Privacy Policy

1. Introduction

Meridax Clinical Solutions Ltd (“Meridax”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, contact us, apply for or participate in our training and certification programmes, engage our professional services, work with us, or otherwise interact with Meridax.

It also explains your rights under applicable data protection law.

For the purposes of UK data protection legislation, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, Meridax Clinical Solutions Ltd will generally act as the data controller where we determine the purposes and means of processing your personal data.

Meridax Clinical Solutions Ltd is a company registered in England and Wales under company number 17330031. Our registered office is at 66 Paul Street, London EC2A 4NA, United Kingdom.

Website: www.meridaxclinicals.com
Privacy enquiries: info@meridaxclinicals.com

2. Personal Data We May Collect

Depending on your relationship with Meridax, we may collect and process the following categories of personal data:

Identity and Contact Information

• Name and title
• Postal address
• Email address
• Telephone number
• Other contact information you provide to us

Professional and Educational Information

• Professional background
• Job title and employer
• Educational qualifications
• CV or resume
• Professional registrations or certifications
• Training history
• Assessment and examination results
• Course progress and attendance records
• Certificates or credentials issued by Meridax

Account Information

• Username or account identifier
• Account preferences
• Authentication information
• Records of account activity

Passwords should be stored using appropriate security measures rather than in readable form.

Transaction Information

• Transaction details
• Invoices
• Billing information
• Payment status
• Refunds
• Records relating to purchases

Payment card information may be processed directly by our authorised payment service providers. We do not intend to retain complete payment card details unless necessary and lawfully permitted.

Communications

We may retain communications you have with us, including enquiries, customer-support requests, feedback, complaints and correspondence.

Website and Technical Information

• IP address
• Browser type and version
• Device type
• Operating system
• Website usage information
• Pages visited
• Referring website
• Dates and times of access
• Cookie and similar technology information

Further information about our use of cookies should be provided through our Cookie Policy and cookie consent mechanism.

Recruitment Information

If you apply for employment, consultancy or another role with Meridax, we may collect information contained in your application, including your CV, employment history, qualifications, references and other recruitment-related information.

3. How We Collect Personal Data

• Directly from you when you contact us
• When you complete a form on our website
• When you register for training or certification
• When you create an account
• When you purchase our services
• When you participate in assessments or training
• When you correspond with us
• Automatically when you use our website, subject to applicable cookie requirements
• From organisations with which you work
• From authorised business partners or service providers
• From publicly available sources where permitted by law

Where we receive your personal data from another source, we will provide appropriate privacy information where required by applicable law.

4. How We Use Your Personal Data

• Responding to enquiries
• Registering learners for training and certification programmes
• Delivering training and educational services
• Administering examinations and assessments
• Evaluating course progress and performance
• Issuing and verifying certificates or credentials
• Maintaining learner and certification records
• Processing payments and refunds
• Managing customer accounts
• Providing customer and technical support
• Communicating important information about services or programmes
• Operating and improving our website and digital services
• Maintaining the security of our systems
• Detecting or preventing fraud and misuse
• Administering contracts with customers, suppliers and business partners
• Managing recruitment
• Maintaining business and financial records
• Complying with legal and regulatory requirements
• Establishing, exercising or defending legal claims
• Sending marketing communications where permitted by law

We will not use personal data for materially incompatible purposes without an appropriate lawful basis and, where required, providing additional notice.

5. Lawful Bases for Processing

Contract: Processing is necessary to enter into or perform a contract with you, such as providing a training programme or certification service you have purchased.

Legal obligation: Processing is necessary for us to comply with a legal or regulatory obligation.

Legitimate interests: Processing is necessary for our legitimate business interests or those of another party, provided those interests are not overridden by your rights and freedoms. These interests may include operating our business, maintaining security, improving services, preventing fraud and managing customer relationships.

Consent: Where the law requires your consent for particular processing, such as certain electronic marketing or non-essential cookies.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Marketing Communications

Where permitted by law, we may use your contact information to send you information about Meridax training programmes, certification opportunities, professional development services, events or related services.

Where consent is required, we will obtain it before sending such communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe facility contained in the communication or contacting us at info@meridaxclinicals.com.

Transactional or service-related communications, such as communications necessary to administer a course you have purchased, are not marketing messages and may continue where necessary.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate the website, maintain security, remember preferences, understand website performance and, where applicable, support analytics or marketing.

