Intended for health professionals for educational purposes only

Privacy Policy

Effective Date: 21/08/2026
Company Name: Cotswold Machine Learning Limited
Registered in: United Kingdom
ICO Registration Number: ZB772190

1. Introduction

Cotswold Machine Learning Limited ("we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains what information we collect when you use our website and services, why we collect it, how we use it, when it may be shared with third parties, and the rights available to you under applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

We may collect and process the following categories of personal information:

  • Account information: including your username and email address.
  • Profile information: information that you choose to provide when registering for or using our services.
  • Payment and billing information: payments are processed by Stripe. We may receive information relating to your payment and transaction, such as your Stripe customer identifier, subscription or payment status, transaction information and billing details such as your billing address. We do not store your full payment card details.
  • Performance and usage information: information about your use of our educational services, including questions attempted, answers given, whether answers were correct or incorrect, question categories, scores, response times, quiz attempts and changes in your performance over time.
  • Technical information: we may collect information relating to your use of the website, such as browser or device information, IP address, logs and similar technical information where necessary for security, operation and analytics.
  • Marketing preferences: information recording whether you have chosen to receive marketing or promotional communications, including communications relating to third parties.

3. How We Use Your Data

We use personal information for purposes including:

  • Creating, maintaining and administering your account.
  • Providing access to our educational services and question banks.
  • Processing and administering payments and subscriptions.
  • Recording your answers, scores and other performance information so that we can provide performance tracking, analytics and feedback.
  • Analysing how users interact with our services and improving our questions, educational content, features and overall service.
  • Producing statistical, aggregated or anonymised information about user performance, educational trends and use of our services.
  • Maintaining the security and integrity of our services.
  • Complying with our legal and regulatory obligations.
  • Sending marketing communications where permitted by law and in accordance with your marketing preferences.

4. Commercial Use of Aggregated and Anonymised Data

We may analyse information generated through use of our services, including performance information, to produce aggregated statistics, benchmarking information, research, reports and other insights.

We may use, license, share or sell information that has been aggregated or anonymised so that individuals are not identifiable from that information. This may include commercial use of statistics concerning educational performance, question performance, trends and patterns in the use of our services.

We do not sell your identifiable account information, such as your email address or username, merely because you use the service. Where we propose to disclose identifiable personal information to a third party for that third party's own direct marketing purposes, we will only do so where we have an appropriate lawful basis and, where required, your specific consent.

5. Marketing and Third-Party Promotions

We will only send you third-party promotional material by electronic communication where you have actively chosen to receive such communications or where another lawful basis is available and the communication is permitted by applicable law.

Where we rely on your consent, providing marketing consent is optional and is not a condition of creating an account or purchasing our services. You can withdraw your marketing consent at any time.

Where your personal information is to be provided to another organisation so that it can contact you directly for marketing purposes, we will provide appropriate information about the proposed sharing and obtain consent where required by law.

6. Legal Basis for Processing

Depending on the purpose for which your information is being processed, we may rely on one or more of the following lawful bases:

  • Performance of a contract: where processing is necessary to create and administer your account, provide services you have purchased and manage your subscription or payment.
  • Legitimate interests: where processing is necessary for our legitimate business interests, such as improving our services, analysing use of the website, preventing fraud, maintaining security and understanding the performance of our educational products, provided those interests are not overridden by your rights and interests.
  • Consent: where you have specifically agreed to a particular use of your personal information, including certain marketing activities. Where we rely on consent, you may withdraw it at any time.
  • Legal obligation: where processing is necessary for us to comply with applicable legal, accounting, taxation or regulatory requirements.

7. Payments and Stripe

We use Stripe to process payments and subscriptions. When you make a payment, certain personal information is provided directly to Stripe and Stripe may provide us with information necessary to administer your purchase or subscription.

We do not receive or store your full debit or credit card number. Stripe processes payment information in accordance with its own privacy and security policies.

8. Sharing Your Data

We may share personal information where necessary with:

  • Service providers that help us operate our website and services, including payment processing, website hosting, database infrastructure, email delivery and analytics providers.
  • Professional advisers, regulators, law enforcement authorities or other organisations where disclosure is required or permitted by law.
  • A purchaser, investor or successor organisation in connection with a proposed or completed sale, merger, restructuring or transfer of our business or assets, subject to applicable data protection law.
  • Third parties for marketing purposes where you have given the necessary consent or where another lawful basis permits us to do so.
  • Third parties receiving aggregated or anonymised statistics, benchmarking information or other information from which individual users are not identifiable.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or destruction.

No internet-based service can guarantee absolute security. We therefore regularly review the measures used to protect the information that we hold.

10. International Data Transfers

Some of the service providers we use may process information outside the United Kingdom. Where personal information is transferred internationally, we take steps to ensure that appropriate safeguards required by applicable data protection law are in place.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing our services, maintaining appropriate business and transaction records, resolving disputes and meeting legal, tax, accounting and regulatory requirements.

Performance information may be retained for as long as your account is active and for an appropriate period afterwards. Information that has been irreversibly anonymised may be retained and used for statistical, research, analytical or commercial purposes because it no longer identifies an individual.

12. Your Rights

Depending on the circumstances, UK data protection law gives you rights including the right to:

  • Request access to personal information that we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your personal information in certain circumstances.
  • Request restriction of processing in certain circumstances.
  • Object to certain processing of your personal information.
  • Object at any time to the processing of your personal information for direct marketing purposes.
  • Request transfer of certain information to you or another provider where the right to data portability applies.
  • Withdraw consent at any time where processing is based upon your consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us.

13. Children's Privacy

Our services are not intended for children and we do not knowingly seek to collect personal information from children through our services.

14. ICO Registration

Cotswold Machine Learning Limited is registered with the Information Commissioner's Office (ICO) in the United Kingdom under registration number ZB772190.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our services, business practices or legal and regulatory requirements. The current version will be published on this website and the effective date shown above will be updated where appropriate.

16. Contact Us

If you have questions about this Privacy Policy, how we use your personal information or wish to exercise your data protection rights, please contact us.