Privacy & cookies

Last updated: 15 September 2026

This page explains what personal data PharmProfessionals Education & Training Specialists Ltd (“PPets”, “we”) collects on ppets.co.uk, why we collect it, how long we keep it, and what your rights are. We’ve tried to keep it plain English. If anything is unclear, email admin@ppets.co.uk.

Our training apps (for example, the Pharmacy Counter app) have their own in-app privacy notices. This page covers the marketing site at ppets.co.uk only.

1. Who we are

PharmProfessionals Education & Training Specialists Ltd (registered in England & Wales, company number 14852008) is the data controller for any personal data collected via this site.

Email: admin@ppets.co.uk
Website: ppets.co.uk
Country: United Kingdom

2. What we collect, and why

2.1 If you fill in the contact form

When you submit the form on the contact section, we collect:

Your name and email address (so we can reply)
Your pharmacy or organisation name (optional, helps us tailor a response)
The topic you selected and your message

Lawful basis: legitimate interests (UK GDPR Art. 6(1)(f)) — specifically, responding to enquiries about our products. If your enquiry leads to a customer relationship, the basis becomes performance of a contract (Art. 6(1)(b)).

If your enquiry is about one of our courses, we may also send you occasional course updates unless you tell us not to. See section 2.5 below.

Form submissions are processed by Formspree (Formspree, Inc., USA), which forwards them to admin@ppets.co.uk. Formspree retains submissions until we delete them, in line with their privacy policy.

2.2 If you apply for a course

When you submit an application through our course application form, we collect:

Your name, email address, and phone number (to process your application and contact you)
The course you’re applying for and how you plan to fund it
Your pharmacy or employer name and your job role (both qualifications are assessed in the workplace, so we need to know you’re working in a pharmacy)
Whether any of your qualifications were awarded outside the UK
Anything you add in the notes field

Lawful basis: taking steps at your request before entering into a contract (UK GDPR Art. 6(1)(b)). If you enrol, we continue processing your data to deliver the course under the same basis, and we keep records the awarding body requires under legitimate interests (Art. 6(1)(f)).

The application form itself asks for no documents. Once we’ve read your application, a member of our team emails you to ask for your qualification certificates and to arrange a short call — so any certificates you send us arrive by email rather than through the form. Applications are stored in Google Firebase (Cloud Firestore, Google LLC, USA), with access restricted to authorised PPets staff. When you apply, a notification email containing your application summary is sent to our Microsoft 365 mailbox. Please don’t include sensitive information (such as health details) in your application unless we ask for it — for example, when arranging reasonable adjustments.

If you’re not yet working in a pharmacy. The Level 2 and Level 3 qualifications are assessed on the job, so we can’t enrol you until you’re employed in a pharmacy. If you tell us that on the form, we simply point you to our Get Into Pharmacy course, which you can enrol on yourself — we don’t collect or store anything from you at that point.

2.3 If you accept analytics and advertising cookies

If you click “Accept all” on the cookie banner, we load the following tools:

Google Analytics 4 — aggregated visitor counts, traffic sources, popular pages, anonymised IP addresses, and basic device/browser info. We use it to understand which content is useful and where visitors come from. Provided by Google LLC (USA).
Microsoft Clarity — anonymous heatmaps and session recordings showing how people scroll, click, and move through the site. Clarity automatically masks form fields and other sensitive content. We use it to spot usability problems. Provided by Microsoft Corporation (USA).
Meta Pixel — tells Meta (Facebook and Instagram) which pages you viewed on this site and whether you started or submitted a course application. We use it to measure whether our adverts reach people who go on to apply, and to show follow-up adverts to people who looked at a course page but didn’t apply. It does not receive the answers you type into the application form. Provided by Meta Platforms Ireland Ltd, which may transfer data to Meta Platforms Inc (USA). This is an advertising cookie, not just an analytics one — if you would rather not be included, choose Essential only.

