Privacy & cookies

Last updated: 27 July 2026

This page explains what personal data PharmProfessionals Education & Training Specialists Ltd (“PPets”, “we”) collects on ppets.co.uk, why we collect it, how long we keep it, and what your rights are. We’ve tried to keep it plain English. If anything is unclear, email admin@ppets.co.uk.

Our training apps (for example, the Pharmacy Counter app) have their own in-app privacy notices. This page covers the marketing site at ppets.co.uk only.

1. Who we are

PharmProfessionals Education & Training Specialists Ltd (registered in England & Wales, company number 14852008) is the data controller for any personal data collected via this site.

Email: admin@ppets.co.uk
Website: ppets.co.uk
Country: United Kingdom

2. What we collect, and why

2.1 If you fill in the contact form

When you submit the form on the contact section, we collect:

Your name and email address (so we can reply)
Your pharmacy or organisation name (optional, helps us tailor a response)
The topic you selected and your message

Lawful basis: legitimate interests (UK GDPR Art. 6(1)(f)) — specifically, responding to enquiries about our products. If your enquiry leads to a customer relationship, the basis becomes performance of a contract (Art. 6(1)(b)).

Form submissions are processed by Formspree (Formspree, Inc., USA), which forwards them to admin@ppets.co.uk. Formspree retains submissions until we delete them, in line with their privacy policy.

2.2 If you apply for a course

When you submit an application through our course application form, we collect:

Your name, email address, and phone number (to process your application and contact you)
The course you’re applying for and how you plan to fund it
Your pharmacy or employer name and your job role (both qualifications are assessed in the workplace, so we need to know you’re working in a pharmacy)
Whether any of your qualifications were awarded outside the UK
Anything you add in the notes field

Lawful basis: taking steps at your request before entering into a contract (UK GDPR Art. 6(1)(b)). If you enrol, we continue processing your data to deliver the course under the same basis, and we keep records the awarding body requires under legitimate interests (Art. 6(1)(f)).

The application form itself asks for no documents. Once we’ve read your application, a member of our team emails you to ask for your qualification certificates and to arrange a short call — so any certificates you send us arrive by email rather than through the form. Applications are stored in Google Firebase (Cloud Firestore, Google LLC, USA), with access restricted to authorised PPets staff. When you apply, a notification email containing your application summary is sent to our Microsoft 365 mailbox. Please don’t include sensitive information (such as health details) in your application unless we ask for it — for example, when arranging reasonable adjustments.

If you’re not yet working in a pharmacy. The Level 2 and Level 3 qualifications are assessed on the job, so we can’t enrol you until you’re employed in a pharmacy. If you tell us that on the form and press “Keep me posted”, we store only your name, email address, phone number (if you gave one), and the course you were interested in — nothing else from the form. We use it for one purpose: to email you about getting into a pharmacy role and about our Get Into Pharmacy course. If instead you sign up for Get Into Pharmacy from the application form, your name, email, phone number (if given) and chosen package are sent to us through Formspree (as described in 2.1), and we keep the same short record in Firebase so we can match it to any later application. Lawful basis: taking steps at your request before entering into a contract (Art. 6(1)(b)). We delete these details within 3 months if you don’t go on to apply, or straight away if you ask us to at admin@ppets.co.uk.

2.3 If you accept analytics and advertising cookies

If you click “Accept all” on the cookie banner, we load the following tools:

Google Analytics 4 — aggregated visitor counts, traffic sources, popular pages, anonymised IP addresses, and basic device/browser info. We use it to understand which content is useful and where visitors come from. Provided by Google LLC (USA).
Microsoft Clarity — anonymous heatmaps and session recordings showing how people scroll, click, and move through the site. Clarity automatically masks form fields and other sensitive content. We use it to spot usability problems. Provided by Microsoft Corporation (USA).
Meta Pixel — tells Meta (Facebook and Instagram) which pages you viewed on this site and whether you started or submitted a course application. We use it to measure whether our adverts reach people who go on to apply, and to show follow-up adverts to people who looked at a course page but didn’t apply. It does not receive the answers you type into the application form. Provided by Meta Platforms Ireland Ltd, which may transfer data to Meta Platforms Inc (USA). This is an advertising cookie, not just an analytics one — if you would rather not be included, choose Essential only.

