Privacy Policy

We collect only the information needed to deliver education and respond to enquiries:

• Contact details you provide — name, email address, country, profession and any message content submitted through our contact or enquiry forms.
• Course and membership records — enrolments, progress, completion and correspondence relating to your participation.
• Professional details you choose to share — qualifications, registration category and area of practice, where relevant to course eligibility or CPD records.
• Technical information — IP address, browser type, device and pages visited, collected automatically by our hosting provider for security and performance purposes.

We do not ask for, and ask that you do not send us, patient information or clinical records of any kind.

• To respond to enquiries and provide the education, membership and events you request.
• To administer enrolments, access, certificates of completion and continuing professional development records.
• To send educational updates, programme announcements and member communications where you have asked to receive them.
• To maintain the security, integrity and reliability of the website.
• To meet record-keeping, accreditation and legal obligations that apply to educational providers.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes.

Where the UK GDPR, EU GDPR or comparable law applies to you, we rely on: performance of a contract (delivering courses and membership); legitimate interests (operating and improving the Institute and its website); consent (optional marketing communications); and legal obligation (record retention).

We use a small number of reputable providers to operate the Institute — for example website hosting and infrastructure, email delivery, payment processing, and video or learning-platform hosting for course delivery. These providers process information only on our instructions and under their own contractual and security obligations. We do not grant them any right to use your information for their own purposes.

The Institute is an international organisation with faculty and participants across several continents. Your information may therefore be stored or processed in a country other than your own. Where information is transferred internationally, we take reasonable steps to ensure it remains protected to a standard consistent with this policy and applicable law.

The website uses cookies and similar technologies that are necessary for it to function, and may use analytics to understand how the site is used in aggregate. You can control cookies through your browser settings. See our Cookie Policy for further detail.

We keep enquiry correspondence only as long as needed to deal with the matter and for a reasonable period afterwards. Course and membership records — including completion and CPD records — are kept for longer, because participants and regulators may need to verify them. When information is no longer required we delete it or remove identifying details.

We apply access controls, encrypted connections and reputable managed infrastructure to protect personal information, and limit internal access to those who need it. No online service can be guaranteed to be completely secure, and we encourage you to use a strong, unique password for any account you hold with us.

Subject to the law that applies to you, you may request access to the personal information we hold about you, ask us to correct or delete it, object to or restrict certain processing, request a copy in a portable format, or withdraw consent to marketing at any time. You can unsubscribe from any email we send using the link in that email.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law. If you are not satisfied with our response, you may complain to your local data protection or privacy authority.

The Institute's education is intended for healthcare professionals, researchers and policy audiences. The website is not directed at children, and we do not knowingly collect information from anyone under 18.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be highlighted on the website.

Questions, requests or privacy concerns can be sent to us through the contact page, addressed to the Institute for Cannabinoid Therapy, marked for the attention of the Privacy Officer.