Loading
Last updated: 5 October 2026
PARETO REVISION LTD (company number 12393821), trading as Pareto Education, is the data controller for the personal information you share when you use this website. Our business address is Suite D, 2nd Floor, Mill 2, Mabgate Mills, Leeds, LS9 7DZ, United Kingdom. You can contact us at info@paretoeducation.co.uk.
This policy explains what personal data we process when you visit paretoeducation.co.uk, send us an enquiry, create a member account, book or buy training, or use the member area (webinars, courses, certificates, CPD files and appraisal pack).
Enquiries. When you use the contact form we receive your name, email address, phone number and organisation if you choose to share them, your reason for enquiring and your message. We store the enquiry in our systems and email it to our inbox so we can reply. The lawful basis is Article 6(1)(b) of the UK GDPR where your enquiry relates to booking or buying training, and Article 6(1)(f) (legitimate interests in responding to enquiries and running the business) for general questions.
Member account and profile. You sign in with Google through our authentication provider, Clerk, which gives us your name, email address and profile photo. At first sign-in we ask for further details once and reuse them for every booking: your address, city, postcode, country or region, mobile number, place of work, profession, whether your organisation requires clinical or non-clinical training, and how you heard about us. You may also add an appraisal due date. We use these to create your account, administer bookings, issue certificates and records, contact you about sessions you have booked, and understand how people find us. The lawful basis is Article 6(1)(b) (providing the service you requested) and, for how you heard about us, Article 6(1)(f). We do not accept university email addresses for membership.
Bookings, purchases and learning records. We record your webinar bookings, course enrolments, lesson progress, quiz attempts, orders, downloads and the certificates issued to you. Payments are taken by Stripe (card, PayPal and wallet payments such as Apple Pay and Google Pay). We receive confirmation of payment and your email, name, billing address and (if you give one) company name, which we print on your invoice. We do not see or store your full card details. We keep these records while your account is open so you can see your orders and download your invoices and certificates.
CPD files and appraisal pack. If you upload external CPD certificates, hours or reflective notes, they are stored for you and used only to show them back to you and to build your appraisal pack. They are not shared with anyone else. Please do not include patient-identifiable information in uploads or notes.
Live webinars. Sessions are hosted on Microsoft Teams. When we create a meeting we use your booking to send you the join link. Microsoft processes your data when you join, under its own privacy terms.
Emails. We send transactional emails, such as booking confirmations, reminders and certificate notices, through our email provider, Resend. These are part of the service you booked and are not marketing.
Newsletter. Sign-ups go to our Pareto Points publication on Substack, which processes your email address under its own privacy policy. The newsletter page embeds Substack's sign-up form, which loads from Substack.
Sponsored events. If a session is funded by a sponsor, we will only pass your details to the sponsor if you tick a separate, optional consent for that event. You can withdraw that consent at any time by emailing us.
Website use. Pages are delivered through Cloudflare. Server and infrastructure logs are generated as part of normal delivery and security, and are managed by our hosting providers. We do not run advertising trackers or use your data to build individual advertising profiles.
We use these processors to run the service, each under its own data protection terms: Clerk (sign-in), Convex (database and file storage), Cloudflare (hosting), Stripe (payments), Resend (email), Microsoft Teams (live sessions) and Substack (newsletter). We do not sell your personal data. We may disclose it where the law requires, or to our professional advisers and accountants where necessary.
Session sponsors. Some sessions are sponsored by a named company, such as a pharmaceutical firm. When you book one, you can choose to let us share your name, email address, profession and workplace with that sponsor so it can contact you about educational and promotional materials. This is optional, applies only to that session, is separate from our newsletter, and does not affect your booking. You can withdraw it on the session page in your dashboard. Details already sent to a sponsor are then held under that sponsor's own privacy policy.
Please do not include patient-identifiable data or special-category health information in any enquiry, upload or note. Enquiry emails are not a secure channel for clinical data. If you need to discuss a specific case, anonymise it first.
We keep enquiry correspondence only as long as needed to answer your question and meet ordinary record-keeping obligations. Account, booking, certificate and learning records are kept while your account is open so you can access your certificates and history. You can delete your account yourself from your profile. That permanently removes your profile, bookings, orders, certificates, progress, discussion posts, uploaded CPD files and any enquiries sent from your email, and closes your sign-in. Payment records held by Stripe, and emails already sent, are outside our database and follow those providers' own retention. We do not use your details for marketing unless you separately and explicitly ask us to.
Our service is delivered through the providers listed above. Where they process personal data outside the United Kingdom, we rely on the relevant contractual or legal safeguards made available by those providers for international data transfers.
We take reasonable technical and organisational measures to protect personal data. However, no method of transmission over the internet or electronic storage is completely secure. Ordinary email is not guaranteed to provide end-to-end encryption and is unsuitable for patient-identifiable or special-category clinical information, which is why we ask you not to send such data through enquiries or uploads.
Our training is aimed at qualified and trainee healthcare professionals. The website is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.
You have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You also have the right to withdraw consent where processing relies on it, and the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
To exercise any of these rights, email info@paretoeducation.co.uk.
We may update this policy as the website evolves. The last updated date above shows when we last reviewed it. Material changes will be reflected here before they take effect.
PARETO REVISION LTD (company number 12393821). Address: Suite D, 2nd Floor, Mill 2, Mabgate Mills, Leeds, LS9 7DZ, United Kingdom. Email: info@paretoeducation.co.uk.