Lawful basis: consent (UK GDPR Art. 6(1)(a) and PECR Reg. 6). You can withdraw consent at any time by clicking Manage cookies below.

2.4 What loads automatically (no cookies)

Our hosting provider, Firebase Hosting (Google LLC), keeps short-term server logs of HTTP requests — including IP addresses — for security, fraud prevention, and basic operational metrics. These logs are not used by us to identify individuals. Lawful basis: legitimate interests (running and securing the site).

3. Cookies in detail

The site uses no cookies until you make a choice on the banner. localStorage stores your cookie choice (the value ppets_cookie_consent = "all" or "essential") so we don’t ask you again on every visit. localStorage isn’t technically a cookie, but the law treats it equivalently — we consider this storage essential and rely on the strictly necessary exemption under PECR Reg. 6(4).

Cookie / storage	Set by	Purpose	Lifespan
`ppets_cookie_consent` (localStorage)	ppets.co.uk	Remembers your cookie choice	Until you clear browser storage
`_ga`, `_ga_<ID>`	Google Analytics	Distinguishes anonymous visitors and sessions	Up to 2 years
`_clck`, `_clsk`, `CLID`, `MUID`, `ANONCHK`, `SM`, `MR`	Microsoft Clarity / Bing	Session recording, heatmap aggregation, ad-frequency capping	Up to 1 year
`_fbp`, `fr`	Meta (Facebook)	Measures advert performance and enables retargeting	Up to 3 months

Manage your choice: click below to bring the cookie banner back and change your preference.

4. International transfers

Google, Microsoft, Meta, and Formspree are based in, or transfer data to, the United States. They process EU/UK data under the UK–US Data Bridge / EU–US Data Privacy Framework, with their own Standard Contractual Clauses where required. Firebase Hosting may serve traffic from EU edge servers but data ultimately routes via Google’s global infrastructure. Course application data is stored in Google’s United States data centres under the same safeguards.

5. How long we keep things

Contact form submissions: kept in our email inbox for as long as needed to handle the enquiry, then archived for up to 3 years for record-keeping. Deleted on request.
Course applications that don’t lead to enrolment: deleted within 6 months of the decision, or sooner on request.
“Keep me posted” details (name and email from someone not yet working in a pharmacy): deleted within 3 months if no application follows, or sooner on request.
Enrolled learner records (including assessment evidence): kept for the duration of your course and up to 6 years after completion or withdrawal, to meet awarding body quality-assurance requirements and handle any later queries about your qualification.
Analytics data: 14 months in Google Analytics; 90 days in Microsoft Clarity (recordings).
Server logs: typically 30 days at Firebase Hosting.

6. Who we share data with

We don’t sell your data. We share only what’s necessary with the processors listed in this page (Formspree, Google, Microsoft) and our domain provider (GoDaddy) for technical operation.

If you enrol on an accredited course, we also share your registration details (name, date of birth where required, and course) with Open Awards, the awarding body, so you can be registered for your qualification and certificated. Open Awards is a data controller in its own right for that data.

7. Your rights under UK GDPR

You have the right to:

Ask what data we hold about you (right of access)
Have inaccurate data corrected (rectification)
Have your data deleted (erasure)
Restrict or object to processing
Receive a copy in a portable format (data portability)
Withdraw consent at any time (for analytics: use the Manage cookies button above)

To exercise any of these, email admin@ppets.co.uk. We’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

8. Children

This site is aimed at pharmacy professionals. We don’t knowingly collect data from people under 18.

9. Changes to this notice

We’ll update the “Last updated” date at the top whenever we change this page. Material changes will be flagged on the homepage.

10. Contact us

Questions, requests, or just want to talk it through? admin@ppets.co.uk.