Privacy Policy

Last updated: 6 May 2026

1. Introduction

This Privacy Policy explains how Global Longevity Academy (“we”, “us”, “our”) collects, uses, and protects your personal data.

This policy applies to all brands operating under Global Longevity Academy, including but not limited to:

Derma Medical
Apex Medical Academy
Newson Health Education

For the purposes of UK data protection law, including the UK GDPR, these entities may act as joint data controllers.

Joint Controller Arrangement

Global Longevity Academy and its associated brands (Derma Medical, Apex Medical Academy, Newson Health Education) operate as joint data controllers. Global Longevity Academy is the lead controller responsible for determining the purposes and means of processing. Each brand is responsible for processing activities specific to its own services. Data subjects may exercise their rights by contacting Global Longevity Academy directly using the details in section 19, regardless of which brand collected their data.

You may contact us at privacy@globallongevityacademy.com for any queries.

2. Data Controller

The data controller responsible for your personal data is:

Global Longevity Academy
111 Park Street, London, England, W1K 7JF

Email: privacy@globallongevityacademy.com

We are not required to appoint a Data Protection Officer. However, we take data protection seriously and have internal responsibility for overseeing compliance.

3. What Personal Data We Collect

We may collect and process the following personal data:

Identity data: name
Contact data: email address, telephone number
Professional data: job role, qualifications, or other information relevant to training and certification
Transaction data: booking and payment details (processed via third-party providers)
Technical data: IP address, browser type, device information
Usage data: how you interact with our website

We collect this data when you:

Complete forms on our website
Book courses or services
Subscribe to marketing communications
Interact with our website

Special Category Data

We do not intentionally collect or process special category data (such as health data). If such data is provided to us inadvertently, it will only be processed where necessary and in accordance with applicable law.

4. Lawful Basis and Purposes for Processing

We process your personal data for the following purposes and lawful bases:

To provide training services and manage bookings – Lawful basis: Contract
To process payments and maintain records – Lawful basis: Contract and Legal obligation
To respond to enquiries and provide customer support – Lawful basis: Legitimate interests
To send marketing communications – Lawful basis: Consent
To analyse website usage (e.g. Google Analytics) – Lawful basis: Consent
To maintain website security and prevent fraud – Lawful basis: Legitimate interests

Legitimate Interests

Where we rely on legitimate interests, we ensure that our interests (such as improving services and ensuring security) are not overridden by your rights and freedoms.

5. How We Use Your Data

We use your personal data to:

Deliver training programmes and services
Manage bookings and payments
Communicate with you
Send marketing (where consent has been given)
Improve our website and services
Maintain security and prevent fraud

6. Data Sharing

We may share your personal data with:

Companies within the Global Longevity Academy group
Third-party service providers (e.g. payment processors, IT systems, learning platforms, marketing tools)
Analytics providers (such as Google Analytics)
Advertising platforms (such as Meta/Facebook)

All third parties are contractually required to protect your data and only process it on our instructions.

We do not sell your personal data.

7. International Data Transfers

Some third-party providers may process personal data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

UK adequacy regulations
Standard Contractual Clauses (SCCs) or UK International Data Transfer Agreements

8. Data Retention

We retain personal data only as long as necessary for the purposes collected, including:

Customer and account data: duration of relationship + up to 6 years
Financial and transaction data: up to 6 years (to comply with legal obligations)
Marketing data: until you withdraw consent or unsubscribe
Technical and analytics data: typically up to 26 months

Where data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time (where applicable)

To exercise your rights, contact: privacy@globallongevityacademy.com

We will respond to all legitimate requests within one month. You will not usually have to pay a fee.

10. Automated Decision-Making

We do not use automated decision-making or profiling in a way that produces legal or similarly significant effects on individuals.

11. Marketing Preferences

You can opt out of marketing communications at any time by:

Clicking the unsubscribe link in emails
Contacting us directly

12. Cookies

We use cookies to improve your experience and analyse website usage. We use:

Necessary cookies – essential for website functionality
Analytics cookies – to understand website usage
Marketing cookies – to deliver relevant advertising

We only place non-essential cookies (analytics and marketing) with your consent, which you provide via our cookie banner. You can withdraw or manage your cookie preferences at any time via the cookie settings on our website.

13. Google Analytics

We use Google Analytics to analyse website traffic and usage patterns. Google Analytics collects data such as IP address, device type, and pages visited. This data is processed based on your consent and helps us improve our services.

You can opt out by visiting: https://support.google.com/analytics/answer/181881

14. Meta (Facebook) Remarketing

We use Meta remarketing services to display adverts to users who have previously visited our website. This relies on cookies and is only activated with your consent.

You can manage your preferences here: https://www.facebook.com/ads/preferences/

15. Payment Information

Payments are processed securely via third-party providers. We do not store full card details on our systems.

16. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.

17. External Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

18. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office: https://www.ico.org.uk

We would, however, appreciate the opportunity to address your concerns first.

19. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted with a revised “last updated” date.

20. Contact Us

If you have any questions about this Privacy Policy, please contact: