Privacy notice
How MD Acumen Ltd collects and uses personal data through mdacumen.com, our bookings, live classes and practice forms, and how to exercise your rights.
Last reviewed 7 October 2026 · Next review 7 April 2027
The data controller
This website is run by MD Acumen Ltd, trading as MD Acumen, a company registered in England and Wales (company number 16538952), based in Hertfordshire, United Kingdom. MD Acumen Ltd is the data controller for the information described here and is registered with the Information Commissioner's Office (registration reference ZC105897). Contact: enquiry@mdacumen.com.
We handle personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Learners on our learning platform. If you study on learn.mdacumen.com, your learning record, submissions, marks and certificates are covered by the platform's own privacy notice. That notice explains that learner data are stored in the United Kingdom (London), kept for three years after the end of your course, and used only with your consent. Nothing on this page changes it; where the two differ about platform data, the platform notice applies.
What we collect, why, and on what basis
| When you… | What we collect | Why, and the lawful basis |
|---|---|---|
| Visit mdacumen.com | Technical data such as your IP address, browser and device type, the pages you view and the site that referred you. Collected by our website host, Squarespace, including through its built-in visitor analytics. | To run, secure and improve the website. Legitimate interests. Non-essential analytics cookies are set only as described in our Cookie policy. |
| Email us at enquiry@mdacumen.com | Your name, email address and anything you choose to tell us. | To answer your enquiry. Legitimate interests, or steps before a contract where you ask about joining a course. |
| Book a class, course or appointment | Your name, email address, and the answers you give on the booking form (for example your stage of training). Bookings are taken through Acuity Scheduling (mdacumen.as.me) and Squarespace Scheduling. | To confirm your place, send joining details and reminders, and manage attendance. Contract (or steps before a contract). |
| Join a live class on Zoom | The name and email address on your Zoom account, and Zoom's participant record of when you joined and left. | To admit only booked delegates, keep the session secure, and issue attendance certificates only to those who attended. Contract and legitimate interests. |
| Log a practice station on a Google Form (PLAB 2 OSCE and MRCGP SCA practice logs) | Your name and email address, and what you enter: the case or station, your role, grades, feedback statements and reflections. | To send you a copy of your entry so you can build your own practice log, and to review how the practice cases are used so we can improve them. Legitimate interests. |
| Apply for or attend the UK primary-care observership | Identity and contact details, your medical school and year, and the pre-arrival documents your university and you provide: your placement letter, indemnity certificate, immunisation status and signed confidentiality undertaking. | To allocate and run your placement with your university and host surgery. Contract and legitimate interests. Immunisation status is health data; we use it only to confirm you can safely enter a clinical environment, on the basis of your explicit consent. |
| Receive a certificate | Your name, the course, the date and, where relevant, your attendance record. | To issue the certificate and confirm it is genuine if asked. Contract and legitimate interests. |
We do not sell personal data, and we do not use it for advertising. We do not make decisions about you by automated means alone.
Who we share it with
Where it is held
Some of the service providers above are based in, or use servers in, the United States or elsewhere outside the UK. Where personal data are transferred outside the UK, we rely on the safeguards UK law requires, such as the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Learner data on learn.mdacumen.com are held in the United Kingdom (London), as its own notice explains.
How long we keep it
| Record | How long |
|---|---|
| Enquiry emails that do not lead to a booking | Two years after our last contact, then deleted. |
| Bookings, attendance records and certificate records | Three years after the course or class, so that certificates can be verified, then deleted or anonymised. |
| Practice-log form entries | Three years after the entry, then deleted or anonymised. The copy emailed to you is yours to keep or delete. |
| Observership placement records | Three years after the end of the placement, then deleted or anonymised. Immunisation evidence is deleted at the end of the placement. |
| Website analytics | As set by Squarespace; we view only aggregated reports. |
| Learning-platform records | As set out in the platform privacy notice: three years after the end of your course. |
We may keep a record for longer where we need it to deal with a complaint or a legal claim, and only for as long as that need lasts.
Your rights, and how to use them
You may ask for a copy of your data, ask us to correct it, erase it, restrict or object to its use, or receive it in a portable format. Where we rely on your consent, you may withdraw it at any time; withdrawal does not affect what was done before. Results already reported to a university are kept by the university under its own rules.
Write to enquiry@mdacumen.com with "Data protection request" in the subject line. We will reply within one month. If you are unhappy with our answer, you may complain to the Information Commissioner's Office.
Age
Our courses are for medical students, doctors and other healthcare professionals. They are not intended for children, and we do not knowingly collect personal data from anyone under 18.
Cookies
How this website uses cookies, and how to control them, is explained in our Cookie policy.
Changes to this notice
We will update this notice when our services or the law change, and show the date of the latest review at the top of the page. If MD Acumen's education activities pass to a successor organisation, your data may be transferred to it on the same terms.
© 2026 MD Acumen Ltd · Registered in England and Wales · Company no. 16538952 · ICO registration ZC105897