Privacy Policy

Last updated: September 2026

1. Introduction

THE COLLEGE OF FOOT HEALTH PRACTITIONERS LIMITED (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us, make an enquiry, apply for or enrol on a course, attend training, webinars or events, make a payment, or otherwise use our services.

We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations 2003 (“PECR”), as amended.

For the purposes of UK data protection law, THE COLLEGE OF FOOT HEALTH PRACTITIONERS LIMITED is the data controller responsible for the personal information described in this Privacy Policy.

2. Who we are

THE COLLEGE OF FOOT HEALTH PRACTITIONERS LIMITED

Company number: 04595656

Registered office:

Churchfield House
36 Vicar Street
Dudley
West Midlands
England
DY2 8RG

Email: admin@collegefhp.com

Telephone: +44 121 559 0180

3. Personal information we collect

The information we collect depends on how you interact with us and the services you use.

We may collect:

• your name;
• postal address and postcode;
• email address;
• telephone number;
• date of birth where required for enrolment, assessment, certification or administration;
• course application and enrolment information;
• information about courses, training, webinars, workshops or events you attend;
• attendance records;
• assessment, progress and achievement information;
• qualification and certification records;
• correspondence and communications with us;
• enquiries and customer support records;
• payment and transaction information;
• information relating to payment plans, instalments, refunds or outstanding payments;
• webinar and online training registration details;
• Zoom display name and attendance information;
• marketing preferences and consent records;
• records of unsubscribe or opt-out requests;
• information submitted through forms on our website;
• communication history held within our customer relationship management systems;
• device, browser and website usage information where applicable;
• approximate geographic information collected through analytics technologies where you have provided the required consent; and
• any other information you choose to provide to us.

4. Special category information

In some circumstances, you may provide information about a disability, health condition or accessibility requirement, for example where you require reasonable adjustments or additional support.

Health information is considered special category personal data under UK data protection law.

We will only collect and use this type of information where it is relevant and necessary and where we have both a lawful basis and an appropriate special category condition under applicable data protection law.

Depending on the circumstances, this may include your explicit consent or another condition permitted by law.

We ask that you do not provide health or other special category information unless it is relevant to the service or support you require from us.

5. How we collect personal information

We may collect personal information directly from you when you:

• make an enquiry;
• complete an application or registration form;
• enrol on a course;
• purchase a course, webinar, workshop, event or other service;
• telephone or email us;
• submit information through our website;
• attend a practical session or training course;
• register for or attend a Zoom webinar or online training session;
• complete an assessment or other course requirement;
• request customer or student support;
• make a payment;
• subscribe to marketing communications; or
• otherwise communicate or interact with us.

We may also receive personal information from third parties where appropriate, including:

• payment service providers;
• tutors, trainers or assessors;
• certification, accreditation or awarding organisations;
• technology and communications service providers; and
• other organisations involved in providing a service requested by you.

Where we receive personal information from another source, we will only use it where we have a lawful basis for doing so.

6. How we use your personal information

We may use personal information to:

• respond to enquiries;
• process applications and enrolments;
• provide courses, training and educational services;
• administer your relationship with the College;
• manage course attendance and progress;
• administer assessments;
• issue and manage certificates and qualification records;
• arrange practical training sessions;
• organise webinars, workshops and events;
• process payments, payment plans, refunds and other financial transactions;
• provide customer and student support;
• communicate important information about courses and services;
• maintain attendance, training and certification records;
• manage complaints, queries or disputes;
• provide appropriate support or reasonable adjustments;
• improve our courses, services and customer experience;
• operate and secure our website, systems and communications;
• prevent fraud, misuse or unauthorised access;
• maintain appropriate business records;
• comply with legal, regulatory, accounting and tax obligations;
• establish, exercise or defend legal claims;
• send marketing communications where permitted by law; and
• analyse use of our website where you have consented to analytics technologies.

7. Lawful bases for processing

UK data protection law requires us to have a lawful basis for using personal information.

The lawful basis we rely on depends on the purpose for which the information is being processed.

Contract

We may process personal information where it is necessary to take steps at your request before entering into a contract or to perform our contract with you.

This includes processing necessary to:

• process course applications and enrolments;
• provide training and educational services;
• manage bookings;
• administer courses and assessments;
• communicate with you about the service you have purchased;
• process payments; and
• provide student or customer support.

Legal obligation

We may process personal information where necessary to comply with a legal obligation.

This may include obligations relating to:

• accounting;
• taxation;
• regulatory requirements;
• legal proceedings; and
• other statutory record-keeping requirements.

Legitimate interests

We may process personal information where this is necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• operating and improving the College;
• managing enquiries and prospective students;
• providing effective customer and student support;
• maintaining appropriate educational and business records;
• protecting our website and IT systems;
• preventing fraud and misuse;
• improving our courses and services;
• managing our business relationships; and
• establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider the nature of the information, why the processing is necessary and the potential impact on you.

