How SafeMeds Academy protects learner data

This policy explains what personal data we collect, why we use it, how long we keep it, who helps us process it, and the rights you may have under GDPR and other privacy laws.

SafeMeds Academy is an online training platform for life-science professionals. We aim to collect only the data needed to provide accounts, course access, learner support, security, and future certificate services.

1. Who we are

SafeMeds Academy provides online education and professional training for people working in pharma, biotech, CROs, regulatory affairs, clinical operations, clinical data management, market access, pharmacovigilance, medical writing, and related life-science roles.

For the purposes of this policy, SafeMeds Academy is the controller for personal data collected through this website unless a separate agreement says otherwise.

2. Personal data we collect

Account and profile data

Name, email address, login method, email confirmation status, and account identifiers.

Learning activity

Courses viewed or purchased, lesson progress, completion records, and certificate-related information.

Contact messages

Information you send through contact forms, email, or support requests.

Technical data

Authentication cookies, device/browser information, IP address, security logs, and basic service diagnostics.

Payment data

When checkout is enabled, payment processing is handled by a payment provider. SafeMeds Academy does not intend to store full card numbers.

3. How we use personal data

Create and manage learner accounts.
Authenticate users, including email confirmation and Google sign-in.
Provide course pages, lesson access, progress tracking, and support.
Send account emails such as confirmation, password reset, purchase, and completion messages.
Prepare certificates when a learner completes a course.
Protect the website from misuse, fraud, and security risks.
Improve course content, navigation, and learner experience.
Meet legal, accounting, tax, and compliance obligations where they apply.

4. Legal bases under GDPR

Where GDPR applies, we rely on one or more of these legal bases:

Contract: to provide accounts, course access, learner progress, support, and certificates you request.
Legitimate interests: to secure the service, prevent abuse, improve the platform, and respond to inquiries.
Legal obligation: to keep records required for tax, accounting, consumer protection, or regulatory reasons.
Consent: for optional marketing or optional cookies if these are introduced later.

5. Cookies and authentication

We use essential cookies and similar technologies to keep you signed in, protect your account, and operate the website. These are needed for the service to work. With your explicit permission, we use Google Analytics 4 and Microsoft Clarity as optional, consent-based analytics to understand site usage and improve the product. You can accept, reject, change, or withdraw analytics consent through Cookie settings. Advertising and other non-essential technologies that we do not currently use may be addressed separately if introduced later.

6. Service providers and sharing

We use trusted service providers to run the platform. These may include Supabase for authentication/database services, Vercel for hosting, Google for Google sign-in and YouTube links, and Stripe if checkout is enabled. We share only what is reasonably needed for those providers to perform their services.

We do not sell personal data. We may disclose data if required by law, to protect rights and security, or in connection with a business transfer where appropriate safeguards apply.

7. International transfers

Our service providers may process data in countries outside your country or the European Economic Area. Where GDPR applies, we aim to rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, or equivalent data protection commitments.

8. How long we keep data

We keep personal data only as long as needed for the purposes in this policy. Account and learning data is kept while your account is active. Support messages are kept as long as needed to handle the request and maintain service records. Payment, tax, and legal records may be kept for the periods required by law. Security logs are kept for a limited period unless needed to investigate misuse or protect the service.

9. Your rights

Depending on your location, including under GDPR, you may have the following rights:

Access a copy of personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Ask us to delete data where there is no longer a lawful reason to keep it.
Ask us to restrict or object to certain processing.
Ask for data portability where this applies.
Withdraw consent where processing is based on consent.
Complain to your local data protection authority.

To exercise these rights, email safemedsacademy@gmail.com. We may need to verify your identity before acting on a request.

10. Children

SafeMeds Academy is intended for adults and professional learners. It is not directed to children. If you believe a child has provided personal data, contact us so we can review and delete it where appropriate.

11. Changes to this policy

We may update this policy as the platform grows, including when new course hosting, payment, certificate, email, or analytics features are added. The updated date at the top will show when the policy was last changed.