Lawful basis: consent (UK GDPR Art. 6(1)(a) and PECR Reg. 6). You can withdraw consent at any time by clicking Manage cookies below.

2.4 What loads automatically (no cookies)

Our hosting provider, Firebase Hosting (Google LLC), keeps short-term server logs of HTTP requests — including IP addresses — for security, fraud prevention, and basic operational metrics. These logs are not used by us to identify individuals. Lawful basis: legitimate interests (running and securing the site).

2.5 If we send you course updates

When you enquire about a course or submit an application, we ask whether you would rather not receive marketing from us. Unless you tell us not to, we may send you occasional emails about PPets courses, funding changes and pharmacy training news.

Lawful basis: legitimate interests (UK GDPR Art. 6(1)(f)) — keeping people who have asked about our courses informed about them. Under the Privacy and Electronic Communications Regulations we rely on the soft opt-in at Reg. 22(3): we obtained your details while you were enquiring about buying a course, we only market our own similar courses and services, and you are given the chance to refuse both when we collect your details and in every email we send.

We only market our own pharmacy education and training. We never pass your details to another organisation to market to you.

Opting out. Every marketing email has an unsubscribe link, and you can also email admin@ppets.co.uk at any time. Opting out of marketing does not stop the emails we need to send you about an application or a course you are enrolled on.

Our marketing emails are sent using Zoho Campaigns (Zoho Corporation B.V., EU data centre), and our contact records are held in Zoho CRM on the same EU servers.

2.6 If you add a score to the CPD Portal games leaderboard

The games at ppets.co.uk/cpd/games are free to play and record nothing unless you choose to add a score to the leaderboard. If you do, we store the display name you type, your score, your time and the date. These are shown publicly on the games page, so we suggest you do not use your full name. No account, email address or other personal detail is collected. The scores are stored in our Firebase database (see section 4). If you want a score removed, email admin@ppets.co.uk with the display name and game, and we will delete it.

3. Cookies in detail

The site uses no cookies until you make a choice on the banner. localStorage stores your cookie choice (the value ppets_cookie_consent = "all" or "essential") so we don’t ask you again on every visit. localStorage isn’t technically a cookie, but the law treats it equivalently — we consider this storage essential and rely on the strictly necessary exemption under PECR Reg. 6(4).

Google Consent Mode. Before you make a choice, or if you choose Essential only, the Google tag on this site runs in a “consent denied” state. In that state it sets no cookies and does not read any identifier from your device; it sends Google a cookieless signal that a page was viewed or a form was submitted, without a persistent identifier, which Google uses to estimate overall visitor and conversion numbers. Nothing changes about what you see. If you choose Accept all, the tag switches to the full analytics and advertising cookies described in section 2.3.

Cookie / storage	Set by	Purpose	Lifespan
`ppets_cookie_consent` (localStorage)	ppets.co.uk	Remembers your cookie choice	Until you clear browser storage
`_ga`, `_ga_<ID>`	Google Analytics	Distinguishes anonymous visitors and sessions	Up to 2 years
`_clck`, `_clsk`, `CLID`, `MUID`, `ANONCHK`, `SM`, `MR`	Microsoft Clarity / Bing	Session recording, heatmap aggregation, ad-frequency capping	Up to 1 year
`_fbp`, `fr`	Meta (Facebook)	Measures advert performance and enables retargeting	Up to 3 months

Manage your choice: click below to bring the cookie banner back and change your preference.

3a. The course assistant (chatbot)

Some pages carry a chat assistant that answers questions about our courses and apps. It is not available on the CPD Portal.

