Last updated: 2026-06-23
1. Who we are
This website, careproacademy.co.uk (“Care Pro Academy“, “we“, “us“), is operated by:
Care Pro Academy
Mundells, Welwyn Garden City AL7 1FT, United Kingdom
Contact: hello@careproacademy.co.uk
We are the data controller for the personal data described in this policy.
2. What personal data we collect
Depending on how you use the site, we may collect:
- Account & registration data: name, email address, username, password (stored encrypted)
- Course & enrolment data: which courses you’re enrolled in, progress, quiz/assessment results, certificate records
- Payment data: billing name, billing address, and transaction records. We do not store your card number, CVV, or full payment details — these are processed directly by our payment processor (WooPayments, built on Stripe’s infrastructure)
- Communications: messages you send us via contact forms, support requests, or course-related correspondence
- Technical & usage data: IP address, browser type, device type, pages visited, referring site, collected via cookies and similar technologies
- Marketing preferences: whether you’ve opted in to receive marketing emails
If a course requires you to confirm health or fitness information (for example, for practical assessment suitability), we will tell you specifically at the point of collection and seek your explicit consent separately, as this is “special category” data under UK GDPR.
3. How we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Processing payments and course purchases | Performance of a contract |
| Delivering course content, tracking progress, issuing certificates | Performance of a contract |
| Customer support and responding to enquiries | Performance of a contract / legitimate interest |
| Sending order confirmations, receipts, and service updates | Performance of a contract / legal obligation |
| Sending marketing emails | Consent (you can withdraw this at any time) |
| Site analytics and improving our service | Legitimate interest |
| Fraud prevention and account security | Legitimate interest / legal obligation |
| Complying with tax, accounting, and regulatory obligations | Legal obligation |
4. Automated decision-making and profiling
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. If this changes in the future, we will update this policy and, where required by law, provide further information about the logic involved.
5. Cookies and similar technologies
We use cookies and similar technologies for essential site functions, analytics, and (where you’ve consented) marketing. This currently includes tools such as Google Analytics, Google Tag Manager, Meta (Facebook) Pixel, and Mixpanel. You can manage your cookie preferences at any time using the cookie settings link in the site footer.
6. Who we share your data with
We share personal data only where necessary, with:
- Payment processors (WooPayments / Stripe infrastructure, our banking partner Clearbank) — to process payments and payouts
- Hosting provider (Hostinger) — to store site data securely
- Email delivery provider — to send transactional and marketing emails
- Analytics and marketing tools listed in Section 5, where you’ve consented
- Professional advisers (accountants, auditors, legal advisers) where necessary
- Regulators or law enforcement, where we’re legally required to
We do not sell your personal data to third parties.
7. International data transfers
Some of the third parties listed above (for example, parts of the Stripe/WooPayments and analytics infrastructure) may process data outside the UK, including in the United States. Where this happens, we rely on appropriate safeguards such as the UK’s International Data Transfer Agreement or adequacy regulations, as required by UK GDPR.
8. How long we keep your data
We keep account and course data for as long as your account is active. Where you make a valid erasure request, we will delete your account data within 30 days, except where we’re required to retain certain records — for example for tax, accounting, or course-certification purposes — for up to 6 years, as required by law.
9. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (“right to be forgotten”), subject to legal retention requirements
- Restrict how we process your data
- Data portability — receive your data in a portable format
- Object to processing based on legitimate interest or for direct marketing
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at hello@careproacademy.co.uk. We’ll respond within one month, as required by law.
You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at ico.org.uk, although we’d appreciate the chance to resolve any concern directly first.
10. Data Protection Officer
As a small business, we have assessed that we are not required to appoint a Data Protection Officer (DPO) under UK GDPR. If this changes, we’ll update this policy with DPO contact details. In the meantime, any data protection questions should be sent to the contact in Section 15.
11. Children’s data
Our courses are intended for adult learners (healthcare and care-sector professionals and trainees) and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
12. How we protect your data
We use technical and organisational measures — including encrypted connections (HTTPS), access controls, and a web application firewall — to protect your personal data against unauthorised access, loss, or misuse.
13. Accessibility
We’re committed to making our content accessible. If you need this policy, or any course materials, in an alternative format, contact us using the details in Section 15 and we’ll do our reasonable best to help.
14. Changes to this policy
We may update this policy from time to time. We’ll post the revised version here with an updated “Last updated” date, and where changes are significant, we’ll take reasonable steps to notify you directly.
15. Contact us
If you have any questions about this policy or how we handle your data, contact us at hello@careproacademy.co.uk.