Information we collect

Depending on how you use Cornerstone, we may process your name, email address, telephone number, profession or role, organisation, professional registration body and number, clinical background, course bookings, payment and refund references, attendance, assessment and feedback status, certificates, training and renewal records, linked historical email addresses, app notification preferences and device push-notification token, and messages you send to Cornerstone.

Why we use your information

We use personal information to create and secure your account; process and administer course bookings and payments; manage course attendance and Course Day services; provide joining information and operational updates; issue and maintain training records and certificates; respond to enquiries; prevent fraud and misuse; maintain appropriate financial and operational records; and meet legal or regulatory obligations.

Where you provide optional dietary or accessibility information, we use it only to make appropriate arrangements for your course and, if you choose to save it in your profile, to pre-fill future bookings. For special category information we ask for your explicit consent. You can leave these fields blank or remove the saved information from your profile at any time.

Our legal bases

We process ordinary personal information where necessary to perform a contract with you or take steps at your request before entering a contract, to comply with legal obligations, and for legitimate interests such as administering courses, maintaining secure systems, preventing misuse and keeping appropriate business records. Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

For optional dietary or accessibility information that constitutes special category data, we rely on your explicit consent in addition to the relevant UK GDPR Article 6 basis.

Payments

Card details entered during payment are handled by Stripe through its secure payment interface. Cornerstone does not store your full card number or card security code. We retain payment references and transaction information needed to administer your booking, refunds, accounting and fraud prevention.

Service providers

We use trusted service providers to operate Cornerstone, including providers for secure authentication/database/storage, payment processing, transactional email, mobile push notifications and website hosting. They process information only for the services they provide to us and are subject to appropriate contractual and security safeguards.

We may also disclose information where required by law or to relevant professional or accreditation partners where this is necessary for the service you have requested.

Notifications and marketing

Operational messages about an existing booking, Course Day, certificates or training records are service communications. Optional promotional or incomplete-booking reminders are kept separate from essential service messaging and can be switched off in notification preferences. We do not make agreement to marketing a condition of booking a course.

How long we keep information

We keep identifiable information only for as long as needed for the purpose for which it was collected, including providing your account and training record, administering bookings and certificates, handling disputes and refunds, and meeting financial or regulatory recordkeeping obligations.

Optional dietary/accessibility information should not be kept longer than needed for course arrangements; saved profile defaults remain under your control and can be cleared by you.

If you delete your Cornerstone app account, we remove your login, reusable profile data, linked emails, push registrations, contact enquiries and personal certificate files. We may retain de-identified booking, payment and training audit records where this is genuinely required for financial, operational, fraud-prevention or regulatory recordkeeping.

Your rights

Under UK data protection law you may have rights to access, correct, erase or restrict your personal information, object to certain processing, receive certain information in a portable format, and withdraw consent where processing is based on consent. You may also complain to the Information Commissioner's Office.

To exercise a privacy right, email info@cornerstonemed.co.uk . We may need to verify your identity before acting on a request.

Account deletion

You can delete your account in the Cornerstone Medical Education app under Account → Delete account. If you no longer have the app, you can use our account deletion request page .

Security

We use technical and organisational measures designed to protect personal information, including authenticated access, encrypted network connections, restricted administrative access and secure third-party payment handling. No system can be guaranteed completely secure, but we review our safeguards as the service develops.

Changes to this policy

We may update this policy as the Cornerstone service changes or legal requirements develop. The current version and revision date will be published on this page.