What is sent. Your question, the page you asked it from, and the earlier messages in that conversation. These go to Anthropic, which runs the Claude model that writes the answer.
What we store. We keep a copy of the questions and answers so we can see what people ask and improve the course information on this site. We store a short, non-reversible fingerprint of your IP address to stop misuse; we do not store the address itself.
Please do not type personal details. The assistant does not need your name, date of birth, payment details or any health information, and asks you not to provide them. If you do, they will appear in the stored conversation. To apply for a course, use the application form instead, which is designed to handle your details properly.
No decisions are made about you. The assistant cannot accept an application, confirm a place, agree a refund or make any commitment. It gives information only. There is no automated decision-making within the meaning of Article 22 UK GDPR.
It is not clinical advice. The assistant will not answer questions about medicines, symptoms or patients.
Lawful basis. Legitimate interests — answering enquiries about our courses and improving the information we publish.
Anthropic. Your question is processed by Anthropic to generate a reply. Anthropic does not use data submitted through its API to train its models. See their privacy policy.

3b. The pay calculator

Our pay calculator asks for your name and email so we can send you your result and follow up about our courses.

What we collect. Your name, your email address, and the figures you entered (what you earn now, the rate you compared against and your weekly hours). The figures are stored alongside your enquiry so we can have a useful conversation with you.
Where it goes. Straight into our CRM, Zoho, as an enquiry. Nobody else receives it.
Opting out. There is a tick box on the form if you would rather we did not get in touch; tick it and we will not. You can also email admin@ppets.co.uk at any time to be removed.
Lawful basis. Legitimate interests — responding to an enquiry about our courses.
It is a guide, not advice. The result is an estimate based on published NHS pay scales and the numbers you enter. It is not a promise of earnings.

4. International transfers

Google, Microsoft, Meta, Anthropic and Formspree are based in, or transfer data to, the United States. They process EU/UK data under the UK–US Data Bridge / EU–US Data Privacy Framework, with their own Standard Contractual Clauses where required. Firebase Hosting may serve traffic from EU edge servers but data ultimately routes via Google’s global infrastructure. Course application data is stored in Google’s United States data centres under the same safeguards.

5. How long we keep things

Course assistant conversations: kept for up to 12 months so we can improve the course information on this site, then deleted. Deleted sooner on request.
Contact form submissions: kept in our email inbox for as long as needed to handle the enquiry, then archived for up to 3 years for record-keeping. Deleted on request.
Course applications that don’t lead to enrolment: deleted within 6 months of the decision, or sooner on request.
Enrolled learner records (including assessment evidence): kept for the duration of your course and up to 6 years after completion or withdrawal, to meet awarding body quality-assurance requirements and handle any later queries about your qualification.
Marketing contact details and permissions: kept while you remain on our list and for 3 years after your last interaction with us, then deleted. If you opt out we keep a minimal suppression record indefinitely, so we do not email you again by mistake.
Analytics data: 14 months in Google Analytics; 90 days in Microsoft Clarity (recordings).
Server logs: typically 30 days at Firebase Hosting.

6. Who we share data with

We don’t sell your data. We share only what’s necessary with the processors listed in this page (Formspree, Google, Microsoft, Zoho) and our domain provider (GoDaddy) for technical operation.

If you enrol on an accredited course, we also share your registration details (name, date of birth where required, and course) with Open Awards, the awarding body, so you can be registered for your qualification and certificated. Open Awards is a data controller in its own right for that data.

7. Your rights under UK GDPR

You have the right to:

Ask what data we hold about you (right of access)
Have inaccurate data corrected (rectification)
Have your data deleted (erasure)
Restrict or object to processing
Receive a copy in a portable format (data portability)
Withdraw consent at any time (for analytics: use the Manage cookies button above)
Object to direct marketing at any time, which is an absolute right — if you ask us to stop, we stop

To exercise any of these, email admin@ppets.co.uk. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Children

This site is aimed at pharmacy professionals. We don’t knowingly collect data from people under 18.

9. Changes to this notice

We’ll update the “Last updated” date at the top whenever we change this page. Material changes will be flagged on the homepage.

10. Contact us

Questions, requests, or just want to talk it through? admin@ppets.co.uk.