Loading
Last updated: 28 October 2026
PARETO REVISION LTD (company number 12393821), trading as Pareto Education, is the data controller for the personal information you share when you use this website. Our business address is Suite D, 2nd Floor, Mill 2, Mabgate Mills, Leeds, LS9 7DZ, United Kingdom. You can contact us at info@paretoeducation.co.uk.
This policy explains what personal data we process when you visit paretoeducation.co.uk, send us an enquiry, create a member account, book or buy training, use the member area (webinars, courses, certificates, CPD files and appraisal pack), or send an issue report from the member or admin dashboard.
Enquiries. When you use the contact form we receive your name, email address, phone number and organisation if you choose to share them, your reason for enquiring and your message. We store the enquiry in our systems and email it to our inbox so we can reply. The lawful basis is Article 6(1)(b) of the UK GDPR where your enquiry relates to booking or buying training, and Article 6(1)(f) (legitimate interests in responding to enquiries and running the business) for general questions.
Member account and profile. You sign in through a third-party sign-in service and our authentication provider, which give us your name, email address and profile photo. At first sign-in we ask for further details once and reuse them for every booking: your address, city, postcode, country or region, mobile number, place of work, profession, whether your organisation requires clinical or non-clinical training, and how you heard about us. You may also add an appraisal due date. We use these to create your account, administer bookings, issue certificates and records, contact you about sessions you have booked, and understand how people find us. The lawful basis is Article 6(1)(b) (providing the service you requested) and, for how you heard about us, Article 6(1)(f). We do not accept university email addresses for membership.
Bookings, purchases and learning records. We record your webinar bookings, course enrolments, lesson progress, quiz attempts, orders, downloads and the certificates issued to you. Payments are taken by our payment processor using the card, digital payment service or wallet options available at checkout. We receive confirmation of payment and your email, name, billing address and (if you give one) company name, which we print on your invoice. We do not see or store your full card details. We keep these records while your account is open so you can see your orders and download your invoices and certificates.
CPD files and appraisal pack. If you upload external CPD certificates, hours or reflective notes, they are stored for you and used only to show them back to you and to build your appraisal pack. They are not shared with anyone else. Please do not include patient-identifiable information in uploads or notes.
Live webinars. Sessions are hosted by our live webinar provider. When we create a meeting we use your booking to send you the join link. The provider processes your data when you join, under its own privacy terms.
Emails. We send transactional emails, such as booking confirmations, reminders and certificate notices, through our transactional email provider. These are part of the service you booked and are not marketing.
Newsletter. Sign-ups go to our Pareto Points publication through our newsletter platform, which processes your email address under its own privacy policy. The newsletter page embeds a sign-up form that loads from that platform.
Sponsored events. If a session is funded by a sponsor, we will only pass your details to the sponsor if you tick a separate, optional consent for that event. You can withdraw that consent at any time by emailing us.
Issue reports. The member dashboard and admin area include a "Report issues" control. You may optionally attach screenshots (JPEG, PNG or WebP). When you submit a report, we process your description, any screenshots, technical diagnostics, the page path, whether it came from the member or admin area, and submission and consent times. If your sign-in details are available, we also store your account identifier and email address. Authorised administrators can view these details and use your email address to reply. For older reports, we may obtain that address from existing booking, purchase, course enrolment or staff records linked to the same account. Reports may also be submitted without an authenticated account.
Browser diagnostics can include browser and device details, language, time zone, viewport and screen size, referring website, connection information, page-load timings and recent console or error messages. Recent console output is buffered locally in your browser while you use the dashboards. A diagnostic snapshot is sent with your report only when you submit it and tick the consent box. We use automated redaction to reduce known email, credential and sensitive query-value patterns in descriptions and diagnostics, but cannot guarantee that it removes all personal or sensitive information. Screenshots are not automatically redacted. Check your report and screenshots before sending them.
Reports and screenshots are stored using our database and file-storage providers and emailed to our support inbox through our transactional email provider. The notification shows your account email address, when available, your description and the number of screenshots. The report is not anonymous, because it may be linked to your account. We also store the email provider's message identifier when returned. To limit abuse, we process network information and maintain rate-limit counters using hashed network identifiers and account identifiers where available. The lawful basis is Article 6(1)(a) (consent) for the diagnostics and screenshots, and Article 6(1)(f) (legitimate interests in fixing faults, supporting users and preventing abuse) for the description, account and contact details, and operational records.
Website use. Pages are delivered through our hosting provider. Server and infrastructure logs are generated as part of normal delivery and security, and are managed by our hosting providers. We do not run advertising trackers or use your data to build individual advertising profiles.
We use service providers for sign-in and authentication, database and file storage, hosting, payments, transactional email, live webinars and newsletter delivery, under applicable data protection terms. Some services, such as the newsletter platform and live webinar provider, also process data under their own privacy policies as described above. We do not sell your personal data. We may disclose it where the law requires, or to our professional advisers and accountants where necessary.
Session sponsors. Some sessions are sponsored by a named company, such as a pharmaceutical firm. When you book one, you can choose to let us share your name, email address, profession and workplace with that sponsor so it can contact you about educational and promotional materials. This is optional, applies only to that session, is separate from our newsletter, and does not affect your booking. You can withdraw it on the session page in your dashboard. Details already sent to a sponsor are then held under that sponsor's own privacy policy.
Please do not include patient-identifiable data or special-category health information in any enquiry, upload, note or issue report. Enquiry and issue-report emails are not a secure channel for clinical data. If you need to discuss a specific case, anonymise it first.
We keep enquiry correspondence and member issue reports only as long as needed to answer your question or investigate the problem and meet ordinary record-keeping obligations. Account, booking, certificate and learning records are kept while your account is open so you can access your certificates and history. You can delete your account yourself from your profile. That permanently removes your profile, bookings, orders, certificates, progress, discussion posts, uploaded CPD files, issue reports linked to your account and any enquiries sent from your email, and closes your sign-in. Payment records held by our payment processor, and emails already sent, are outside our database and follow those providers' own retention. We do not use your details for marketing unless you separately and explicitly ask us to.
Our service is delivered through the categories of providers described above. Where they process personal data outside the United Kingdom, we rely on the relevant contractual or legal safeguards made available by those providers for international data transfers.
We take reasonable technical and organisational measures to protect personal data. However, no method of transmission over the internet or electronic storage is completely secure. Ordinary email is not guaranteed to provide end-to-end encryption and is unsuitable for patient-identifiable or special-category clinical information, which is why we ask you not to send such data through enquiries or uploads.
Our training is aimed at qualified and trainee healthcare professionals. The website is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You also have the right to withdraw consent where processing relies on it, and the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
To exercise any of these rights, email info@paretoeducation.co.uk.
We may update this policy as the website evolves. The last updated date above shows when we last reviewed it. Material changes will be reflected here before they take effect.
PARETO REVISION LTD (company number 12393821). Address: Suite D, 2nd Floor, Mill 2, Mabgate Mills, Leeds, LS9 7DZ, United Kingdom. Email: info@paretoeducation.co.uk.