Home
Privacy Policy

Privacy Policy

Table of Contents

1
Introduction
2
How We Use Your Personal Data
3
Automated Decision-Making
4
Providing Your Personal Data to Others
5
Retaining and Deleting Personal Data
6
Security of Personal Data
7
Your Rights
8
Complaints
9
Cookies
10
Amendments
11
Contact Us

1. Introduction

  • 1.1 This privacy policy explains how Praktiki Ltd (“Praktiki”, “we”, “us”, or “our”), registered in England and Wales (company number 16081132), processes your personal data and informs you of your privacy rights under UK data protection law.
  • 1.2 Praktiki provides medical education resources and tools to doctors and other healthcare professionals. This privacy policy applies to all users registered with Praktiki.
  • 1.3 For UK data protection purposes, Praktiki Ltd is the “controller” of the personal data collected and processed in connection with its platform and services.

2. How We Use Your Personal Data

  • 2.1 This section outlines the categories of personal data we process, the purposes of processing, and the legal basis for each.
  • 2.2 Usage Data. We process data about your use of our website and services, which may include your IP address, browser type and version, operating system, referral source, page views and navigation paths, and the timing, frequency, and duration of visits. The source of this data is our analytics systems, such as Google Analytics. We use this data to monitor and improve our website and services. The legal basis for this processing is our legitimate interests in improving the performance and usability of our platform.
  • 2.3 Account Data. We process the personal data you provide during registration, including your name, professional details (e.g., role, speciality, and registration number), email address, and the topics and interests you select. We use this data to verify your identity and professional status, create and manage your account, authenticate access, enable password reset, and personalise the content you see. The legal basis for this processing is the performance of our contract with you, and our legitimate interests in the security and proper administration of our platform, including verification of professional status.
  • 2.4 Module Alert Emails (Premium membership). If you choose Premium membership, we send you 2 to 3 emails a week highlighting a selection of newly published expert-led modules matched to the speciality and interests you have told us about. This selection may include modules developed with partners or with pharmaceutical company sponsorship; sponsorship is always disclosed on the module. All alert emails are sent by Praktiki. The legal basis for this processing is your consent, which you give by choosing Premium membership at registration or in your account settings. You can withdraw consent at any time by switching to Basic membership in one click, in your account settings or via the link in any email. This stops the alerts without affecting your access to the platform. Withdrawal does not affect the lawfulness of emails sent before you withdrew.
  • 2.5 Promotional Partner and Sponsored Emails. Separately, and only with your prior permission, we send occasional emails about expert-led modules from the NHS, medical societies, and pharmaceutical companies, which may include promotional information on prescription-only medicines. These emails are sent by Praktiki; we do not give your contact details to sponsors or partners for their own marketing. The legal basis is your consent, which you can withdraw at any time in your account settings or via the link in any email.
  • 2.6 What We Record About Your Choices. For each of the choices above, we keep a record of the option you chose, when you chose it, the wording you were shown, and (for module alerts) the speciality and interests on your profile at that time and as you update them. We keep these records to demonstrate compliance with the law.
  • 2.7 Push Notifications. If you enable push notifications, we use your account data to send alerts about new content in your chosen topics. You can turn these off at any time in your account settings or device settings.
  • 2.8 International Data Transfers. We may transfer your personal data outside the UK or European Economic Area (EEA) to deliver our services. Where a destination country is not deemed to provide an adequate level of data protection by the UK, we ensure appropriate safeguards are in place, such as the applicable Standard Contractual Clauses or the UK International Data Transfer Agreement/Addendum.
  • 2.9 Children’s Data. Praktiki is not intended for individuals under 18. We do not knowingly collect data from minors. If we become aware that we hold such data, we will delete it promptly.
  • 2.10 Analytics and Insights. We may analyse aggregated and anonymised data derived from users’ activity on Praktiki (for example, module completion rates, question answers, engagement patterns, or learning outcomes). Such data cannot be used to identify any individual. We may use this anonymised data to improve and develop our educational content and platform functionality; to create, produce, license and supply statistical insights, reports, benchmarks and anonymised datasets to third parties, including but not limited to medical societies, healthcare organisations, research institutions, and commercial organisations such as health-tech, technology and pharmaceutical companies; to develop, train, test, evaluate and benchmark artificial intelligence, clinical decision-support and educational tools, whether our own or those of third parties; and to support research and industry understanding of clinical practice and medical education. Anonymisation is carried out following the ICO’s anonymisation guidance. The legal basis for any pre-anonymisation processing is our legitimate interest in improving our services, understanding educational trends, and supporting the sustainable operation and growth of our business. Once data is anonymised, it is no longer considered personal data under UK data protection law.

