Privacy Policy

PMH Consultancy and Education Ltd is the data controller for the personal information you provide through this website. This means we are responsible for deciding how and why your personal information is processed.

For any question about this policy, or to exercise any of the rights set out in section 9, contact us at:

Email: admin@pmhconsultancyeducation.com
Telephone: 023 9338 2387
Post: PMH Consultancy and Education Ltd, 203 West Street, Fareham, Hampshire, United Kingdom.

Information you provide directly:

• Name, email address and job title when you contact us, request a consultation or join our mailing list.
• Professional details including role, organisation and sector when you register for courses or membership.
• Course progress, completed modules, reflective notes and certificates when you enrol in the academy.
• Organisation details, including the names and work email addresses of learners, when an employer, university or college sets up an organisation account and issues access codes to its learners.
• Communications you send us, including emails, enquiry form messages and messages you type into the consultancy adviser on this site.

No payments are taken through this website. Course and membership access is arranged directly with the PMH team, and invoicing is handled outside this site.

We do not ask for, and you should not submit through this website, information about identifiable service users, patients or individuals involved in safeguarding or complex case matters. Case-specific information is exchanged only through agreed secure channels once an engagement is in place.

Information collected automatically:

We have not installed any analytics, advertising or visitor tracking tools on this website. We do not build visitor profiles and we do not track you across other websites.

Our hosting provider records standard server and security logs, such as IP address, browser type and the pages requested, in order to keep the site available and to detect misuse. These logs are held by the provider as our processor and are not used by PMH for marketing or profiling.

Under UK GDPR we must have a lawful basis for each purpose. Ours are set out below.

• Respond to your enquiries and provide consultancy services.
• Deliver courses, track progress, issue certificates and manage academy enrolments.
• Manage membership tiers and organisational access, including learner rosters and access codes.
• Send information about courses, events and services you have expressed an interest in.
• Maintain the professional records needed for continuing professional development and quality assurance.
• Improve our website, courses and services.

We retain personal information only for as long as it is necessary.

We use a small number of service providers to operate this website and academy. We do not sell your personal information to any third party and we do not share it for advertising.

• Base44. Our website and academy platform provider. Base44 hosts the site, manages user accounts, stores course and enquiry data and delivers email sent from the site. Base44 acts as a data processor on our behalf, under its data processing terms. Our account is hosted on infrastructure in the United States. Base44 states that it holds SOC 2 Type II and ISO 27001 certification.
• Google (Sign in with Google). If you choose to sign in with a Google account, Google confirms your identity to us and provides your name and email address. We do not receive your Google password.
• Large language model providers. Where a page offers an AI assisted feature, such as the consultancy adviser, the text you enter is sent through the Base44 platform to a model provider to generate a reply. Please do not enter personal or case-specific information into these features.
• Google Fonts. Serves the typefaces used on this site. Your browser requests these files directly from Google when a page loads.

Our website and academy platform is hosted by Base44 on infrastructure located in the United States. This means the information you provide through this site, including enquiry details and learner records, is transferred outside the United Kingdom.

Transfers of this kind are permitted under UK GDPR where an appropriate safeguard is in place. We rely on the safeguards set out in our providers' data processing terms, which use the UK International Data Transfer Agreement, or the Addendum to the EU Standard Contractual Clauses, together with the UK extension to the EU-US Data Privacy Framework where the provider is certified under it. Where a model provider is used for an AI assisted feature, processing may also take place outside the United Kingdom under equivalent safeguards.

Organisations carrying out supplier due diligence may request our current transfer documentation using the contact details in section 1.

This website does not use advertising cookies, marketing pixels or cross-site tracking.

Strictly necessary storage. When you sign in to the learner portal, a secure sign-in token is stored in your browser so that you remain signed in as you move between pages. This is essential to providing a service you have asked for, so it does not require consent. Clearing your browser storage will sign you out.

Non-essential cookies. We do not set any. Because the site uses only strictly necessary storage, no cookie consent banner is required. If we later add analytics or any other non-essential technology, we will publish a cookie table and ask for your consent before it loads.

• Right of access - request a copy of the personal information we hold about you.
• Right to rectification - ask us to correct inaccurate or incomplete information.
• Right to erasure - ask us to delete your information, subject to legal retention requirements.
• Right to restrict processing - ask us to limit how we use your information.
• Right to data portability - ask for your data in a structured, machine-readable format.
• Right to object - object to processing based on legitimate interests, or to direct marketing.
• Right to withdraw consent - where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details in section 1. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your personal information, please tell us first so that we can try to put it right. You also have the right to complain to the Information Commissioner's Office, the United Kingdom supervisory authority for data protection.

Website: ico.org.uk/make-a-complaint
Telephone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

We may update this policy from time to time and we review it at least annually. The date at the top of this page shows when it was last updated.