Privacy Policy

1. About this policy

Glutathione Training provides online professional education relating to glutathione science, redox biology and associated areas of professional learning. This Privacy Policy describes the types of personal data we may process, why we process it, how it may be used and disclosed, and the rights available to individuals whose data we process.

This policy applies to visitors to our public website, registered users, learners, prospective learners, professional contacts and other individuals who communicate or interact with Glutathione Training.

2. Personal data we may collect

Account and identity information

When you register or use an account, we may process information such as:

• name;
• email address;
• account credentials and authentication information;
• professional or organisational information that you choose or are required to provide;
• account status, roles and permissions.

Course and learning records

When you participate in training, we may process:

• course enrolments;
• module and section progress;
• assessment attempts and answers;
• written submissions and reflective learning activities;
• scores, results and competency records;
• reviewer comments, feedback and approval records;
• completion and certification records;
• CPD-related learning records where applicable.

Purchases and transaction information

Where paid services are offered, we may process information relating to purchases, enrolments, transaction references, payment status, invoices, refunds and associated accounting records. Payment card or banking details may be processed directly by an authorised payment provider rather than stored by Glutathione Training.

Contact and support information

If you use our contact or support facilities, we may process your name, email address, organisation or role, enquiry category, subject, message, related course information, correspondence, administrative status, assignment information and response history.

Technical and security information

We may process technical information necessary to operate and secure the service, including:

• browser and device information;
• security and authentication events;
• server and application logs;
• timestamps and activity necessary for fraud, abuse and security prevention;
• IP-derived or protected security information where reasonably necessary.

For example, our public contact system may use a protected cryptographic representation of an IP address for security and abuse-prevention purposes rather than retaining the raw address within the enquiry record.

3. How we obtain personal data

We may receive personal data:

• directly from you when you register, enrol, purchase, study, submit work or contact us;
• automatically through normal website and platform operation;
• from payment, authentication, communications or technical service providers where required to provide the service;
• from an organisation arranging legitimate training access for its personnel, where applicable.

4. Why we use personal data

Personal data may be processed to:

• create and administer user accounts;
• provide access to courses and learning materials;
• record learning progress;
• administer assessments and written submissions;
• enable human review, feedback and competency decisions;
• issue and verify appropriate results, learning records and certificates;
• process purchases, enrolments, invoices and refunds where applicable;
• respond to enquiries and provide support;
• maintain the integrity and security of the platform;
• prevent abuse, fraud and unauthorised access;
• maintain appropriate business, financial, audit and compliance records;
• improve the reliability and administration of our services;
• send communications that you have requested or that are necessary for the service;
• send optional research, education or platform communications where a valid marketing basis exists.

5. Legal bases for processing

Depending on the circumstances, processing may be based on one or more lawful bases recognised by applicable data-protection law, including:

• Contract: where processing is necessary to provide training, account access or another service requested by you.
• Legitimate interests: where reasonably necessary to operate, secure, administer and improve the platform, manage professional communications or protect our services and users.
• Legal obligation: where records or information must be processed to comply with applicable law, taxation, accounting or regulatory requirements.
• Consent: where consent is the appropriate legal basis, including certain optional communications or technologies.

Where consent is relied upon, you may withdraw that consent prospectively, subject to applicable law and any processing that has already lawfully occurred.

6. Professional and assessment records

Because Glutathione Training provides structured professional education, certain learning records may form part of the evidence supporting course completion, assessment decisions, certification, audit or professional learning records.

We may therefore need to retain appropriate assessment, result, reviewer, certification and audit records for longer than ordinary website-account information where this is reasonably necessary to protect the integrity and verifiability of professional education.

7. Human review and educational decisions

Some courses may include automated scoring for objective questions alongside human review of written submissions, competency evidence, feedback or certification decisions. Where human approval is required by the applicable course process, certification is not based solely on an automated decision.

8. Service providers and recipients

We may use carefully selected third parties to provide infrastructure or operational services such as hosting, email delivery, security, payment processing, analytics, communications, translation or other functions required to operate the platform.

Such providers should receive only the information reasonably necessary for their function and are expected to handle personal data subject to appropriate contractual, technical and legal safeguards.

We may also disclose information where required by law, necessary to establish or defend legal rights, or reasonably necessary to protect users, the platform or others from unlawful or harmful activity.

9. International processing

Glutathione Training may serve learners and professional users internationally. Some technology or service providers may process information in countries outside the country in which you reside.

Where applicable data-protection law requires safeguards for an international transfer, we will seek to use an appropriate lawful transfer mechanism or other recognised safeguard.

10. Data retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for legitimate legal, contractual, security, accounting, educational, certification and audit requirements.

Retention periods may differ according to the type of information. For example, a general enquiry may not need to be retained for the same period as a formal course result, certification record or financial transaction.

Information may be deleted, anonymised or restricted when it is no longer reasonably required, subject to records that must be preserved for legitimate or legal purposes.

11. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, misuse or disclosure. These measures may include access controls, role-based permissions, encrypted connections, authentication controls, security logging, anti-abuse measures, backups and restricted administrative access.

No internet-based system can be guaranteed to be completely secure. Users are also responsible for protecting their account credentials and for notifying us if they believe their account has been compromised.

12. Cookies and similar technologies

The website may use cookies or comparable technologies that are necessary for functions such as security, authentication, session management and user preferences. Additional technologies will be handled in accordance with our Cookie Policy and, where required, an appropriate consent mechanism.

13. Marketing and The Glutathione Research Brief

Where newsletter registration or other optional communications are offered, subscription will be handled separately from essential service communications. We intend to provide clear information about what a subscriber is requesting and a method of unsubscribing from optional marketing communications.

Transactional, security, account, assessment or service messages may still be sent where necessary to administer an account or provide a requested service.

14. Your data-protection rights

Depending on the law applicable to you and the circumstances of the processing, you may have rights including:

• access to personal data held about you;
• correction of inaccurate or incomplete data;
• erasure in circumstances where a right to erasure applies;
• restriction of certain processing;
• objection to certain processing based on legitimate interests;
• data portability where the relevant legal conditions are met;
• withdrawal of consent where processing relies on consent;
• the right to raise a concern with the relevant data-protection supervisory authority.

These rights are not absolute. For example, we may need to preserve information that forms part of a legitimate assessment, certification, financial, fraud-prevention or legal record.

15. Children

Glutathione Training is designed as professional education and is not intended as a general service for children. Where a particular educational activity legitimately involves a younger learner, additional safeguards and appropriate authorisation may be required.

16. Links to other websites

Our educational content may link to external scientific, regulatory, professional or commercial resources. External websites operate under their own privacy practices and Glutathione Training is not responsible for the privacy policies or processing activities of independent third-party websites.

17. Changes to this policy

We may update this Privacy Policy to reflect changes in the platform, law, technology or our processing activities. The current version will be published on this page with an updated review date where appropriate.