LEGAL & COMPLIANCE

Privacy Policy | M24 Clinical Group & Academy

Last updated: August 2026

M24 Clinical Group and M24 Academy are committed to safeguarding the personal data of our clinic clients, academy students, and registered practitioners. We collect, process, and store personal data in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Section 01 — Data We Collect

• Full name

• Contact details, including email, phone, and WhatsApp number

• Consultation and enquiry requests

• Course enrolment and academy attendance details

• Professional registration numbers, where applicable (GMC, NMC, GDC, GPhC)

Section 02 — How We Use Your Data

• Processing consultation bookings and enquiries

• Administering academy course enrolments and certification

• Confirming trade and insurance eligibility

• Fulfilling product and course orders

• Providing WhatsApp Clinical Desk support

We never sell, rent, or trade your personal data.

Section 03 — Lawful Basis for Processing

• Legitimate Interests — to operate and improve our clinical and academy services

• Contractual Obligations — to fulfil orders, bookings, and course enrolments

• Consent — for marketing communications and non-essential cookies

• Legal Compliance — to meet regulatory, insurance, and licensing requirements

Section 04 — Data Protection & Security

We maintain robust technical and organisational security measures, including encrypted storage, restricted access controls, and staff data-handling protocols. Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy, in line with our strict data retention schedule.

Section 05 — Cookie Policy

• Essential cookies — required for core site functionality

• Consent-based analytics cookies — used only with your permission to understand site usage

• Preference cookies — remember your settings and choices across visits

Section 06 — Your Rights Under UK GDPR

• Right of access to your personal data

• Right to rectification of inaccurate data

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to data portability

• Right to object to processing

• Right to withdraw consent at any time

We aim to respond to all rights requests within one calendar month.

Section 07 — Contact & Complaints

If you have any questions about this policy or wish to exercise your data protection rights, please contact our Clinical Desk. If you remain unsatisfied with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Data & privacy queries answered within 2 business hours via WhatsApp Direct.

Section 08 — Policy Updates

We may update this policy from time to time to reflect changes in our practices or legal obligations. Any revisions will be published on this page with an updated effective date. Continued use of our services following any changes constitutes your acceptance of the revised policy.