Privacy Policy

Who we are

THE MIDLANDS MEDICAL ACADEMY LTD is a private limited company registered in England and Wales (Company No. 12037952), with its registered office at 1 Broad Lane, Wolverhampton, WV3 9BJ ("the Academy", "we", "us"). We are the data controller for the personal data described in this notice. You can contact us at info@midlandsacademy.co.uk.

What data we collect and why

We collect only the personal data needed for the following visitor journeys:

• Newsletter sign-up. If you subscribe, we collect your email address and send a double opt-in confirmation via our email platform, Brevo. We only add you to our list once you confirm. Lawful basis: consent.
• Course and event registration. If you register interest in a course, conference, or event, we collect your name, email address, profession, chosen course, and optionally your phone number. This data is stored as a contact in Brevo and triggers a notification email to the Academy so we can process your request. Lawful basis: steps taken at your request prior to entering a contract, and our legitimate interest in administering course registrations.
• Contact form. If you message us via the contact form, your message and contact details are emailed directly to our team inbox. We do not store your details or add you to any mailing list. Lawful basis: legitimate interest in responding to your enquiry.

Who we share data with

We use the following processors to run the site and our operations:

• Brevo (email delivery and CRM, EU-based) — processes newsletter and course registration data as described above.
• Cloudflare (hosting and content delivery network) — delivers the website and may process data internationally. Where data leaves the UK, transfers are protected by UK-approved safeguards such as an International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and by adequacy regulations where applicable.

We do not sell your personal data to third parties.

How long we keep data

• Newsletter subscriber data is kept for as long as you remain subscribed, until you unsubscribe.
• Course registration data is kept for as long as needed to process and follow up on your registration, and for a reasonable period afterwards for record-keeping.
• Contact form messages are kept in our email inbox only for as long as needed to handle your enquiry.
• Where the law requires us to keep records for a set period (for example, accounting or CPD records), we retain data for that statutory period.

Your rights

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected (rectification);
• have your data deleted in certain circumstances (erasure);
• restrict how we use your data;
• receive your data in a portable format;
• object to our processing of your data; and
• withdraw your consent at any time, where we rely on consent (for example, the newsletter).

To exercise any of these rights, email info@midlandsacademy.co.uk. If you are unhappy with how we've handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Our site uses strictly necessary cookies by default to make the website work. We show a cookie banner that lets you choose between "Accept all" and "Necessary only" before any additional, non-essential category (such as analytics) is activated. Your choice is stored in a first-party cookie so we remember your preference on future visits. You can change your preference at any time via the cookie settings link in the site footer.

Children

Our website and services are intended for healthcare professionals and are not directed at children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. We will post any changes on this page.

Last updated: 5 July 2026