Privacy Policy | Academyium

1. Who We Are

Academyium Ltd ("Academyium", "we", "us") is a company registered in Ireland (CRO 775956). Our registered office is at Rosetown, Athgarvan, Newbridge, Co. Kildare, W12 X447, Ireland. We operate the website at academyium.com and provide professional medical training courses and conferences.

For data protection enquiries contact us at: courses@academyium.com.

2. Personal Data We Collect

Registration data: full name, email address, phone number, professional role, and any information you submit when registering for a course or conference.
Volunteer data: name, email, phone, hospital or university, grade/year, role type, dietary requirements, and attendance preferences submitted when volunteering at an event. This may include health-adjacent preferences (dietary needs) which we treat with additional care.
Payment data: billing name and address. Card details are processed directly by Revolut and are never stored on our servers.
Communications: messages you send us via our contact form or by email.
Feedback and reviews: survey responses and testimonials you submit after attending an event.
Usage data: IP address, browser type, pages visited, and referring URLs collected automatically when you use the website (see Section 7).

3. Legal Basis for Processing

We process your personal data under the following lawful bases (GDPR Art. 6):

Contract (Art. 6(1)(b)): to register you for a course or conference, process payment, issue receipts, and deliver the services you have purchased.
Legitimate interests (Art. 6(1)(f)): to communicate important updates about events you are registered for, and to improve our services.
Consent (Art. 6(1)(a)): to send you marketing emails about future courses and events. You may withdraw consent at any time.
Legal obligation (Art. 6(1)(c)): to retain financial records as required by Irish law.

4. How We Use Your Data

Register you for courses and conferences.
Process and confirm payments.
Send pre-event information, reminders, and post-event resources.
Issue CPD certificates and attendance records.
Respond to your enquiries.
Send marketing communications about our future events (with your consent).
Improve our website and services through anonymised analytics.
Comply with legal and regulatory obligations.

5. Sharing Your Data

We do not sell your personal data. We may share it with:

Revolut Ltd — payment processing (PCI-DSS compliant; card data never passes through our servers).
Brevo (Sendinblue SAS) — transactional and marketing email delivery (EU-based processor).
Google LLC — our website loads fonts from Google Fonts (fonts.googleapis.com), which may transmit your IP address to Google servers in the US. Google's privacy policy applies: policies.google.com/privacy.
Venue partners — where strictly necessary to coordinate course logistics.
Professional accreditation bodies — solely to issue CPD/CME credits at your request.
Authorities — if required by law or court order.

6. Data Retention

We retain personal data only as long as necessary:

Registration and attendance records: 6 years (Irish tax law).
Volunteer records: up to 2 years after the event, or until you request erasure.
Marketing consent records: until you withdraw consent or 3 years of inactivity.
Website usage logs: 13 months.

7. Cookies

We use cookies and similar technologies to operate the website and understand how visitors use it. Please see our Cookie Policy for full details and instructions on how to manage your preferences.

8. Your Rights

Under GDPR you have the right to:

Access — obtain a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data in certain circumstances.
Restriction — ask us to limit how we use your data.
Portability — receive your data in a machine-readable format.
Object — object to processing based on legitimate interests or for direct marketing.
Withdraw consent — at any time where processing is based on consent, without affecting prior processing.

To exercise any right, email us at courses@academyium.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Irish Data Protection Commission (DPC): www.dataprotection.ie.

9. International Transfers

Some of our third-party processors operate outside the EEA. Where personal data is transferred outside the EEA we ensure appropriate safeguards are in place — including EU Standard Contractual Clauses or adequacy decisions — as required by GDPR Chapter V. Specific transfers include:

Revolut Ltd — headquartered in the UK (UK GDPR adequacy); some processing may occur in the EEA.
Google LLC (Google Fonts) — US; covered by Google's EU Standard Contractual Clauses.
Brevo (Sendinblue SAS) — EU-based; no cross-border transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will always reflect the most recent version. We will notify registered users of material changes by email.

11. Contact Us

Academyium Ltd
Rosetown, Athgarvan, Newbridge, Co. Kildare, W12 X447, Ireland
CRO 775956
Email: courses@academyium.com