Introduction
Effective Date: [To be inserted]
Welcome to GMIA (Global Medical Information Academy).
GMIA (“GMIA”, “we”, “us”, or “our”) is operated by Global Medical Information Academy, a business established under the laws of India.
GMIA is responsible for determining how and why your personal information is processed in connection with the Services.
We are committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with applicable privacy and data protection laws.
This Privacy Policy explains how we collect, use, store, disclose, transfer, protect, and otherwise process your personal information when you access or use the GMIA website, learner platform, certification programs, products, services, and related content (collectively, the “Services”).
This Privacy Policy applies to all visitors, learners, purchasers, and other users of the Services.
This Privacy Policy applies only to the Services operated by GMIA. It does not apply to third-party websites, services, or platforms that may be linked from our website or used in connection with the Services. We encourage you to review the privacy policies of any third-party services you choose to use.
Please read this Privacy Policy carefully to understand how your personal information is handled.
By accessing or using the Services, you acknowledge that you have been provided with this Privacy Policy and understand how GMIA processes your personal information as described herein.
Where your consent is required under applicable law for specific processing activities, we will request your consent at the appropriate time.
If you do not agree with this Privacy Policy, you should not use the Services.
If any provision of this Privacy Policy is inconsistent with applicable privacy or data protection laws, the applicable law shall prevail to the extent of the inconsistency.
This Privacy Policy should be read together with our Terms of Use, Refund Policy, and any other applicable policies published on the GMIA website.
- Information We Collect
For the purposes of this Privacy Policy, “personal information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual, as interpreted under applicable privacy laws.
GMIA collects only the personal information that is reasonably necessary to operate the Services, deliver our Programs, maintain Certifications, communicate with learners, improve the user experience, and comply with applicable legal obligations.
Some personal information is provided directly by you, while other information is collected automatically through your use of the Services or received from trusted third-party service providers involved in delivering the Services.
Depending on how you interact with the Services, we may collect the following categories of personal information:
Account Information
When you create a GMIA account, we may collect information such as:
• First and last name
• Email address
• Country of residence
• Professional title or current role
• Organization or affiliated organization (where provided)
• Years of Medical Information experience
• Highest educational qualification
• LinkedIn profile (optional)
• Account credentials, including your password, which is protected using appropriate security measures
Program and Certification Information
When you enroll in a Program or pursue a Certification, we may collect information relating to your participation, including:
• Program enrollments
• Learning progress
• Assessment and examination results
• Certification status
• Certification history
• Continuing learner activity within the Services
Payment Information
When you purchase a Program or Service, payments are processed securely by trusted third-party payment providers.
GMIA does not store your complete payment card or banking information.
We receive only the limited transaction information reasonably necessary to confirm payment, administer your purchase, maintain financial records, provide learner support, and comply with applicable legal and accounting obligations.
Communications
We collect information when you communicate with GMIA, including when you:
• Contact learner support
• Submit enquiries through our website
• Respond to surveys or feedback requests
• Communicate with us by email or other approved channels
Technical Information
When you access the Services, we may automatically collect certain technical information, including:
• IP address
• Browser type and version
• Device type
• Operating system
• Language preferences
• Time zone
• General location information derived from your IP address
• Diagnostic and error information
Usage Information
We may collect information about how you interact with the Services, including:
• Pages visited
• Features used
• Programs accessed
• Time spent using the Services
• Navigation patterns
• Referral sources
• General website usage statistics
This information helps us understand how the Services are used, improve performance, identify technical issues, enhance security, and continuously improve the learner experience.
Cookies and Similar Technologies
GMIA uses cookies and similar technologies to operate, secure, improve, personalize, and analyse the Services.
Additional information regarding our use of cookies is provided in the Cookies and Similar Technologies section of this Privacy Policy.
GMIA does not knowingly collect personal information that is unnecessary for the purposes described in this Privacy Policy. - How We Use Your Personal Information
GMIA uses personal information only where it is reasonably necessary to operate the Services, deliver our Programs, maintain Certifications, fulfil our contractual and legal obligations, protect the security and integrity of the Services, and improve the learner experience.
GMIA processes only the minimum amount of personal information reasonably necessary for each of these purposes.
Depending on how you interact with the Services, we may use your personal information for the following purposes:
To Provide the Services
We use personal information to:
• Create and manage learner accounts.
• Verify your identity where appropriate.
