Privacy Policy

Multidisciplinary Health and Wellbeing Team Online Ltd (trading as MDT Online)

Registered address: The Place, 9–10 Mill Lane, Alton, Hampshire, GU34 2QG

Company Number: 14498413 | ICO Registration: ZB642003 | VAT Number: GB 483508963

Telephone: 01420 377333 | Email: [email protected]

We may collect and process the following categories of personal data:

Identity data: first name, last name, job title, and organisation name.

Contact data: email address, telephone number, and postal address.

Transaction data: details of courses, workshops, or services you have purchased or enquired about.

Technical data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our website.

Usage data: information about how you use our website and services.

Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.

We do not collect any Special Category data (such as health, race, religion, or biometric data) unless you voluntarily provide it in the context of a training enquiry, in which case we will seek your explicit consent.

We collect data through the following means:

Direct interactions: when you complete a contact form, register for a course or event, subscribe to our newsletter, request a free trial, or correspond with us by telephone, email, or post.

Automated technologies: as you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and patterns. We collect this data using cookies and similar technologies. Please see our Cookie Policy for further details.

Third parties: we may receive data about you from analytics providers such as Google Analytics, and from our email marketing platform.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

To respond to your enquiries and provide the services you have requested — lawful basis: contract performance and legitimate interests.

To process and manage course bookings, registrations, and payments — lawful basis: contract performance.

To send you relevant information about our training, workshops, and services where you have opted in — lawful basis: consent.

To send our newsletter where you have subscribed — lawful basis: consent. You may unsubscribe at any time.

To improve our website, products, and services — lawful basis: legitimate interests.

To comply with legal and regulatory obligations — lawful basis: legal obligation.

We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

We may share your personal data with the following categories of third parties:

IT and system administration providers who support our website and business operations, including our hosting provider and email platform.

Accreditation and awarding bodies (such as ILM, City & Guilds, NUCO, and First Aid Awards) where required to register you for an accredited qualification.

Analytics providers such as Google Analytics, to help us understand how our website is used. This data is anonymised where possible.

Professional advisers including lawyers, accountants, and auditors where necessary.

HM Revenue & Customs, regulators, and other authorities where required by law.

All third parties are required to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

Some of our third-party service providers are based outside the UK. Where we transfer personal data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is in place:

The country has been deemed to provide an adequate level of protection for personal data by the UK Government.

We use specific contracts approved by the UK Government (UK International Data Transfer Agreements) which give personal data the same protection it has in the UK.

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

Enquiry and contact data: retained for up to 2 years from last contact.

Course booking and learner records: retained for up to 7 years in line with our obligations to awarding bodies and HMRC.

Newsletter subscribers: retained until you unsubscribe or withdraw consent.

Website analytics data: retained in accordance with Google Analytics' standard retention settings (up to 26 months).

Under UK data protection law, you have the following rights:

Right of access: you have the right to request a copy of the personal data we hold about you (a Subject Access Request).

Right to rectification: you have the right to ask us to correct inaccurate or incomplete personal data.

Right to erasure: you have the right to ask us to delete your personal data in certain circumstances.

Right to restrict processing: you have the right to ask us to suspend the processing of your data in certain circumstances.

Right to data portability: you have the right to request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.

Right to object: you have the right to object to processing of your personal data where we are relying on a legitimate interest.

Right to withdraw consent: where we are relying on consent to process your data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within one calendar month. You will not have to pay a fee. If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Our website uses cookies to distinguish you from other users and to improve your experience. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy at mdtonline.co.uk/cookie-policy.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact our Data Controller:

MDT Online (Multidisciplinary Health and Wellbeing Team Online Ltd)

The Place, 9–10 Mill Lane, Alton, Hampshire, GU34 2QG

Email: [email protected] | Telephone: 01420 377333