Privacy Policy
Last Updated: 10 June 2026
At Medscience Education, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Introduction
Your privacy is important to us. Whether you are a student, parent, guardian, tutor, or website visitor, we are committed to ensuring that your personal information is collected and processed lawfully, fairly, and transparently.
This Privacy Policy explains what information we collect, why we collect it, how we use it, and the rights you have regarding your personal data.
Who We Are
Medscience Education provides academic tutoring, STEM education, university preparation programmes, residential courses, and Continuing Professional Development (CPD) training across the United Kingdom and internationally.
As a data controller, we are responsible for ensuring that your personal information is handled securely and in compliance with UK data protection legislation.
Information We Collect
Depending on the services you use, we may collect the following information:
Personal Information
Full name
Email address
Telephone number
Postal address
Student Information
Academic year and educational background
Course enrolment details
Academic progress and assessment records
Parent or Guardian Information
Parent or guardian names
Contact details
Emergency contact information
Communications
Enquiry forms
Email correspondence
Telephone conversations
Customer support records
Financial Information
Where applicable, we may collect payment and billing information to process course registrations and related services through secure payment providers.
How We Use Your Information
We use your personal information to:
Deliver educational services and tutoring programmes.
Process course applications, enrolments, and bookings.
Communicate important updates about courses and events.
Provide learning support and improve student outcomes.
Respond to enquiries and customer service requests.
Process payments and maintain financial records.
Meet our legal and regulatory obligations.
Improve our website, services, and user experience.
Legal Basis for Processing
Under the UK GDPR, we process personal data using one or more of the following lawful bases:
Consent
Where you have given clear permission for us to process your information.
Contractual Necessity
To fulfil our contractual obligations when providing educational services.
Legitimate Interests
To improve our services, manage our business operations, and communicate with students and parents where appropriate.
Legal Obligation
To comply with applicable legal, financial, safeguarding, and regulatory requirements.
Data Storage & Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction.
Our security measures include:
Encrypted systems and secure data transmission.
Restricted staff access to personal information.
Password-protected databases and cloud services.
Secure third-party platforms where necessary.
Regular monitoring and security updates.
While we take every reasonable precaution, no online system can be guaranteed to be completely secure.
Sharing Your Information
We respect your privacy and do not sell your personal data.
Where necessary, your information may be shared with trusted third parties, including:
Tutors and academic staff delivering educational services.
Secure payment processing providers.
Educational institutions or partners where required.
Professional advisers or regulatory authorities when legally required.
All third-party providers are expected to comply with applicable data protection laws.
Your Rights Under UK GDPR
You have several rights regarding your personal information.
These include the right to:
Access the personal data we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal data where applicable.
Restrict or limit how your data is processed.
Object to certain types of data processing.
Receive your personal data in a portable format.
Withdraw consent at any time where processing is based on consent.
We will respond to privacy requests in accordance with UK GDPR requirements.
Data Retention
We retain personal information only for as long as it is necessary to:
Deliver educational services.
Maintain academic records.
Meet legal and regulatory obligations.
Resolve disputes.
Fulfil financial and administrative requirements.
When data is no longer required, it is securely deleted or anonymised.
Contact for Privacy Requests
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us.
Privacy Team
Email: enquiry@medscience.co.uk
We will respond to all legitimate privacy requests within the timeframes required by UK GDPR.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legislation, our services, or our data processing practices.
Any changes will be published on this page along with the updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your information.