• Process program enrollments.
• Deliver educational content and certification programs.
• Provide access to the learner platform.
• Maintain your learning history and certification records.
To Process Payments
We use limited transaction information to:
• Confirm successful payments.
• Process purchases.
• Maintain financial and accounting records.
• Provide payment-related learner support.
• Comply with applicable legal, tax, and accounting obligations.
GMIA does not use your payment information for marketing purposes.
To Communicate With You
We use personal information to:
• Respond to enquiries and support requests.
• Send account-related communications.
• Deliver important service announcements.
• Provide examination and certification notifications.
• Notify you of material updates affecting the Services.
Where you have chosen to receive GMIA Updates, we may also send information about new Programs, educational resources, events, academy news, and other relevant announcements. You may withdraw your consent to receive these communications at any time.
To Improve the Services
We use technical, usage, and analytics information to:
• Understand how learners use the Services.
• Improve website functionality and performance.
• Develop new features and educational offerings.
• Identify and resolve technical issues.
• Monitor the effectiveness of the Services.
Where reasonably possible, we use aggregated or de-identified information for analytics and service improvement.
To Protect GMIA and Our Learners
We use personal information to:
• Protect the security of learner accounts.
• Detect, investigate, and prevent fraud, unauthorized access, academic misconduct, and other misuse of the Services.
• Maintain the integrity of assessments and Certifications.
• Enforce our Terms of Use and other applicable policies.
• Protect the rights, property, safety, and legitimate interests of GMIA, our learners, and others.
To Comply With Legal Obligations
We may use personal information where reasonably necessary to:
• Comply with applicable laws and regulations.
• Respond to lawful and legally binding requests from courts, regulators, or public authorities.
• Resolve disputes.
• Exercise or defend legal claims.
• Fulfil contractual, legal, accounting, tax, auditing, and compliance obligations.
GMIA will not use your personal information for purposes that are materially different from those described in this Privacy Policy without notifying you or obtaining your consent where required by applicable law. - Legal Basis for Processing (Where Applicable)
Where applicable privacy laws require GMIA to identify the legal basis for processing personal information, we rely on one or more of the following legal grounds, depending on the nature of the processing activity.
Performance of a Contract
We process personal information where necessary to:
• Create and manage your learner account.
• Process Program enrollments and purchases.
• Deliver the Services.
• Administer assessments and Certifications.
• Provide learner support.
• Fulfil our contractual obligations to you.
Compliance with Legal Obligations
We process personal information where necessary to comply with applicable laws, regulations, legal processes, court orders, accounting requirements, tax obligations, regulatory requirements, or other legal responsibilities.
Legitimate Interests
Where permitted by applicable law, we process personal information where necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.
These legitimate interests may include:
• Operating, maintaining, and improving the Services.
• Protecting the security and integrity of the Services.
• Preventing fraud, abuse, unauthorized access, and academic misconduct.
• Maintaining accurate Certification records.
• Responding to enquiries and providing learner support.
• Developing new Programs, features, and educational resources.
• Analysing website performance and user experience using aggregated or de-identified information where reasonably practicable.
Consent
Where required by applicable law, GMIA relies on your consent before processing personal information for specific purposes.
Examples may include:
• Sending optional GMIA Updates.
• Placing non-essential cookies or similar technologies.
• Processing personal information where consent is otherwise required by law.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out before the consent was withdrawn.
GMIA will not rely on consent where another lawful basis more appropriately applies under applicable law.
Where more than one lawful basis applies to a particular processing activity, GMIA may rely on multiple lawful bases where permitted by applicable law. - Cookies and Similar Technologies
GMIA uses cookies and similar technologies to operate, secure, improve, personalize, and analyse the Services.
Cookies are small text files placed on your device when you visit a website. Similar technologies, such as local storage and other comparable technologies, may also be used to support the operation and functionality of the Services. Throughout this Privacy Policy, the term “cookies and similar technologies” refers to all such technologies unless the context indicates otherwise.
GMIA may use the following categories of cookies and similar technologies:
Essential Cookies
These cookies and similar technologies are necessary for the operation, security, and functionality of the Services. They enable core features such as user authentication, account security, session management, and access to secure areas of the learner platform.
Because these technologies are necessary for the operation of the Services, they generally cannot be disabled through our website.
Functional Cookies
Where applicable, GMIA may use functional cookies and similar technologies to remember user preferences and improve your experience, such as maintaining certain settings or preferences during future visits.
