Privacy Policy

Last updated: 8 April 2026

1. Who We Are

ManualCPD Ltd (“we”, “us”, “our”) operates the ManualCPD platform at https://manualcpd.com. We are the data controller for personal data collected through this Platform. We are registered in England and Wales.

Contact: hello@manualcpd.com

2. Data We Collect

We collect and process the following categories of personal data:

Identity data: name, professional title, profession type
Contact data: email address
Account data: login credentials (passwords are hashed and never stored in plain text)
Payment data: billing details processed securely by Stripe (we do not store card numbers)
Usage data: pages visited, courses accessed, quiz results, CPD hours logged
Technical data: IP address, browser type, device information, cookies
Communications data: support enquiries and email correspondence

3. How We Collect Data

We collect data when you: register an account; subscribe to a plan; complete courses or quizzes; contact us; subscribe to our newsletter; or visit our website (via cookies and analytics).

4. Legal Basis for Processing (UK GDPR / EU GDPR)

We process your personal data under the following legal bases:

Contract: to deliver the subscription service you have purchased
Legitimate interests: to improve the Platform, prevent fraud, and ensure security
Legal obligation: to comply with applicable laws and regulations
Consent: for marketing communications and non-essential cookies (which you may withdraw at any time)

5. How We Use Your Data

We use your data to: provide and manage your account and subscription; process payments; issue CPD certificates; send course updates and reminders; respond to support requests; send marketing emails (with consent); improve the Platform through analytics; comply with legal obligations; detect and prevent fraud.

6. Cookies

We use essential cookies to operate the Platform and optional analytics cookies to understand usage. You can manage cookie preferences via our cookie banner. We use tools including Google Analytics. For full details see our Cookie Policy.

7. Data Sharing

We do not sell your personal data. We share data only with: Stripe (payment processing); email service providers (transactional and marketing emails); analytics providers (Google Analytics — anonymised where possible); hosting and infrastructure providers (Google Cloud); accreditation bodies where required to verify course completion. All third-party processors are bound by data processing agreements and required to maintain appropriate security standards.

8. International Transfers

Some of our service providers are located outside the UK and EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK ICO or equivalent mechanisms.

9. Data Retention

We retain your personal data for as long as your account is active or as required by law. Account data is retained for 7 years after account closure for legal and accreditation purposes. You may request deletion of your data subject to legal retention obligations.

10. Your Rights

Under UK GDPR and EU GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data (“right to be forgotten”); restrict processing; data portability; object to processing; withdraw consent at any time; lodge a complaint with a supervisory authority.

To exercise your rights, contact us at hello@manualcpd.com. We will respond within 30 days.

11. Right to Complain

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk. If you are based in the EU, you may contact your local data protection authority.

12. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews. We comply with GDPR, DPA 2018, PIPEDA, HIPAA (where applicable), and other relevant frameworks.

13. Children

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the Platform. Continued use of the Platform after changes constitutes acceptance.

15. Contact Us

ManualCPD Ltd
Email: hello@manualcpd.com
Website: https://manualcpd.com