ACADEMY OF HUMANOPATHY Privacy Policy Humanopathy Ltd · humanopathy.com Last updated: April 2026 Applies to: www.humanopathy.com and www.humanopathy.ai |
DATA CONTROLLER Humanopathy Ltd, trading as the Academy of Humanopathy. Registered address: 340 West End Lane, London, NW6 1LN, United Kingdom. Data protection enquiries: info@humanopathy.com |
SUPERVISORY AUTHORITY Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Tel: 0303 123 1113. Website: ico.org.uk. You have the right to lodge a complaint with the ICO at any time. |
- INTRODUCTION
This Privacy Policy explains how Humanopathy Ltd (trading as the Academy of Humanopathy, “we”, “us”, or “the Academy”) collects, uses, stores, and protects personal data when you use our websites (www.humanopathy.com and www.humanopathy.ai), enrol in our programmes, or otherwise interact with us.
This Policy is issued in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we process data of individuals located in the European Union, the EU General Data Protection Regulation (EU GDPR 2016/679) also applies.
We take your privacy seriously. We will only collect data we need, use it only for the purposes described here, and never sell it to third parties.
- PERSONAL DATA WE COLLECT
2.1 Data you provide directly
When you register for a programme, make an enquiry, or purchase a product, we collect:
- Full name and title
- Email address and telephone number
- Billing and correspondence address
- Professional background and qualifications (for admission purposes)
- Username and password (for your student account)
- Payment information: processed securely via our third-party payment processor. We do not store card details on our servers
- Any information you voluntarily provide in application forms, survey responses, or direct communications
2.2 Data collected automatically
When you visit our websites, we may collect:
- IP address and approximate location
- Browser type and version
- Pages visited, time spent, and navigation paths
- Device type and operating system
- Referring website or search terms
This data is collected through cookies and similar technologies. Please see Section 5 (Cookies) for full details.
2.3 Data from third parties
We may receive personal data about you from third parties in limited circumstances, including from referral partners, social media platforms (where you engage with our content), or accreditation partners such as the Complementary Medical Association (CMA).
- LAWFUL BASIS FOR PROCESSING
Under UK GDPR Article 6, we must have a lawful basis for every type of processing. The table below sets out the basis we rely on for each activity.
Processing Activity | Lawful Basis |
Processing your enrolment and administering your student account | Performance of a contract (Article 6(1)(b)) |
Processing payment for programme fees | Performance of a contract (Article 6(1)(b)) |
Sending programme-related communications (timetables, assessments, results) | Performance of a contract (Article 6(1)(b)) |
Issuing certificates and qualifications | Performance of a contract (Article 6(1)(b)) |
Sending marketing emails to prospective students who have opted in | Consent (Article 6(1)(a)) |
Sending programme updates to existing and former students | Legitimate interests (Article 6(1)(f)): keeping practitioners informed of relevant developments |
Retaining financial and enrolment records | Legal obligation (Article 6(1)(c)): HMRC and Companies Act requirements |
Fraud prevention and website security | Legitimate interests (Article 6(1)(f)) |
Analytics and improving our website and services | Legitimate interests (Article 6(1)(f)) |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights and freedoms. You may request details of this assessment at any time.
- HOW WE USE YOUR DATA
We use your personal data for the following purposes:
- Processing and administering your programme enrolment and student account
- Communicating with you about your programme, assessments, and academic progress
- Processing payments and issuing receipts and invoices
- Issuing certificates, qualifications, and academic transcripts
- Sending you information about programme updates, new courses, and relevant events, where you have opted in or where we have a legitimate interest to do so
- Complying with our legal and regulatory obligations, including accreditation requirements
- Fraud prevention, security monitoring, and protecting our legal rights
- Improving our website, programmes, and student experience through anonymised analytics
We will not sell, rent, or trade your personal data to any third party for their own marketing purposes.
- COOKIES AND TRACKING TECHNOLOGIES
Cookies are small data files placed on your device when you visit our website. We use cookies to improve your experience, analyse site usage, and present relevant content.
5.1 Types of cookies we use
Cookie Type | Purpose and Basis |
Strictly necessary cookies | Essential for the website to function (e.g. login sessions, shopping cart). These do not require your consent. |
Functional cookies | Remember your preferences (e.g. language, region). Require your consent. |
Analytics cookies | Collect anonymised data on how visitors use the site (e.g. Google Analytics). Require your consent. |
Marketing / targeting cookies | Track your activity to deliver relevant advertising. Require your consent. Set by third-party providers. |
5.2 Your cookie choices
When you first visit our website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or manage your preferences by category. You may change your preferences at any time via the cookie settings link in the footer of our website.
You may also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. For guidance, visit www.allaboutcookies.org.
5.3 Third-party cookies
Some cookies are set by third-party services embedded on our pages, including social media sharing features and video platforms. We do not control these cookies. Please refer to the privacy policies of the relevant third parties for details.