Analytics Cookies
GMIA may use analytics cookies and similar technologies to better understand how visitors interact with the Services.
These technologies help us analyse website performance, identify technical issues, measure usage trends, improve educational content, enhance security, and continuously improve the learner experience.
Where reasonably practicable, analytics information is aggregated or de-identified before being used for reporting and analysis.
Managing Cookies
You may control or manage cookies and similar technologies through your browser or device settings. Please note that disabling certain technologies may affect the functionality, security, or performance of the Services.
Where required by applicable law, GMIA will provide you with appropriate choices regarding the use of non-essential cookies and similar technologies before they are placed on your device.
Additional information about browser-based cookie controls is generally available through your browser’s help documentation or support resources.
GMIA may update its use of cookies and similar technologies as the Services evolve. Any material changes will be reflected in this Privacy Policy and, where required by applicable law, through appropriate notice or consent mechanisms. - Sharing Your Personal Information
GMIA values your privacy and does not sell, rent, or trade your personal information to third parties.
We share personal information only where reasonably necessary to operate the Services, fulfil our contractual and legal obligations, protect the integrity and security of the Services, or where otherwise permitted or required by applicable law.
Depending on the circumstances, we may share personal information with the following categories of recipients:
Service Providers
GMIA may share personal information with trusted third-party service providers that perform services on our behalf, including providers that support:
• Payment processing
• Website and cloud hosting
• Email delivery and communications
• Learning platform services
• Analytics and website performance
• Information technology and security
• Customer support and operational services
These service providers are permitted to process personal information only to the extent reasonably necessary to perform services for GMIA and are expected to protect personal information in accordance with applicable contractual, legal, and security obligations.
Legal and Regulatory Authorities
GMIA may disclose personal information where reasonably necessary to:
• Comply with applicable laws and regulations.
• Respond to lawful and legally binding requests from courts, regulators, law enforcement agencies, or other public authorities.
• Protect the rights, property, safety, or security of GMIA, our learners, or others.
• Investigate suspected fraud, academic misconduct, security incidents, or other unlawful activity.
Corporate Transactions
If GMIA undergoes a merger, acquisition, investment, corporate restructuring, sale of assets, or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable confidentiality and privacy obligations.
Where required by applicable law, we will provide appropriate notice before such a transfer becomes effective.
Any successor organization receiving personal information will remain subject to obligations that are materially consistent with this Privacy Policy unless you are notified otherwise.
With Your Consent
GMIA may share personal information with other parties where you have expressly requested or authorized us to do so or where your consent is otherwise required under applicable law.
What We Do Not Do
GMIA does not:
• Sell your personal information.
• Rent your personal information.
• Share your personal information for third-party advertising purposes.
• Permit third parties to use your personal information for their own independent marketing purposes without your consent.
Where personal information is shared, GMIA takes reasonable steps to ensure that recipients process such information only for legitimate purposes consistent with this Privacy Policy and applicable law. - International Transfers of Personal Information
GMIA provides its Services to learners and visitors in multiple countries. As a result, your personal information may be transferred to, stored in, or processed in countries other than the country in which you reside.
These transfers may occur because GMIA uses trusted service providers, technology infrastructure, and operational resources that support the delivery of the Services across different jurisdictions.
Where personal information is transferred internationally, GMIA will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal information in accordance with applicable privacy and data protection laws.
Such safeguards may include contractual commitments, organizational measures, technical safeguards, or other legally recognized mechanisms appropriate to the nature of the transfer and the applicable legal requirements.
Regardless of where your personal information is processed, GMIA expects all recipients who process personal information on our behalf to protect it in a manner consistent with this Privacy Policy and applicable law.
Where required by applicable law, GMIA will implement additional measures or provide additional information relating to international transfers of personal information.
By using the Services, you acknowledge that your personal information may be transferred internationally as described in this Privacy Policy, subject to applicable legal protections. - Data Retention
GMIA retains personal information only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy, including to:
• Provide and maintain the Services.
• Manage learner accounts.
• Deliver Programs and Certifications.
• Maintain learning history and Certification records.
• Process transactions and maintain financial records.
• Respond to enquiries and provide learner support.
• Protect the security and integrity of the Services.
• Comply with applicable legal, regulatory, accounting, tax, contractual, and reporting obligations.
• Resolve disputes.
