AUCA Privacy Policy


Effective Date: September 2026 | Version: 2.0

Advanced Urinary Catheterisation Academy Limited (“AUCA”, “we”, “us” or “our”) is committed to protecting the privacy and security of personal data.

This Privacy Policy explains how we collect, use, disclose and safeguard personal information when you use AUCA e-learning, our website, institutional learning services and related educational activities.

  1. DATA CONTROLLER

Advanced Urinary Catheterisation Academy Limited is the data controller responsible for your personal data.

Company: Advanced Urinary Catheterisation Academy Limited Company number: 12389008 Contact email: info@auca.online

  1. INFORMATION WE COLLECT

We may collect personal data when you:

register for or access AUCA e-learning; enrol on an AUCA course; contact us by email or through a website form; purchase a paid service where applicable; subscribe to optional AUCA communications.

Depending on how you use our services, the personal data we collect may include:

full name; email address and other contact information; organisation, hospital or NHS Trust; professional role or grade; department or specialty; country; course enrolment records; course progress, assessment and completion records; certificate information; communications you send to us; payment and transaction information where applicable; technical information such as IP address, browser type and website usage data.

Payment card information is processed by our payment-service providers and is not normally stored directly by AUCA.

  1. HOW WE USE YOUR DATA

We may use personal data to:

create and administer learner accounts; provide access to AUCA e-learning; manage course enrolment and progress; administer assessments; issue course completion certificates; provide learner support; send course-related and administrative communications; send re-certification or recommended renewal reminders where applicable; respond to enquiries and feedback; maintain the security and integrity of AUCA services; comply with legal, accounting and regulatory obligations; improve our courses, website and educational services; understand course uptake and learner engagement; support institutional e-learning arrangements with healthcare organisations.

We may use anonymised or aggregated learner information to understand educational uptake, professional groups, organisational reach and engagement, and to improve AUCA services.

  1. COURSE COMMUNICATIONS AND OPTIONAL AUCA COMMUNICATIONS Course communications

We may use your email address to send communications necessary for the administration and delivery of your AUCA learning, including:

registration information; course-access information; course updates; progress reminders; certificates; re-certification reminders; surveys; requests for feedback; important changes affecting the learning service. Optional AUCA communications

We may also invite you to receive occasional information about AUCA educational activities, including:

new courses; educational resources; conferences; professional learning events; other relevant AUCA news.

Where required by law, we will ask for your consent before sending optional marketing or promotional communications.

You may unsubscribe from optional communications at any time by using the unsubscribe link in the email or by contacting info@auca.online.

Withdrawing consent to optional communications will not affect your access to AUCA courses or training.

  1. LEGAL BASIS FOR PROCESSING

Depending on the circumstances, AUCA may process personal data on one or more of the following legal bases:

Contractual necessity

Where processing is necessary to provide a course, paid service or other service you have requested.

Legitimate interests

Where processing is necessary for AUCA’s legitimate interests, including:

administering and improving AUCA services; understanding course uptake and educational engagement; maintaining system and information security; responding to enquiries; operating and developing AUCA’s educational activities; communicating service-related information where appropriate.

We will only rely on legitimate interests where those interests are not overridden by your rights and interests.

Legal obligation

Where processing is necessary to comply with a legal, accounting, regulatory or other statutory obligation.

Consent

Where you have provided consent for a specific purpose, including certain optional marketing communications.

Where we rely on consent, you may withdraw it at any time.

  1. THIRD-PARTY SERVICE PROVIDERS AND DATA SHARING

AUCA uses third-party service providers to support the delivery and administration of its services.

These may include:

Thinkific

Used for e-learning course delivery, learner accounts, course progress and completion records.

Arlo

Used for website functionality, course administration and related services.

Payment providers

Where applicable, third-party payment processors may be used to process payments securely.

Email and communications providers

AUCA may use external providers to manage email communications and mailing lists.

IT and professional service providers

We may use appropriate technology, hosting, administrative, accounting or professional advisers where necessary.

AUCA does not sell or rent personal data.

