PRIVACY NOTICE

Pattern Health Education Ltd

Last updated: 21 September 2026

Pattern Health Education Ltd is committed to protecting your personal information and respecting your privacy.

Pattern Health Education Ltd is the controller of personal information described in this Privacy Notice, except where we expressly act as a processor on behalf of another organisation.

Registered office: 61 Bridge Street, Kington, HR5 3DJ, United Kingdom
Email: [email protected]
ICO registration number: ZC109451

This Privacy Notice explains what personal information we collect, how and why we use it, who we may share it with, how long we keep it and the rights available to you.

1. Who this Privacy Notice applies to

This Privacy Notice applies to individuals whose personal information is processed by Pattern Health Education Ltd in connection with our professional healthcare education services, including:

• learners using our educational programmes;
• healthcare professionals purchasing programmes directly;
• learners whose access is purchased or arranged by an employer, practice, Primary Care Network, Training Hub, federation or other organisation;
• individuals making enquiries or purchasing licences on behalf of an organisation; and
• other professional contacts who communicate with us in connection with our services.

Our educational programmes are intended for healthcare professionals and are not designed to collect patient information.

2. Personal information we collect

Depending on how you interact with us, we may process:

• your name;
• work or other email address;
• professional role or job title, where provided;
• employer, practice or organisation, where provided;
• account and enrolment information;
• programme activation, access and sign-in information;
• programme participation and progress information;
• programme completion information and certificate information;
• technical information and access logs associated with use of our online services;
• enquiry and correspondence information;
• billing and transaction information, where applicable; and
• payment status.

We do not require learners to provide patient information or information about identifiable patients through our educational programmes.

We do not intentionally collect health information about learners as part of the ordinary provision of our professional education services.

Please do not submit patient-identifiable information or other unnecessary special category personal information through our platform or communications.

3. Where we obtain personal information

We may obtain personal information:

• directly from you when you make an enquiry, purchase a programme, create or use an account, participate in a programme or contact us;
• from an organisation purchasing or arranging programme access for you, such as your employer, GP practice, Primary Care Network, Training Hub, federation or other commissioning organisation;
• through our online learning platform when you access and use a programme; and
• from service providers involved in processing transactions or administering our services.

Where an organisation purchases licences for its workforce, it may provide us with limited information needed to create or administer learner access.

4. How and why we use personal information

We use personal information where necessary to:

• respond to enquiries and communicate with prospective or existing customers;
• process purchases and administer organisational licence arrangements;
• create and administer learner accounts and programme enrolments;
• provide access to purchased educational programmes;
• administer programme participation, progress and completion;
• issue certificates of completion where applicable;
• provide account, technical and customer support;
• provide agreed participation and completion information to an organisation that has purchased or arranged learner access, where applicable;
• maintain appropriate business, contractual and financial records;
• protect the security and integrity of our services;
• understand and improve the operation and delivery of our services; and
• comply with applicable legal and regulatory obligations.

We do not use learner information to make solely automated decisions that produce legal or similarly significant effects.

5. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we rely on:

Contract: where processing is necessary to enter into or perform a contract with you, including where you purchase programme access directly from us.

Legitimate interests: where processing is necessary for our legitimate business interests, or those of a third party, and those interests are not overridden by your rights and interests. These interests include administering and delivering our professional education services, managing organisational licence arrangements, supporting learners and customers, maintaining appropriate business records, protecting our services and improving their operation.

Legal obligation: where processing is necessary for us to comply with an obligation imposed by law, including relevant accounting, taxation and regulatory requirements.

Where required by law for a particular activity, we may also rely on consent. Where processing is based on consent, you may withdraw that consent at any time.

6. Organisational licences and learner reporting

Where an organisation purchases or arranges access to one of our educational programmes for its workforce, Pattern Health Education Ltd may process learner information necessary to administer those licences and provide the programme.

The purchasing or commissioning organisation may provide us with learner details for this purpose.

Where applicable, we may provide the purchasing organisation with limited information relating to participation and completion of the programme, such as learner name, enrolment or participation status and completion status.

We do not provide detailed learner activity information as standard unless this has been separately agreed and there is an appropriate lawful basis for doing so.