• Establish, exercise, or defend legal claims.
• Enforce our Terms of Use and other applicable policies.
Different categories of personal information may be retained for different periods depending on the purpose for which they were collected, applicable legal requirements, operational needs, and the nature of the Services provided.
Where reasonably appropriate, GMIA may retain certain information in an aggregated or de-identified form that no longer identifies you directly. Such information may be retained for statistical analysis, service improvement, research, security, or other legitimate business purposes, subject to applicable law.
When personal information is no longer required for the purposes for which it was collected, GMIA will securely delete, anonymize, or otherwise dispose of the information in accordance with applicable law and our internal data retention practices.
Where permitted or required by applicable law, GMIA may retain certain personal information for longer periods where necessary to comply with legal obligations, resolve disputes, protect the integrity of Certifications, prevent fraud, or establish, exercise, or defend legal rights.
Certification records may be retained for as long as reasonably necessary to verify the authenticity and validity of Certifications issued by GMIA.
Deleting or closing your account does not necessarily require immediate deletion of all personal information where continued retention is reasonably necessary or required by applicable law. - Data Security
GMIA takes the security of your personal information seriously and maintains and implements appropriate technical, administrative, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.
These safeguards are designed to reflect the nature of the personal information we process, the risks associated with such processing, and applicable legal requirements.
Examples of safeguards may include, where appropriate:
• Access controls and authentication measures.
• Secure hosting and network protections.
• Encryption and other appropriate security technologies where applicable.
• Monitoring and security measures designed to detect and respond to unauthorized activity.
• Appropriate internal policies and procedures governing the handling of personal information.
• Limiting access to personal information to individuals who require such access to perform their responsibilities.
While GMIA takes reasonable steps to protect personal information, no method of electronic transmission, internet communication, or electronic storage is completely secure.
Accordingly, GMIA cannot guarantee the absolute security of personal information.
Users also play an important role in protecting their personal information. You are responsible for maintaining the confidentiality of your account credentials, using strong passwords, protecting your devices, and notifying GMIA promptly if you believe your account has been compromised.
Except where prohibited by applicable law, GMIA is not responsible for unauthorized access to your account or personal information resulting from your failure to maintain the confidentiality of your account credentials or adequately secure your own devices.
Where a security incident involving personal information occurs, GMIA will investigate the incident, take appropriate steps to contain and address it, and provide notifications where required by applicable law. - Your Privacy Rights
GMIA respects and facilitates applicable privacy rights in accordance with applicable privacy and data protection laws.
Depending on your location and the laws that apply to you, you may have the right to:
• Request access to the personal information GMIA holds about you.
• Request correction or updating of inaccurate or incomplete personal information.
• Request deletion of your personal information, subject to applicable legal and contractual obligations.
• Request that we restrict or limit certain processing of your personal information.
• Object to certain processing activities where permitted by applicable law.
• Request a copy of your personal information in a portable format where applicable.
• Withdraw your consent where processing is based on consent. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.
• Request information about how your personal information is processed.
To exercise any applicable privacy rights, please contact GMIA using the contact details provided at the end of this Privacy Policy.
Before responding to a request, GMIA may take reasonable steps to verify your identity in order to protect your personal information and prevent unauthorized access.
Where permitted by applicable law, GMIA may request additional information reasonably necessary to clarify or process your request.
GMIA will consider and respond to privacy rights requests within the timeframes required by applicable law.
GMIA does not ordinarily charge a fee for responding to legitimate privacy rights requests. However, where permitted by applicable law, GMIA may charge a reasonable fee or decline to act on requests that are manifestly unfounded, excessive, or repetitive.
Please note that certain rights may be limited, unavailable, or subject to exceptions where permitted or required by applicable law, including where GMIA must retain personal information to comply with legal obligations, maintain Certification records, protect the integrity of the Services, resolve disputes, establish, exercise, or defend legal claims, or enforce our agreements.
If you believe that GMIA has not handled your personal information in accordance with applicable privacy laws, you may have the right to lodge a complaint with the relevant supervisory authority, regulator, or other competent authority in your jurisdiction, where such a right exists under applicable law. - Children’s Privacy
The Services are intended for adults and professionals and are not directed to individuals under 18 years of age.
GMIA does not knowingly collect, use, or process personal information from individuals under the age of 18.