3. Automated Decision-Making

  • 3.1 We use automated processes to tailor content to your speciality and professional interests. For example, based on your account data, we may prioritise educational content or notifications that align with your field of practice.
  • 3.2 The consequence of this processing is that it affects the types of content and features you see on the platform, and which module alerts you receive if you have chosen Premium membership. It does not produce legal or similarly significant effects.

4. Providing Your Personal Data to Others

  • 4.1 Praktiki does not share your contact details with sponsors, partners, or any third party for their own marketing. Any data we make available to commercial partners is anonymised, and may be provided in aggregated or record-level form, as reports, statistics, benchmarks or datasets.
  • 4.2 We may disclose your personal data to professional advisers (e.g., lawyers, auditors) for compliance or legal purposes, and to regulatory authorities if required by law.
  • 4.3 Where we engage third-party service providers (e.g., hosting, analytics, or email delivery providers), we ensure they follow strict data protection standards and process personal data only under our written instructions.
  • 4.4 Where we partner with third parties such as medical societies, healthcare organisations, and health-tech or pharmaceutical companies to develop sponsored educational content, we share only anonymised data derived from user interactions. This data contains no personal or identifiable information.
  • 4.5 With your explicit consent, we may share limited personal data (such as your name, professional details, and contact information) with a named third party where you actively choose to register interest in a specific educational opportunity, event, research project, or paid research, evaluation or advisory panel, or access a resource that requires information sharing for follow-up or certification purposes. We will clearly inform you whenever such sharing is proposed, and no personal data will be shared without your active consent. You may withdraw your consent at any time by updating your preferences in your account settings or by contacting us at privacy@praktiki.io.
  • 4.6 If you report a suspected adverse event relating to a medicine, we may be required to pass the report, including your contact details, to the relevant marketing authorisation holder and/or regulatory authority to meet pharmacovigilance obligations.
  • 4.7 Where Praktiki processes personal data on behalf of a third party, we do so under a written data processing agreement that sets out the scope, purpose, and duration of processing in full compliance with UK GDPR.

5. Retaining and Deleting Personal Data

  • 5.1 We retain personal data only as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law.
  • 5.2 Inactive accounts and associated personal data may be deleted three years after the last activity.
  • 5.3 Records of your consent choices (section 2.6) are retained after account closure for as long as necessary to demonstrate compliance with our legal obligations.
  • 5.4 Anonymised usage data may be retained for analytical purposes indefinitely and is periodically reviewed to ensure it remains non-identifiable.

6. Security of Personal Data

  • 6.1 We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.
  • 6.2 All data is stored on secure servers. Any data transmitted between your browser and our servers is encrypted.
  • 6.3 You are responsible for keeping your account password secure and confidential. We will never ask you for your password.

7. Your Rights

  • 7.1 Under data protection laws, you have the following rights: Access: request a copy of your personal data. Rectification: request corrections to inaccurate or incomplete data. Erasure: request the deletion of your data. Restriction: limit how your data is processed. Objection: object to specific types of processing, including direct marketing. Data portability: receive your data in a structured, commonly used format. Withdraw consent: withdraw any consent you have provided. Lodge a complaint: file a complaint with the UK Information Commissioner’s Office (ICO).
  • 7.2 You can exercise these rights by contacting us at privacy@praktiki.io.

8. Complaints

  • 8.1 You have the right to complain directly to us if you believe we have mishandled your personal data. Email privacy@praktiki.io with the subject “Data protection complaint”. We will acknowledge your complaint within 30 days and aim to provide a full written response without undue delay.
  • 8.2 If you are not satisfied with our response, you can complain to the ICO at www.ico.org.uk, by phone on 0303 123 1113, or by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

9. Cookies

  • 9.1 We use cookies to authenticate users, personalise content, and analyse usage through Google Analytics.
  • 9.2 You can manage or disable cookies via your browser settings. However, disabling cookies may limit the functionality of the platform. For more details, please see our Cookie Policy.

10. Amendments

  • 10.1 This policy may be updated periodically to reflect changes in our practices or legal obligations. Updates will appear on this page with a revised date, and material changes will be notified to you.

11. Contact Us

  • 11.1 If you have any questions about this privacy policy or how your personal data is handled, please contact us at:
  • Praktiki Ltd (registered in England and Wales, company number 16081132)
  • Email: privacy@praktiki.io
  • Registered Address: 85 Great Portland Street, London, England, W1W 7LT