Cookies that are not strictly necessary will only be used where permitted under applicable law and, where required, after obtaining your consent.

Further details should be provided in our separate Cookie Policy and through our website’s cookie-management tools.

8. Sharing Personal Data

• Website hosting and IT providers
• Learning management system providers
• Payment processors
• Email and communications providers
• Cloud and data-storage providers
• Professional advisers, including accountants and lawyers
• Training, examination or certification service providers
• Contractors and consultants
• Regulators, courts, law-enforcement authorities or government bodies where legally required
• Potential purchasers, investors or advisers in connection with a proposed corporate transaction

Third-party processors acting on our behalf are expected to process personal data only in accordance with our instructions and appropriate contractual and security requirements.

We do not sell personal data to third parties.

9. International Transfers

Some of our suppliers, systems, customers or business partners may operate outside the United Kingdom.

Where personal data is transferred internationally, we will take appropriate steps required by applicable data protection law to protect the information.

Depending on the destination and circumstances, these measures may include recognised adequacy arrangements, approved contractual safeguards such as the UK International Data Transfer Agreement or applicable UK Addendum, or another lawful transfer mechanism.

You may contact us for further information about safeguards applicable to relevant international transfers.

10. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful access, alteration, disclosure, loss or destruction.

• Access controls
• Authentication controls
• Encryption
• Secure hosting
• Backups
• Staff confidentiality requirements
• Security monitoring
• Data minimisation
• Procedures for managing suspected personal-data breaches

Access to personal data is limited to individuals and service providers who require access for legitimate business purposes.

No internet-based service can guarantee absolute security, and users should also take appropriate steps to protect their accounts and devices.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including satisfying legal, regulatory, accounting, contractual and reporting requirements.

Retention periods may vary according to the type of information and the reason it is processed.

• The amount and nature of the personal data
• Its sensitivity
• The purpose for which it is processed
• Whether that purpose can be achieved through other means
• Contractual requirements
• Applicable limitation periods
• Legal and regulatory obligations

Where personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our applicable retention procedures.

12. Your Data Protection Rights

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Request deletion of personal data
• Request restriction of processing
• Object to certain processing
• Request transfer of certain personal data to you or another organisation
• Withdraw consent where processing is based on consent
• Raise concerns with the relevant data protection supervisory authority

These rights are not absolute and may be subject to legal conditions and exemptions.

Your Right to Object

Where we process your personal data on the basis of legitimate interests, you may have the right to object to that processing based on your particular circumstances.

You also have the right to object to the use of your personal data for direct marketing purposes at any time.

To exercise your rights, contact Meridax Clinical Solutions Ltd at info@meridaxclinicals.com or visit www.meridaxclinicals.com.

We may need to verify your identity before responding to a request.

13. Complaints

If you have concerns about how Meridax processes your personal data, please contact us first at info@meridaxclinicals.com.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO), via ico.org.uk.

You may also have the right to complain to another competent data protection authority depending on where you live, work or where an alleged infringement occurred.

14. Children’s Privacy

Meridax’s professional training, certification and related services are generally intended for adults and professionals.

We do not knowingly seek to collect personal data from children through services that are not intended for them.

If we become aware that children’s personal data has been collected in circumstances where additional consent, notices or safeguards are legally required, we will take appropriate steps to address the processing.

15. Automated Decision-Making

Unless specifically disclosed to you, Meridax does not intend to make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.

If we introduce such processing, we will provide the information and safeguards required by applicable data protection law.

16. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

Meridax is not responsible for the privacy practices of independent third parties. You should review the relevant third party’s privacy information before providing personal data through its services.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operations, technology, services, legal obligations or data-protection requirements.

The latest version will be published on our website and the “Last updated” date at the beginning of this policy will be revised accordingly.

Where a change materially affects how we process personal data, we will take appropriate steps to bring the change to the attention of affected individuals where required.

18. Contact Us

For questions about this Privacy Policy, our processing of personal data or the exercise of your data-protection rights, please contact:

Meridax Clinical Solutions Ltd
Registered in England & Wales, company number 17330031
Registered office: 66 Paul Street, London EC2A 4NA
Website: www.meridaxclinicals.com
Email: info@meridaxclinicals.com

© 2026 Meridax Clinical Solutions Ltd. All rights reserved.