On this page
1. Who we are
Ethicapraxis, an independent online education provider ("we", "us"), is responsible for the personal data described in this policy (the "controller" under the GDPR and the "controlador" under the LGPD). Company name and registered address: [to be inserted]. For any privacy question or request, email support@ethicapraxis.com with "Privacy" in the subject line or use our contact page.
The English pages at the site root are a summary for all editions. The privacy page of your country edition, in its own language, forms part of this policy: Brasil, France, Italia, Deutschland.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name (as it appears on your certificate), email address, password (stored encrypted), country edition | You |
| Optional profile details | Profession or job title, employer, if you choose to give them | You |
| Order and payment records | Courses bought, price, currency, date, billing details, payment status | You and our payment provider |
| Learning records | Course progress, assessment answers and scores, completion dates, certificates issued | Created as you use courses |
| Reflective accounts | The text you write in the reflective account template | You |
| Messages | Emails and contact form messages, including group enquiries | You |
| Technical and usage data | IP address, browser and device type, pages visited, cookie identifiers | Your device and our website |
We do not collect your full card number. Card payments are handled by Stripe, which gives us a payment confirmation and limited details such as card type and last four digits.
Please do not enter patient information. We are not a health care provider and do not need any information about your patients. Keep reflections and messages de-identified.
3. Why we use your data
| Purpose | Legal basis (GDPR / LGPD) |
|---|---|
| Create and run your account, give access to courses, save progress, mark assessments and issue certificates | Performing our contract with you |
| Process payments, refunds and invoices; keep tax and accounting records | Contract; legal obligation |
| Reply to messages and support requests | Contract; legitimate interests |
| Keep the website secure and prevent fraud and certificate misuse | Legitimate interests; legal obligation |
| Understand how the site is used and improve courses | Consent for non-essential cookies; legitimate interests |
| Send course updates or marketing emails | Consent, which you can withdraw at any time |
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4. Your answers and reflections stay private
Your assessment answers and reflective accounts are private to your account. We never share them with any authority, council, order, chamber, professional body or employer unless you ask us to, or we are legally required to. If we receive such a demand, we will tell you unless the law prevents us.
You control what you download and who you share it with. Written reflections that you share may be disclosable in some legal or disciplinary processes, so keep them de-identified and take advice if you are involved in a live case.
5. Who we share data with
We do not sell or rent your personal data. We share it only with service providers (processors) who help us run the website, under contracts that require them to protect it and use it only on our instructions:
- Payment provider (Stripe): to take card payments and process refunds
- Hosting and learning platform providers: to store and run the website, accounts and courses
- Email service providers: to send order confirmations, account emails and messages you agreed to receive
- Professional advisers: such as accountants or lawyers, where needed
We may also disclose data where the law requires it or to protect our rights. If you are enrolled by an employer, we share completion status with that employer only where you were told at enrolment; we do not share your answers or reflections.
6. International transfers
Some of our service providers may process data outside your country, including outside the European Economic Area or Brazil. Where that happens, we rely on the safeguards the GDPR or the LGPD provides for, such as an adequacy decision or standard contractual clauses, to give your data a comparable level of protection. Details of the providers in use: [to be completed before launch].
7. How long we keep data
- Account, learning records and certificates: while your account is open and for as long as needed afterwards so that you can retrieve, or we can verify, your certificate. Retention period: [to be confirmed]. You can ask us to delete your account sooner.
- Order and payment records: for as long as tax and accounting law requires.
- Support messages: for a limited period after the matter is closed. Retention period: [to be confirmed].
After these periods we delete or anonymise the data.
8. Cookies
We use essential cookies to keep you logged in, run the cart and checkout and remember your chosen country edition. With your consent we may also use analytics cookies to understand how the site is used. You can accept or decline non-essential cookies in the cookie banner and change your choice at any time.
9. Security and breaches
We use reasonable safeguards, including encrypted connections (HTTPS), encrypted passwords and access controls. No online service is completely secure. If a breach is likely to put your rights at risk, we will notify the competent supervisory authority and you as the GDPR or the LGPD requires.
10. Your rights
Wherever you live, you can ask us to:
- access the personal data we hold about you;
- correct data that is wrong or out of date, for example the name on your certificate;
- delete your account and data, subject to records we must keep by law;
- receive a copy of the data you gave us in a portable format;
- object to or restrict certain uses, and withdraw consent at any time.
Email support@ethicapraxis.com to make a request. We will confirm your identity and reply within the time the law allows.
11. France, Italy and Germany: GDPR
If you are in France, Italy or Germany, we process your data in line with the General Data Protection Regulation (Regulation (EU) 2016/679). You may complain to your national supervisory authority: the CNIL in France, the Garante per la protezione dei dati personali in Italy, or the data protection authority of your German federal state or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).
12. Brazil: LGPD
If you are in Brazil, we process your data in line with the Lei Geral de Proteção de Dados (Lei 13.709/2018, LGPD). You may exercise the rights in section 10 and, if you are not satisfied with our reply, complain to the Autoridade Nacional de Proteção de Dados (ANPD).
13. Children
Our courses are for health professionals and are not directed at children. We do not knowingly collect data from anyone under 16.
14. Changes to this policy
We may update this policy when our services or the law change. The current version is always on this page with its date. See also our terms of use.
Official sources
Checked November 2026. Rules and processes change, so confirm the current position with the official source. This page is general information, not legal advice.