7. Service providers and sharing of personal information

We use carefully selected third-party service providers to help us operate our business and deliver our services.

These include:

Thinkific for hosting and delivering our online educational programmes and administering learner accounts and enrolments;

Stripe for payment processing where individual purchases are made through supported payment functionality; and

Zoho for invoicing and associated business administration, including organisational purchases where applicable.

We may also use providers of professional, technical, communications, hosting or administrative services where reasonably necessary for the operation of our business.

We only disclose personal information where necessary for the relevant purpose, where required by law, or where otherwise permitted under applicable data protection law.

We do not sell personal information.

8. International transfers

Some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take steps to ensure that the transfer is made in accordance with applicable UK data protection law. Depending on the destination and circumstances, this may include reliance on UK adequacy regulations or appropriate contractual safeguards recognised under UK data protection law.

You may contact us at [email protected] if you would like further information about the safeguards relevant to international transfers of your personal information.

9. How long we keep personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet contractual, legal, accounting and regulatory requirements.

The appropriate retention period depends on the type of information and why we hold it.

For example:

• learner account, enrolment, participation and completion information may be retained for the period necessary to administer programme access and maintain appropriate records of programme delivery and completion;
• enquiry and routine correspondence information is retained only for as long as reasonably necessary for the relevant business purpose; and
• financial, transaction and contractual records may generally be retained for up to six years, or for longer where required by law or reasonably necessary in connection with a legal claim.

When personal information is no longer required, we will delete it, anonymise it or otherwise dispose of it appropriately, subject to applicable legal and technical requirements.

10. Security

We take appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, unauthorised disclosure or access.

We also seek to ensure that service providers processing personal information on our behalf are subject to appropriate data protection and security obligations.

No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Cookies and similar technologies

Our websites and online learning platform may use cookies and similar technologies.

Some cookies are necessary for functions such as account access, security and programme delivery. Other cookies or similar technologies may be used for analytics or performance purposes where permitted by law and, where required, subject to consent.

Further information about the cookies used on our services and the choices available to you should be provided through the relevant cookie information or consent mechanism.

12. Marketing and service communications

We may send communications necessary to administer an enquiry, purchase, account, licence or educational programme. These are service or administrative communications and are not necessarily marketing communications.

We may also send information about relevant Pattern Health Education Ltd educational products, services or updates where permitted by applicable law.

Where you have a right to opt out of direct marketing, you may do so at any time by using any unsubscribe facility provided or by contacting [email protected].

Opting out of marketing will not prevent us from sending communications that are necessary to administer a service, account, purchase or contractual relationship.

13. Your rights

Depending on the circumstances and the lawful basis on which we process your information, you may have rights including:

• the right of access to your personal information;
• the right to rectification of inaccurate or incomplete personal information;
• the right to erasure of your personal information in certain circumstances;
• the right to restriction of processing in certain circumstances;
• the right to object to processing in certain circumstances, including processing based on legitimate interests;
• the right to data portability in certain circumstances; and
• where we rely on consent, the right to withdraw consent at any time.

These rights are not absolute and may be subject to conditions and exemptions under applicable law.

You have the right to object at any time to the use of your personal information for direct marketing.

To exercise a data protection right, contact [email protected].

We may need to verify your identity before acting on a request.

14. Complaints

If you have concerns about how we have used your personal information, please contact us in the first instance at:

[email protected]

We will acknowledge a data protection complaint within five working days and aim to provide a written response within 14 working days.

You also have the right to make a complaint to the Information Commissioner's Office, the UK's independent data protection regulator.

Information Commissioner's Office

You do not have to complain to us before contacting the Information Commissioner's Office.

15. Changes to this Privacy Notice

We may update this Privacy Notice from time to time, including where our services, suppliers or legal obligations change.

The current version will be made available through our website or online learning platform. Where appropriate, we will take reasonable steps to bring material changes affecting the use of personal information to the attention of affected individuals.

16. Contact us

For questions about this Privacy Notice or the way Pattern Health Education Ltd handles personal information, contact:

Pattern Health Education Ltd
61 Bridge Street
Kington
HR5 3DJ
United Kingdom

Email: [email protected]