Consent

We rely on consent where required by law.

This may include:

• certain marketing communications;
• optional analytics cookies;
• certain special category information; and
• other processing where consent is the appropriate lawful basis.

Where we rely on consent, you can withdraw your consent at any time.

Withdrawal does not affect processing that was lawful before consent was withdrawn.

8. Information required to provide our services

Certain personal information is necessary for us to enter into or perform a contract with you.

For example, we may require your identity and contact details, enrolment information and relevant payment information in order to register you for and provide a course.

If required information is not provided, we may be unable to process your application, provide a course or service, issue appropriate documentation or fulfil our contractual obligations.

Where providing information is optional, we will make this clear where appropriate.

9. Course and service communications

Where you enrol on a course, purchase a service or register for an event, we may contact you with information necessary to administer that service.

This may include:

• booking or enrolment confirmations;
• payment information;
• course dates and times;
• joining instructions;
• Zoom joining information;
• changes to course arrangements;
• assessment information;
• practical session information;
• reminders;
• certification information; and
• other communications necessary to provide the service.

These are administrative or service communications and are separate from direct marketing.

10. Marketing communications

We may send information about our courses, webinars, workshops, masterclasses, events, offers and other services where we are permitted to do so.

For electronic marketing to individuals, we will obtain consent where required unless the requirements of an applicable exemption, such as the products and services soft opt-in, are satisfied.

Where we rely on the soft opt-in, we will only use it where the relevant legal conditions are met, including where we obtained your contact details directly in connection with the sale or negotiation of a product or service, the marketing relates to our own similar products or services, and you were given an opportunity to opt out when your details were collected and in each subsequent marketing communication.

ICO guidance confirms that all of these requirements must be met for the products and services soft opt-in to apply.

You can unsubscribe from marketing communications at any time by:

• using the unsubscribe option contained in the communication; or
• contacting admin@collegefhp.com.

If you opt out, we may retain limited information on a suppression list to ensure that your preference continues to be respected.

Opting out of marketing will not prevent us from sending essential administrative or service-related communications about a course or service you have purchased.

11. Customer relationship management and communications providers

We use third-party customer relationship management, automation and communications service providers to help us manage:

• enquiries;
• prospective students;
• existing students;
• course and event registrations;
• customer and student communications;
• follow-up communications;
• administrative processes;
• marketing preferences; and
• customer support.

Information processed through these systems may include your:

• name;
• email address;
• telephone number;
• enquiry details;
• course or event interests;
• application and enrolment information;
• communication history;
• appointment information;
• marketing preferences;
• consent and opt-out records; and
• other information necessary to manage our relationship with you.

These service providers process personal information on our behalf and are subject to appropriate contractual and data protection requirements.

We do not sell personal information to these providers.

12. Payments and Stripe

We use Stripe to process certain payments for courses, training, webinars, events and other services.

When you make a payment, Stripe may process information including:

• your name;
• billing information;
• email address;
• payment method information;
• transaction information;
• device and technical information; and
• information necessary for payment verification and fraud prevention.

Where payment details are collected directly by Stripe, we do not receive or retain your complete payment card information, such as your full card number and card security code.

We may retain information about the transaction, including the amount, payment date, transaction reference, payment status and information required for refunds, accounting and customer support.

Stripe processes information in accordance with its own applicable privacy and security arrangements.

13. Zoom and online training

We use Zoom to deliver certain webinars, meetings, online training sessions and other educational activities.

When you register for or attend a Zoom session, information processed may include:

• your name;
• email address;
• Zoom display name;
• attendance information;
• registration information;
• device and connection information;
• questions or chat messages you choose to submit; and
• audio or video information where you choose to use those features.

We may use attendance records for:

• course administration;
• training records;
• CPD requirements;
• certification; and
• other legitimate educational purposes.

If a webinar or training session is recorded, we will provide appropriate information about the recording. Depending on the way you participate, a recording may contain your display name, audio, video, chat contributions or other information.

Zoom processes information in accordance with its own applicable privacy arrangements.

14. Website analytics and cookies

Our website uses cookies and similar technologies.

We use CookieYes to manage cookie preferences and consent.

We use Google Analytics 4 to help us understand how visitors interact with our website and improve its content and performance.

Our Google Analytics Measurement ID is:

G-XSE4CY2CJG

Where consent is required, analytics cookies will only be used after you have provided the relevant consent through our cookie controls.

Further information about the cookies we use, their purposes and how you can change or withdraw your consent is available in our Cookie Policy.

15. Sharing personal information

We do not sell your personal information.

We may share information where necessary with organisations that assist us in operating our business and providing our services.

These may include:

• payment processors, including Stripe;
• online meeting and webinar providers, including Zoom;
• customer relationship management, communications and automation providers;
• website hosting providers;
• IT and security providers;
• email and communications providers;
• accountants and professional advisers;
• tutors, trainers and assessors;
• certification, accreditation or awarding organisations where applicable;
• analytics and cookie management providers;
• government or regulatory authorities where required by law;
• insurers where appropriate; and
• legal advisers, courts or other parties where necessary to establish, exercise or defend legal rights.

