Legal
Privacy policy
Last updated: [insert date]
1. Who we are
GR8MD (“we”, “our”, “us”) is a UK-based health-education company. We teach how the body works; we are not a clinic and we do not provide medical care. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller. You can reach us at hello@gr8md.co.uk.
2. What we collect
- Waitlist data: your email address, if you join the waitlist.
- Technical data: IP address, browser type and pages visited — only if you consent to analytics cookies.
This website collects no health information. If that changes when the programme opens, this policy will change first — and we will ask again.
3. Why we collect it
The waitlist email exists for one job: to tell you when the next intake opens. Analytics, where you consent to it, helps us understand which pages are useful.
4. Lawful basis
Consent, for both. You can withdraw it at any time — unsubscribe from the waitlist, or clear your cookie preferences via the “Cookie settings” link in the footer.
5. How long we keep it
Waitlist emails are kept until you unsubscribe. Anonymous analytics data is held for up to 26 months.
6. Who we share it with
Our email service provider (to send the waitlist email) and Google Analytics (anonymised, and only with your consent). We do not sell your data to anyone.
7. Your rights
Under UK GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data. To exercise any of these, email hello@gr8md.co.uk. You also have the right to complain to the ICO (ico.org.uk).
8. Cookies
This site uses essential cookies (always on) and analytics cookies (only with your consent via the cookie banner). You can change your mind at any time through “Cookie settings” in the footer.
9. Changes to this policy
We will post any material changes here and update the date above.