Privacy policy

1. Introduction
Welcome to Primary Care Learning CIC ("we", "our", or "us"). We are committed to protecting and respecting your privacy.
This policy explains how we collect, use, and protect the personal data of our subscribers, facilitators, and website visitors. It applies to your use of our website primarycarelearning.org.uk and our educational services (including PBSGL).

2. Who We Are
Legal Name: Primary Care Learning CIC
Legal Structure: Community Interest Company (CIC) registered in England & Wales.
Company Number: 16903588
Registered Office: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF
Data Controller: Primary Care Learning CIC is the "Data Controller" for the purposes of the UK GDPR.

3. The Data We Collect
We collect information to provide our educational services. This may include:
Identity Data: Name, Job Title, Professional Registration Number (e.g., GMC, NMC, GPhC number).
Contact Data: Practice/Work address, email address, telephone numbers.
Transaction Data: Details of payments (via Stripe) and subscription status. Note: We do not store your full card details; these are handled securely by Stripe.
Educational Data: Records of PBSGL modules completed, groups attended, and feedback provided.
Technical Data: IP address, browser type, and usage data when you visit our website.

4. How We Use Your Data
We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:
Performance of Contract: To register you as a subscriber, provide access to educational modules, and process your payments.
Legitimate Interests: To manage our relationship with you, improve our services, and report on educational uptake to our stakeholders.
Legal Obligation: To comply with tax and accounting laws (e.g., HMRC reporting).

5. Who We Share Your Data With
We do not sell your data. We may share your data with trusted third parties who assist us in operating our service:
Improval Ltd: Our IT and website service provider who hosts our database and platform. They act as a Data Processor and process data strictly under our instructions.
NHS Education for Scotland (PBSGL): We may share anonymised or aggregate data regarding module usage for quality assurance and reporting purposes.
Stripe: Our payment processor for handling subscription fees.
Facilitators: Your local small-group facilitator will have access to your contact details to organise meetings.

6. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. Our website database is hosted by Improval Ltd, who adhere to ISO 27001 information security standards.

7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights
Under the UK GDPR, you have rights including:
Right of Access: Request a copy of the data we hold about you.
Right to Rectification: Ask us to correct wrong data.
Right to Erasure: Ask us to delete your data (where we do not have a legal reason to keep it).
To exercise any of these rights, please email us at: admin@primarycarelearning.org.uk

9. Contact Us
If you have any questions about this privacy policy, please contact the Directors at our registered office or via the email above.