Chronix Health Library privacy.
CPD courses for carers and the public. Chronix Health Group Ltd is the controller for the Library.
Courses, purchases and completion records
Our role: controller. Chronix Health Group Ltd is the controller.
Why: Selling and delivering online training; recording progress; issuing certificates of completion (never regulated qualifications).
Lawful basis: Contract; legitimate interests with a documented assessment for platform integrity.
Who receives it: Stripe (payments), Supabase, Vercel, Resend (sending email), Google Workspace (hosting our role mailboxes — anything you email to support@ or privacy@ is stored by Google, as is anything we send to them). Completion appears on your carer profile only where you choose.
How long we keep it: Account life plus 30 days; completion records kept longer at your election, as they are evidence of learning.
Visit statistics
We keep aggregate statistics about visits to our sites — the page visited, the website that referred you, and the country of the request. These records contain no cookies, no IP addresses and no identifiers, so they cannot be linked to you or to any other visit. We keep them for 12 months.
International transfers
Data is resident in the UK/EU.
Your rights
You can ask for access to your data, correction, deletion, restriction, and a portable copy, and you can object to processing based on legitimate interests. Where we act as a processor, we pass your request to the controller (the organisation or clinician) without delay.
Complaints
Tell us first if you can — use the data complaints form (no account needed). We acknowledge every complaint when it is made and respond within a month. You can also complain to the Information Commissioner's Office (ICO), the UK regulator, at any time, and you have the right to an effective judicial remedy.