We may disclose personal data:

to service providers acting on our behalf; where necessary to provide AUCA services; where required by law; where necessary to establish, exercise or defend legal rights.

Where required, third-party processors are engaged under appropriate contractual and data-protection arrangements.

  1. INSTITUTIONAL E-LEARNING

Where AUCA e-learning is provided through a healthcare organisation’s own Learning Management System, the organisation may separately act as a data controller for learner information held within its systems.

AUCA does not routinely require identifiable learner information from organisations for institutional licence administration.

AUCA may request reasonable anonymised or aggregate information relating to learner numbers, course uptake or educational engagement where necessary to support licence administration, quality improvement or service evaluation.

Any transfer of personal data between AUCA and an organisation will be handled in accordance with applicable data-protection law.

  1. INTERNATIONAL DATA TRANSFERS

Some of AUCA’s service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, AUCA will use an appropriate lawful transfer mechanism where required, which may include:

a UK adequacy regulation; recognised contractual safeguards; or another transfer mechanism permitted under applicable data-protection law.

You may contact AUCA at info@auca.online if you would like further information about international data-transfer arrangements.

  1. DATA RETENTION

AUCA keeps personal data only for as long as reasonably necessary for the purposes for which it was collected, including legal, regulatory, accounting, certification and educational requirements.

Retention periods may vary according to the type of information.

For example:

learner and course records may be retained for as long as reasonably necessary for certification, re-certification, learner support and governance purposes; financial and accounting records are normally retained for the period required by applicable tax and accounting law; marketing information will be retained until consent is withdrawn, an unsubscribe request is received, or the information is no longer required.

AUCA periodically reviews the personal data it retains.

  1. DATA SECURITY

AUCA takes reasonable technical and organisational measures to protect personal data against:

unauthorised access; accidental loss; misuse; alteration; disclosure; destruction.

These measures may include:

secure hosted systems; encrypted data transmission where appropriate; access controls; restricted administrative access; appropriate security procedures.

No method of electronic transmission or storage can be guaranteed to be completely secure, but AUCA takes reasonable steps to protect personal information.

  1. YOUR DATA-PROTECTION RIGHTS

Under the UK GDPR and Data Protection Act 2018, you may have rights including the right to:

request access to your personal data; request correction of inaccurate or incomplete information; request erasure of personal data in certain circumstances; request restriction of processing; object to certain processing; request data portability where applicable; withdraw consent where processing is based on consent; complain to the Information Commissioner’s Office.

To exercise your rights, contact:

info@auca.online

We may need to verify your identity before responding to a request.

  1. COOKIES AND WEBSITE USAGE

AUCA uses third-party platforms including Arlo and Thinkific, which may use cookies and similar technologies to operate websites and learning services.

Cookies may be used for purposes including:

account login and session management; website functionality; security; analytics; understanding how users interact with AUCA services; improving user experience.

Depending on the platform and your browser settings, you may be able to manage or restrict cookies.

Please refer to the relevant platform’s cookie and privacy information for further details.

  1. LINKS TO OTHER WEBSITES

AUCA websites and courses may contain links to external websites or services.

AUCA is not responsible for the privacy practices of third-party websites.

We recommend reviewing the privacy information provided by any external website you visit.

  1. AGE

AUCA e-learning is intended primarily for healthcare professionals and healthcare trainees aged 18 years or over, unless expressly stated otherwise.

  1. CHANGES TO THIS PRIVACY POLICY

AUCA may update this Privacy Policy from time to time to reflect changes in:

our services; technology; legal or regulatory requirements; data-protection practices.

The current version will be published on the AUCA website together with its effective date.

  1. COMPLAINTS

If you have concerns about how AUCA processes your personal data, please contact us first at:

info@auca.online

You also have the right to make a complaint to the UK Information Commissioner’s Office.

Information Commissioner’s Office www.ico.org.uk

  1. CONTACT

For questions about this Privacy Policy, your personal data or your privacy rights, contact:

Advanced Urinary Catheterisation Academy Limited 24 Garth Road Kingston upon Thames KT2 5NY United Kingdom

Email: info@auca.online

Copyright © Advanced Urinary Catheterisation Academy Limited 2026