- DATA SHARING AND THIRD-PARTY PROCESSORS
We do not sell your personal data. We share it only in the following circumstances:
6.1 Service providers and processors
We engage trusted third-party providers who process data on our behalf. These include:
- Payment processors (e.g. Stripe or equivalent): to process programme fees securely
- Email platform providers: to send programme communications and newsletters
- Website hosting and cloud storage providers: to host our platforms and store data securely
- Video conferencing platforms: to deliver live online sessions
- Learning management system providers: to host course content and student records
All processors are required to process data only on our instructions and to maintain appropriate security measures. We have data processing agreements in place with all processors.
6.2 Accreditation and regulatory bodies
We may share relevant student data with our accreditation partners, including the Complementary Medical Association (CMA), the Hahnemann College of Homeopathy, and the London College of Homeopathy, for the purposes of programme accreditation, qualification verification, and professional membership processing.
6.3 Legal and regulatory disclosure
We may disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by law, or where necessary to protect the rights, property, or safety of the Academy, its students, or others.
6.4 International transfers
Some of our third-party providers operate outside the United Kingdom. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place, including the use of the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses, or transfers to countries with an adequacy decision from the UK Secretary of State. You may request details of the safeguards applicable to any specific transfer by contacting info@humanopathy.com.
- DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Our retention schedule is as follows:
Data Category | Retention Period |
Student enrolment records and academic records | 7 years from the date of completion or withdrawal (HMRC and accreditation requirements) |
Financial records and payment data | 7 years from the relevant financial year end (HMRC requirement) |
Certificate and qualification records | Indefinitely, to support verification requests from employers and regulators |
Marketing data (opted-in contacts) | Until consent is withdrawn, or 3 years of inactivity, whichever is sooner |
Website analytics data | 26 months from collection |
Enquiry and application data (non-enrolled) | 2 years from last contact |
Correspondence and support records | 3 years from resolution |
On expiry of the relevant retention period, data is securely deleted or anonymised. You may request early deletion of your data subject to the conditions in Section 8.
- YOUR RIGHTS UNDER UK GDPR
Under the UK GDPR and Data Protection Act 2018, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at info@humanopathy.com. We will respond within one calendar month.
Right | What It Means |
Right of access | You may request a copy of the personal data we hold about you (a Subject Access Request). |
Right to rectification | You may ask us to correct inaccurate or incomplete personal data. |
Right to erasure | You may ask us to delete your personal data where there is no legitimate reason for us to continue processing it. This right is not absolute. We may be required to retain certain data by law. |
Right to restrict processing | You may ask us to pause processing of your data in certain circumstances, for example while accuracy is disputed. |
Right to data portability | Where processing is based on consent or contract, you may request a copy of your data in a structured, machine-readable format. |
Right to object | You may object to processing based on legitimate interests, including direct marketing. Where you object to direct marketing, we will cease immediately. |
Right to withdraw consent | Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. |
Right to complain | You have the right to lodge a complaint with the ICO at any time. See Section 9 for details. |
We will not charge a fee for handling your request unless it is manifestly unfounded or excessive. We may need to verify your identity before processing your request.
- COMPLAINTS
If you have a concern about how we handle your personal data, please contact us in the first instance at info@humanopathy.com. We will acknowledge your complaint within 5 working days and aim to resolve it within 30 days.
If you are not satisfied with our response, or if you prefer to contact the supervisory authority directly, you may lodge a complaint with the Information Commissioner’s Office (ICO):
INFORMATION COMMISSIONER’S OFFICE Website: ico.org.uk · Telephone: 0303 123 1113 · Post: ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF |
- CHILDREN AND MINIMUM AGE
Our programmes are designed exclusively for qualified medical and health professionals. We require all students to be at least 21 years of age and to hold a recognised professional qualification as a condition of enrolment.
We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have collected data from a person under 21 without appropriate verification, we will delete it promptly. If you have concerns, please contact info@humanopathy.com.
- DATA SECURITY
We implement technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted to and from our website
- Secure, access-controlled storage for student records
- Payment processing via PCI DSS-compliant third-party processors. We do not store card data on our own servers
- Staff access to personal data on a need-to-know basis
- Regular review of security practices and third-party processor agreements
No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.
- CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. When we make material changes, we will notify enrolled students by email and update the “Last updated” date at the top of this document. We encourage you to review this Policy periodically.
Continued use of our website or services after changes have been published constitutes acceptance of the updated Policy.
- CONTACT US
For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data, please contact:
Organisation | Humanopathy Ltd (trading as Academy of Humanopathy) |
Address | 340 West End Lane, London, NW6 1LN, United Kingdom |
info@humanopathy.com | |
Website | humanopathy.com |
This Privacy Policy is governed by the laws of England and Wales.