article 6 UK GDPR:

  • Performance of a contract: to deliver the subscription you purchased, give you access to content, record your progress and provide customer support.
  • Legitimate interests: to operate, secure and improve the Site, prevent fraud and abuse, monitor for cheating in assessments, and produce aggregated, non-identifying analytics. We balance these interests against your rights and only rely on this basis where it is appropriate.
  • Consent: for optional analytics or marketing cookies, and for any optional marketing emails. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
  • Legal obligation: to comply with tax, accounting, and other statutory record-keeping requirements in the UK.

4. How we use your data

We use the data we collect to provide, manage and improve our services, process transactions and manage subscriptions, personalise your learning experience, respond to enquiries and provide customer support, send transactional communications about your account, send optional updates and offers (where you have opted in — you can unsubscribe at any time), and protect the Site from fraud and security threats.

5. Who we share your data with

We do not sell, rent, or trade your personal data. We share it only with the service providers and partners that help us run the Site:

  • Hosting: our hosting provider hosts the Site and its database. Reasonable security measures are in place at the hosting level (encryption in transit, daily backups, access controls).
  • Payments: Stripe processes card payments. Stripe is a separate data controller for the payment information you provide to it; see Stripe’s own privacy notice for details.
  • Email delivery: transactional emails (account confirmation, password reset, receipts) are delivered by our email provider.
  • AI services: we use Anthropic (Claude) and OpenAI to help generate lesson content, OSCE scenarios and illustrative images. These services receive only the prompt text we send them to produce content; they do not receive your account details, your quiz answers or any personal data you submit through the Site.
  • Analytics: if you consent to analytics cookies, anonymised usage data may be sent to a privacy-friendly analytics provider so we can understand which lessons are most used and where to improve the platform.
  • Legal compliance and business transfers: we may disclose data where required by law, regulation, court order, or to protect our rights or those of our users. In the event of a merger, sale or restructuring, data may be transferred to the new entity under the same protections.

6. International transfers

Some of our service providers (including Stripe, Anthropic and OpenAI) are based in or process data in the United States. Where personal data is transferred outside the United Kingdom we rely on appropriate safeguards approved by the UK Information Commissioner’s Office (ICO), typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, together with supplementary measures where required.

7. How long we keep your data

  • Account and activity data: for as long as your account is active and for a reasonable period afterwards to handle queries, refunds and disputes (typically 24 months after last activity).
  • Transactional records: retained for six years to comply with UK tax and accounting law.
  • Support correspondence: typically 24 months from the last message.
  • Server and security logs: typically up to 90 days unless retained longer for an investigation.

8. Your rights

Under UK GDPR you have the right to:

  • access your personal data and obtain a copy;
  • have inaccurate or incomplete data corrected;
  • request erasure of your data, in the circumstances allowed by law;
  • restrict or object to processing in certain circumstances;
  • request a copy of data you provided to us in a portable format;
  • withdraw consent at any time where we rely on it;
  • complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you are not satisfied with how we handle your data.

To exercise any of these rights, email info@emlearningcentre.com. We will respond within one month.

9. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, hashed passwords, access controls on the database, and regular software updates. No online system is perfectly secure but we take security seriously and respond promptly to any suspected incident.

10. Third-party links

The Site may contain links to third-party sites and resources (RCEM, NICE, BMJ, journal articles and similar). We are not responsible for the privacy practices of those sites; please review their own privacy notices before providing personal information.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on the Site and the effective date above will be revised. We encourage you to review this page periodically.

12. Contact us

For any question about this Privacy Policy or your personal data, contact us at info@emlearningcentre.com.