Privacy policy

What we collect

Your name and email address when you create an account; a record of your purchase; and your progress through the course (which lessons you have completed and where you stopped in each video). We do not collect patient information, and you should never enter any into this platform.

If you ask for the free lesson, we keep your email address and, if you give it, your name, and send you the lesson link and occasional email about the course and new material. Every email has a one-click unsubscribe link.

We also keep records that the course is being taken by the person who enrolled: each time a video plays, the time watched, the playback speed, the IP address and browser used and the account email are logged; your assessment attempts, answers, scores and any certificate issued are recorded; and when you accept the Terms of Service, the Privacy Policy or the clinical responsibility acknowledgment, we record the version accepted, the time, your email, the IP address and the browser. Video and downloaded notes are marked with your account identity so that a copy found elsewhere can be traced to the account that produced it.

Payment information

Card details are entered on Stripe’s hosted checkout and are never transmitted to or stored on our servers. We retain only Stripe’s identifiers for your purchase so we can grant access and produce a receipt.

How your data is used

To give you access to what you bought, to save your place in a video across devices, and to contact you about the course you purchased or, if you asked for the free lesson, about the course and new material. We do not sell your data. We use it for advertising only as described under Advertising measurement.

Advertising measurement

We use the Meta Pixel and Meta’s Conversions API to measure the results of our advertising on Facebook and Instagram. Meta may receive the pages you visit on this site, whether you enrolled, and a hashed (unreadable) form of your email address; Meta uses this under its own data policy. You can opt out of ads personalization in your Facebook settings.

Processors

Supabase (accounts, database), Stripe (payments), Cloudflare Stream (video delivery), Netlify (hosting), Resend (email delivery) and Meta (advertising measurement, as above). Each processes data only to provide its service.

Retention and deletion

Account and progress data are kept while your account exists. To have your account and personal data deleted, email hello@pedoorthoacademy.com. Records of enrollment, viewing activity, assessment attempts, certificates and policy acceptances are retained after your access ends or your account is deleted, because they are the evidence that you completed the course; they are kept with your email address but unlinked from the deleted account. Records required for tax or accounting purposes may be retained longer where the law requires it.

Your rights

You can ask to see, correct or delete the personal data we hold about you by emailing hello@pedoorthoacademy.com; we answer within 30 days. Where a record must be kept (see Retention and deletion) we will tell you what is kept and why. If you are in a jurisdiction that grants you additional rights, you have them, and the same address is where to exercise them.

Contact

Privacy questions: hello@pedoorthoacademy.com