Privacy Policy
How we collect, use, and protect your personal data
Last updated: 5 August 2026
Operated by: Kelly Saynor / Medica Forte
Contact for data protection / general enquiries: info@medicaforte.com
This Privacy Policy explains how Kelly Saynor, trading as Medica Forte ("we", "us", "our"), collects, uses, and protects personal data when you use The Practitioner Hub website, membership, and related services (the "Hub"). We are the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
1. What data we collect
What you can do on the site, and what we collect at each point:
-
Browse the public site — no account needed, no personal data collected beyond standard analytics (see our Cookie Policy).
-
Create an account / subscribe to The Practitioner Hub (£29/month plus VAT — £34.80/month including VAT at 20%, recurring): name, email address, password, and professional qualifications, collected via our website platform, Wix.
-
Book and pay for a one-off live Q&A / webinar session (£50/session plus VAT — £60/session including VAT at 20%, open to subscribers and non-subscribers): name, email, payment details, and business address (if required for invoicing).
-
Join our mailing list and/or submit a contact form enquiry: name, email, message content, and phone number (where provided).
Payment card and payment details are collected and processed by our payment processor, Stripe. We do not directly store your full card details.
Special category (health) data
The Practitioner Hub provides educational and professional support content for practitioners — it is not a clinical or client treatment record system. We do not currently operate any case-study submission or health-declaration feature. We do not knowingly collect health data or other special category data about our members through this site.
2. How we use and share your data
-
Account data - Providing membership access, delivering course modules, and communicating with you about the Hub.
-
Payment data- Processing your subscription or one-off webinar payment, handled by our payment processor.
-
Contact form data- Responding to your enquiry.
-
Marketing data (where you have opted in) - Sending our monthly newsletter, Q&A/webinar promotion, and launch or announcement emails.
Third-party services we use
We use the following third-party providers to run the Hub. Each processes personal data on our behalf, or as a separate controller in the case of payment processing:
-
Stripe — payment processing
-
Wix Online Programs — course module and content delivery
-
Wix Events — Q&A / webinar ticketing
-
Zoom — hosting live webinars
-
Wix — website hosting and CMS infrastructure
-
Wix built-in marketing tools — email marketing
-
Google Analytics — website usage analytics
-
YouTube — embedded video content
International data transfers
Some of our providers, including Wix Inc. and elements of our payment processing chain, operate infrastructure in the United States and other countries outside the UK/EEA. Where personal data is transferred outside the UK, we rely on appropriate safeguards recognised under UK GDPR, including Standard Contractual Clauses or an applicable adequacy decision, to ensure your data continues to receive an equivalent level of protection.
Marketing emails
We only send you marketing emails about the Hub, our Q&A sessions, or related updates if you have actively opted in via the tick box at signup. In line with UK GDPR and PECR, we rely on your explicit consent to market to you unless you are an existing customer being told about closely similar products or services. You can withdraw consent and unsubscribe at any time using the link in any marketing email or by contacting us.
3. How long we keep your data, and your rights
-
Financial / purchase records: 6 years, in line with HMRC requirements.
-
Account data: For the duration of your membership, plus 24 months after cancellation.
-
Marketing list data: Until you unsubscribe.
Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; request data portability; and withdraw consent at any time where we rely on consent. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, or to make a data access or deletion request, contact us at info@medicaforte.com, or contact our Data Protection Officer directly (see Section 4 below).
4. Our Data Protection Officer and our regulator
Data Protection Officer
We have appointed an external Data Protection Officer (DPO) to oversee our compliance with UK GDPR and the Data Protection Act 2018. You can contact our DPO directly with any data protection question, concern, or request:
Global Policing
Unit 2, The Pavillions, Bridge Hall Drive, Bury, BL9 7NX
Email: data@globalpolicing.com
Phone: 0161 510 2999
ICO registration
We are registered with the UK Information Commissioner's Office (ICO) as a data controller, registration number: 00014525533. You can find our entry on the public ICO register at ico.org.uk/ESDWebPages/search.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.
5. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated version on this page with a revised "last updated" date.