Who we are

Arcas Education Limited (“Arcas”, “we”, “us”, “our”) is a London-based medical education company.

Data Controller: Arcas Education Limited.

Website(s): https://arcasedu.com

Contact: info@arcasedu.com / WhatsApp +44 7446 230829.

What personal data we collect and why we collect it

We collect only the data we need to operate our website, deliver our courses and respond to enquiries.

Uploads: if you upload images/documents, please avoid EXIF/location data. Visitors might download and extract embedded data from uploaded files.

Enquiry & contact forms: name, professional title/specialty, email, phone/WhatsApp, message and related metadata — to respond to you and keep records of our communications (legitimate interests; performance of a contract).

Application & enrolment forms (observerships, fellowships, courses): identification and contact details, CV and credentials, professional licences, travel/visa status you choose to share, payment status and attendance — to assess eligibility, secure placements, arrange logistics and issue certificates (performance of a contract; legitimate interests; legal obligation for accounting).

Payments: we process payments via third-party providers (e.g., card processors). We receive limited information such as transaction ID, amount, status and payer details; full card data is handled by the payment processor and never stored by us (performance of a contract; legal obligation).

Marketing preferences: your consent choices, email opens/clicks (if you subscribe) — to send updates you requested and to honour opt-outs (consent; legitimate interests).

Technical data: IP address, browser/user-agent, pages viewed, time stamps and similar logs — to secure our site, prevent abuse and improve performance (legitimate interests).

Comments

Comments are currently disabled on our website. If enabled in future, we may collect the data shown in the comment form, the visitor’s IP address and browser user-agent to help spam detection. An anonymised string (hash) may be provided to avatar services to display your profile image after approval.

Media

If you upload images/documents to the website, you should avoid uploading files with embedded location data (EXIF GPS). Visitors to the website may download and extract any location data from images on the website.

Cookies

We use essential cookies to make the site work (e.g., security, load-balancing, form submission). If you log in to an account (e.g., instructors/admins), we set cookies to remember your login and screen preferences. These typically last from the browser session up to one year.

Where required by law, we will ask for your consent for any non-essential cookies and you can withdraw it at any time through your browser or our cookie banner settings.

If you leave a comment or edit a post

(Only applicable if comments/accounts are enabled.) We may store your name, email and site in cookies for convenience, temporary login cookies, and additional cookies when editing content. Some cookies expire at the end of your session; others may last up to a year.

Embedded content from other websites

Articles on this site may include embedded content (e.g., videos, images, posts). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed third-party tracking and monitor your interaction with that embedded content, including if you have an account and are logged in to that website.

Who we share your data with

We only share data with trusted service providers who help us run our business, under contracts that protect your information. These include:

event venues/universities/hospitals strictly for course administration (participant lists, certificate details, lab access). We may also share data where required to comply with the law, to protect our rights, or in connection with corporate transactions.

website hosting, security and backup providers;

form, CRM and workflow tools;

email and messaging services;

payment processors;

analytics and performance tools (if used);

How long we retain your data

• Enquiries and support correspondence: up to 24 months from last contact.
• Application & enrolment records, attendance and certification: up to 6 years after the end of the course/placement (accounting/legal record-keeping).
• Transaction records (invoices, payment data): 6 years.
• Marketing preferences: until you unsubscribe or ask us to delete them.
• Security and server logs: typically 12 months. Back-ups may retain data for a limited additional period for disaster recovery.
  

What rights you have over your data (UK GDPR)

You have the right to access, rectify, erase, restrict or object to processing, and to data portability in certain cases. Where we rely on consent, you can withdraw it at any time. To exercise your rights, contact info@arcasedu.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk.

Where your data is sent

Visitor messages and submissions may be checked through automated spam detection and security services. In limited cases, your data may be transferred outside the UK (see “International transfers”).

International transfers

Arcas operates internationally and some course administration, faculty coordination or support may be handled in countries outside the UK (for example, Türkiye and the EU). When we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent measures, and we ensure recipients protect your data to UK GDPR standards.

How we protect your data

We use appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege policies, staff confidentiality commitments and regular backups.

Children’s privacy

Our services are intended for professional adults (18+). We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page and will show the “Last updated” date.

How to contact us

Questions about this policy or your data? Email info@arcasedu.com or message us on WhatsApp +44 7446 230829.