If GMIA becomes aware that personal information has been collected from an individual under the age of 18 without appropriate authorization or other lawful basis, where required by applicable law, we will take reasonable steps to delete or otherwise handle such information in accordance with applicable law.
If you believe that a child under the age of 18 has provided personal information to GMIA, please contact us using the contact details provided at the end of this Privacy Policy so that we may investigate and take appropriate action.
Nothing in this section limits any additional protections or rights that may apply under applicable law. - Automated Decision-Making
GMIA does not make decisions that produce legal or similarly significant effects on individuals based solely on automated processing of personal information.
Where automated technologies are used to support the operation, security, performance, or administration of the Services, such technologies are used as tools to assist GMIA and do not replace human judgment in decisions that materially affect learners or their rights. Automated technologies may be used for purposes such as fraud detection, website security, system administration, analytics, spam prevention, or improving the performance of the Services.
Where applicable law provides individuals with rights relating to automated decision-making, GMIA will respect and facilitate those rights in accordance with applicable law. - Third-Party Services
The Services may contain links to, integrate with, or otherwise enable access to third-party websites, applications, platforms, products, or services that are not owned or controlled by GMIA.
Your use of any third-party service is subject to the privacy policies, terms, and practices of that third party. Except to the extent required by applicable law, GMIA is not responsible for the privacy practices, content, security, or operations of third-party services that are independently owned or operated.
For example, certain aspects of the Services may involve trusted third-party providers that support functions such as payment processing, website hosting, email delivery, analytics, learning platform services, or other operational functions.
GMIA encourages you to review the privacy policies and terms of any third-party services before providing personal information or using those services.
Nothing in this Privacy Policy applies to personal information collected directly by third-party services acting independently of GMIA, except to the extent required by applicable law.
Where GMIA engages third-party service providers to process personal information on our behalf, such processing remains subject to applicable contractual, privacy, security, and legal obligations, as described elsewhere in this Privacy Policy. - Data Breach Response
GMIA takes security incidents involving personal information seriously and maintains procedures designed to identify, investigate, contain, and respond to such incidents in a timely and appropriate manner.
If GMIA becomes aware of a security incident that affects personal information, we will assess the nature and scope of the incident and take reasonable steps to mitigate its impact, protect affected individuals, and reduce the risk of similar incidents occurring in the future.
Where required by applicable law, GMIA will notify affected individuals, regulators, or other competent authorities of a personal data breach within the timeframes and in the manner required by applicable law.
Where appropriate, GMIA may also provide affected individuals with information regarding the nature of the incident, the categories of personal information involved, the measures taken in response, and any reasonable steps that individuals can take to help protect themselves.
Not every security incident results in a reportable personal data breach. GMIA will determine whether notification is required based on the circumstances of the incident and the requirements of applicable law.
GMIA continually reviews and improves its security practices and incident response procedures as part of its ongoing commitment to protecting personal information. - Changes to This Privacy Policy
GMIA may update this Privacy Policy from time to time to reflect changes in our Services, business operations, legal or regulatory requirements, technology, security practices, or other legitimate operational needs.
When we make changes, we will update the Effective Date at the beginning of this Privacy Policy.
If we make material changes that significantly affect how we process personal information, we will provide appropriate notice in a manner reasonably designed to bring those changes to your attention, where required by applicable law.
Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy, except where applicable law requires additional notice, consent, or another legal basis before the changes take effect.
We encourage you to review this Privacy Policy periodically to remain informed about how GMIA protects and processes personal information.
Previous versions of this Privacy Policy may be retained for legal, regulatory, or recordkeeping purposes. - Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or GMIA’s processing of your personal information, we encourage you to contact us.
You may contact GMIA to:
• Ask questions about this Privacy Policy.
• Request to exercise any applicable privacy rights.
• Update or correct your personal information.
• Report a privacy concern or suspected security incident.
• Submit any other privacy-related enquiry.
Email: contact@gmiaacademy.com
GMIA will make reasonable efforts to respond to legitimate privacy enquiries and requests in accordance with applicable law.
Before responding to certain requests, GMIA may take reasonable steps to verify your identity or request additional information necessary to process your request and protect your personal information from unauthorized access or disclosure.
Where permitted by applicable law, GMIA may decline requests or request additional clarification where a request is manifestly unfounded, excessive, repetitive, or cannot reasonably be verified.
We are committed to handling privacy-related enquiries professionally, transparently, and in accordance with applicable privacy and data protection laws.