Privacy Policy

PMH Consultancy and Education Ltd is the data controller for the personal information you provide through this website. This means we are responsible for deciding how and why your personal information is processed.

For any question about this policy, or to exercise any of the rights set out in section 9, contact us at:

Email: admin@pmhconsultancyeducation.com
Telephone: 023 9338 2387
Post: PMH Consultancy and Education Ltd, 203 West Street, Fareham, Hampshire, United Kingdom.

Information you provide directly:

• Name, email address and job title when you contact us, request a consultation or join our mailing list.
• Professional details including role, organisation and sector when you register for courses or membership.
• Course progress, reflective notes and assessment results when you enrol in the academy.
• Billing details when you purchase a course or membership. Card details are entered directly with our payment provider and are never stored by PMH.
• Communications you send us, including emails and enquiry form messages.

We do not ask for, and you should not submit through this website, information about identifiable service users, patients or individuals involved in safeguarding or complex case matters. Case-specific information is exchanged only through agreed secure channels once an engagement is in place.

Information collected automatically:

Under UK GDPR we must have a lawful basis for each purpose. Ours are set out below.

• Respond to your enquiries and provide consultancy services.
• Deliver courses, track progress, issue certificates and manage academy enrolments.
• Manage membership, organisational access and subscription payments.
• Send information about courses, events and services you have expressed an interest in.
• Maintain the professional records needed for continuing professional development and quality assurance.
• Improve our website, courses and services.

We retain personal information only for as long as it is necessary.

We use a small number of service providers to operate this website and academy. We do not sell your personal information to any third party and we do not share it for advertising.

• Base44. Our website and academy platform provider. Base44 hosts the site, manages user accounts, stores course and enquiry data and delivers email sent from the site. Base44 acts as a data processor on our behalf, under its data processing terms. Our account is hosted on infrastructure in the United States. Base44 states that it holds SOC 2 Type II and ISO 27001 certification.
• Stripe. Processes payments for courses and membership. Your card details are provided directly to Stripe and are not stored by PMH.
• Resend. Delivers our email, including course communications and newsletters.
• Google Fonts. Serves the typefaces used on this site. Your browser requests these files directly from Google when a page loads.

Our website and academy platform is hosted by Base44 on infrastructure located in the United States. This means the information you provide through this site, including enquiry details and learner records, is transferred outside the United Kingdom.

Transfers of this kind are permitted under UK GDPR where an appropriate safeguard is in place. We rely on the safeguards set out in our providers' data processing terms, which use the UK International Data Transfer Agreement, or the Addendum to the EU Standard Contractual Clauses, together with the UK extension to the EU-US Data Privacy Framework where the provider is certified under it. Stripe and Resend also process data outside the United Kingdom under equivalent safeguards.

Organisations carrying out supplier due diligence may request our current transfer documentation using the contact details in section 1.

This website does not use advertising cookies, marketing pixels or cross-site tracking.

Strictly necessary storage. When you sign in to the learner portal, a secure sign-in token is stored in your browser so that you remain signed in as you move between pages. This is essential to providing a service you have asked for, so it does not require consent. Clearing your browser storage will sign you out.

• Right of access - request a copy of the personal information we hold about you.
• Right to rectification - ask us to correct inaccurate or incomplete information.
• Right to erasure - ask us to delete your information, subject to legal retention requirements.
• Right to restrict processing - ask us to limit how we use your information.
• Right to data portability - ask for your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interests, or to direct marketing.
• Right to withdraw consent - where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your personal information, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the United Kingdom supervisory authority for data protection.

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We may update this policy from time to time and we review it at least annually. The date at the top of this page shows when it was last updated.