The Educating GP

Privacy Policy

This notice explains who controls personal data on The Educating GP website, what we collect, why we collect it, who helps us run the service, how long we keep it, and how to exercise your rights.

Quick facts

Last updated
25 April 2026
Controller
NextWave Creators Ltd
Current optional cookies
Beehiiv newsletter embed only

Controller details

Who is responsible for this site?

The Educating GP is operated by NextWave Creators Ltd. This privacy notice applies to the public website, newsletter signup flows, sponsorship enquiries, and related course or funnel pages on theeducatinggp.com.

Controller

NextWave Creators Ltd trading as The Educating GP

Companies House number

16445595

Registered office

167-169 Great Portland Street, 5th Floor, London, United Kingdom, W1W 5PF

Data protection / DPO contact

hello@theeducatinggp.com

Privacy matters are handled through the data protection contact listed above. We do not use this site to collect patient records or provide personal medical care. If you need clinical advice, contact your own GP, NHS 111, or emergency services where appropriate.

Lawful basis

What we process and why

Website delivery and security

Data

IP address, browser/device data, request logs, and security event data.

Purpose

To load pages, keep the site available, prevent abuse, and diagnose technical problems.

Lawful basis

Legitimate interests in running a secure public website.

Newsletter signup and lead magnet delivery

Data

Name, email address, signup source, subscription status, and email engagement data.

Purpose

To send the free guide, deliver the newsletter, manage unsubscribes, and understand whether subscribers are still engaging.

Lawful basis

Consent.

Business, sponsor, and support enquiries

Data

Name, work email, organisation, and the contents of your message.

Purpose

To reply to enquiries, discuss sponsorships or partnerships, and manage reasonable follow-up.

Lawful basis

Legitimate interests, and where you ask us to take steps before a contract, contractual necessity.

Course, checkout, and payment operations

Data

Billing details, order records, learner account details, and payment status.

Purpose

To provide paid products, manage access, process payments, issue invoices, and keep tax and accounting records.

Lawful basis

Contractual necessity and legal obligation.

Cookie and consent preferences

Data

Your local consent choice for optional third-party embeds.

Purpose

To remember whether optional third-party content such as the Beehiiv embed may load on this device.

Lawful basis

Legal obligation and legitimate interests in recording and respecting your privacy choice.

Processors

Third parties we use to run the service

Cloudflare

Hosting, CDN, performance, and security services for the website.

Beehiiv

Newsletter signup, email delivery, and subscriber management.

Stripe

Payment processing and fraud prevention when paid offers are live.

Thinkific or the course platform shown at checkout

Course access, learner accounts, and product delivery when paid products are live.

We review vendors as the site evolves. If we change the processors used in a material way, we will update this notice.

Retention

Retention schedule

Website security logs

Usually up to 90 days, and longer only where we need records for abuse prevention or incident investigation.

Newsletter and lead magnet records

Until you unsubscribe or withdraw consent. We may keep a minimal suppression record afterwards so we do not accidentally email you again.

Business or support enquiries

Usually up to 24 months after the last meaningful contact unless a longer period is needed for a live contract or dispute.

Course, order, and invoice records

Usually up to 6 years after the end of the relevant financial year where we need the data for tax, accounting, audit, or legal claims.

Cookie preference record

Up to 6 months on this device, or until you change your choice or clear browser storage.

We review retention regularly. Where data is no longer needed, we delete it, anonymise it, or reduce it to the minimum record needed to honour opt-outs, defend legal claims, or meet tax and accounting duties.

International transfers

When data leaves the UK

Some suppliers may process personal data outside the UK, including in the United States. Where that happens, we rely on an appropriate transfer mechanism such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework where relevant, or contractual safeguards such as the UK IDTA or the UK addendum to standard contractual clauses.

We do not knowingly upload patient records or special-category clinical files through this website stack. The site is designed for education, signups, and commercial enquiries, not for handling confidential medical histories.

Your rights

Access, DSARs, and other requests

You can

  • ask for a copy of the personal data we hold about you
  • ask us to correct inaccurate or incomplete data
  • ask us to delete data when we no longer need it or where consent is withdrawn
  • ask us to restrict or pause processing in some situations
  • object to processing based on legitimate interests
  • ask for portability where processing is based on consent or contract and carried out by automated means
  • withdraw consent at any time for consent-based processing, including newsletter emails

DSAR procedure

  1. 1. Email hello@theeducatinggp.com with the subject line Privacy / DSAR and tell us what you want.
  2. 2. Include enough detail for us to identify the record set involved. We may ask for reasonable proof of identity before releasing personal data.
  3. 3. We aim to respond within one calendar month. If the request is complex or you have made multiple requests, we may extend by up to two further months and will explain why.

Complaint process

If you are unhappy with how we use data

Please contact us first at hello@theeducatinggp.com so we can try to fix the issue quickly.

You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Medical boundary

Do not send medical records through the site

The Educating GP is a public education platform. It is not a patient portal and it is not designed to receive special-category clinical records, diagnostic images, or urgent medical information.

If you send highly sensitive medical information through a contact route connected to this site, we may delete, redact, or redirect it because the service is not set up for personal care or ongoing clinical case management.

Cookies

How cookie choices work on this site

Strictly necessary

We store your privacy preference locally so we can remember your choice. This stays on because it is needed to respect the setting you make.

Optional third-party embed

If you allow optional cookies, pages that offer the newsletter may load the Beehiiv signup embed. If you reject optional cookies, the site keeps direct signup and PDF links available instead.

We do not currently run third-party advertising or retargeting cookies on the site. If that changes, this notice and the cookie banner will be updated before those tools are switched on.

Cookies and similar storage

Choose what loads on this site

We always use the minimum local storage needed to remember your privacy choice and keep the site working. The only optional third-party storage currently used on this site comes from the Beehiiv newsletter embed. If you reject optional cookies, we keep the signup link available but block the embedded form.

You can change this choice at any time. Details are in our Privacy Policy.

Current categories

Strictly necessary

Consent state only. This stays on so we can remember your choice.

Optional third-party embed

Beehiiv newsletter form on pages that offer the free guide.