Privacy Policy

This policy explains how Astrum Medical Academy ("we", "us") collects and uses personal data when you register your interest in the Peptide Therapy Masterclass or otherwise interact with this website. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.

1. Who we are

Astrum Medical Academy, 9 Little Portland Street, Marylebone, London W1W 7JF, United Kingdom. For any privacy enquiries, contact notify@medastrum.co.uk.

2. What we collect

• Registration details you give us via the interest form: full name, email address and clinic or company name.
• Email interaction data: whether a confirmation email was delivered, bounced, or triggered an unsubscribe.
• Technical data that our hosting provider records automatically for security and abuse-prevention purposes (IP address, request timestamps, user agent).

We do not collect clinical, health, or patient data through this website.

3. Why we use it and our lawful basis

• To acknowledge your registration and follow up with course details — legitimate interest in responding to your enquiry.
• To arrange payment and confirm your seat if you proceed — necessary for a contract (or steps prior to entering one).
• To keep records of registrations and unsubscribes — legal obligation under UK data protection law.

We do not send marketing emails, newsletters, or third-party offers from this registration list.

4. How long we keep it

Registration details are kept for up to 24 months after the course date, then deleted or anonymised. Unsubscribe records are kept indefinitely so we can honour your preference.

5. Who we share it with

We use trusted processors that act on our written instructions:

• Our website and database hosting provider (EU-region infrastructure).
• Our transactional email provider, which delivers the confirmation email on our behalf.

We do not sell your data. We do not share it for advertising purposes.

6. International transfers

Where a processor operates outside the UK/EEA, transfers are protected by the UK International Data Transfer Addendum and/or the EU Standard Contractual Clauses.

7. Your rights

You have the right to:

• Access the personal data we hold about you.
• Ask us to correct or delete it.
• Object to or restrict our processing.
• Withdraw consent at any time where processing is based on consent.
• Complain to the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email notify@medastrum.co.uk. To unsubscribe from further course emails, use the link at the bottom of any email we send you.

8. Security

All submissions are transmitted over HTTPS and stored in access-controlled databases with row-level security. Our email infrastructure includes bounce and complaint handling with an automatic suppression list.

9. Changes

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the current version.