Where organisations process personal information on our behalf, we require them to handle it in accordance with applicable data protection requirements and our instructions.

We may also disclose personal information where required or permitted by law.

16. International transfers

Some of our service providers operate internationally and may process or store personal information outside the United Kingdom.

Where this constitutes a restricted transfer under UK data protection law, we will ensure that an appropriate transfer mechanism is in place.

Depending on the circumstances, this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to the EU Standard Contractual Clauses;
• the UK Extension to an approved international data transfer framework where applicable; or
• another mechanism permitted under UK data protection legislation.

UK adequacy arrangements, including the UK Extension to the EU-US Data Privacy Framework, continue to form part of the UK’s international transfer regime.

Where required, we will also consider whether additional safeguards are necessary.

You may contact us at admin@collegefhp.com if you would like further information about the safeguards used for relevant international transfers.

17. How long we keep personal information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable contractual, educational, accounting, tax, legal and regulatory requirements.

Different information may therefore be retained for different periods.

Enquiries

Enquiry and correspondence information may be retained for a reasonable period after the enquiry has been resolved, taking into account whether you subsequently enrol and whether the information remains necessary for business or legal purposes.

Student and course records

Course, attendance, assessment and student administration records are retained for as long as necessary to administer your studies and for an appropriate period afterwards.

Certain qualification, achievement and certification records may need to be retained for longer where this is necessary to verify qualifications or meet educational, certification, accreditation or regulatory requirements.

Financial records

Payment, invoice and transaction records are retained for the period required under applicable accounting, taxation and legal requirements.

Marketing information

Marketing information is retained while we have an appropriate lawful basis to use it.

Where you unsubscribe, we may retain limited information on a suppression list so that we can continue to respect your opt-out request.

Cookie and analytics information

Cookie and analytics information is retained in accordance with our Cookie Policy and the settings applicable to the relevant technology.

We periodically review the information we hold and delete or anonymise information where it is no longer required.

18. Data security

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised or unlawful access;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• unauthorised disclosure.

Access to personal information is limited to people who require it for legitimate business purposes.

Where we use external service providers, we take appropriate steps to ensure that personal information is handled securely and in accordance with applicable data protection requirements.

No method of transmission or storage can be guaranteed to be completely secure. However, we take reasonable and appropriate measures to protect the information under our control.

19. Automated decision-making

We do not ordinarily use solely automated decision-making that produces legal effects, or similarly significant effects, for students, applicants or website visitors.

If this changes and we are required to provide additional information under data protection law, we will provide appropriate information about the processing involved.

20. Your data protection rights

Depending on the circumstances and the lawful basis we rely on, you may have the following rights.

Right of access

You may ask us whether we process your personal information and request a copy of the information we hold about you.

Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure

You may ask us to delete personal information in certain circumstances.

This right is not absolute. We may need or be permitted to retain information for legal, contractual, educational, regulatory or other legitimate purposes.

Right to restriction

You may ask us to restrict the processing of your personal information in certain circumstances.

Right to data portability

In certain circumstances, you may have the right to receive personal information you provided to us in a structured, commonly used and machine-readable format or ask us to transfer it to another organisation.

Right to withdraw consent

Where processing is based on consent, you can withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

RIGHT TO OBJECT

You have the right to object to certain processing carried out on the basis of legitimate interests.

You also have an absolute right to object at any time to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose.

ICO guidance specifically requires the right to object to be brought to people’s attention clearly and separately.

Not every right applies in every situation. If a particular right does not apply, we will explain the reason when responding to your request.

To exercise any of your rights, contact:

admin@collegefhp.com

We may need to request information reasonably necessary to confirm your identity before responding.

21. Complaints

If you have concerns about how we use your personal information, please contact us so that we have an opportunity to investigate and respond.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Further information is available at www.ico.org.uk.

You do not have to contact us before making a complaint to the ICO.

22. Links to other websites

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices or content of third-party websites.

If you follow a link to another website, we recommend reviewing that organisation’s privacy information before providing personal information.

23. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including where:

• our services change;
• the way we use personal information changes;
• our technology or service providers change;
• applicable legislation changes; or
• regulatory guidance is updated.

The date shown at the beginning of this Privacy Policy indicates when it was last updated.

Where a change materially affects how we process personal information, we will take appropriate steps to bring the change to the attention of affected individuals.

24. Contact us

If you have any questions about this Privacy Policy, how we use your personal information or your data protection rights, please contact:

THE COLLEGE OF FOOT HEALTH PRACTITIONERS LIMITED

Company number: 04595656

Registered office:

Churchfield House
36 Vicar Street
Dudley
West Midlands
England
DY2 8RG

Email: admin@collegefhp.com

Telephone: +44 121 559 0180