Privacy Policy

Last updated: 9 October 2026

Who we are

Enhanced CPD Pro (the app at https://app.cpdpro.org.uk and this website at https://enhanced.cpdpro.org.uk) is provided by Dental CPD Services Limited, a company registered in England and Wales with company number 07514713, whose registered office is at 78 York Street, London, W1H 1DP. We are the controller of the personal data described in this policy. You can contact us about it at dental@cpdpro.org.uk.

Personal data we collect

We collect device and connection information, including but not limited to IP address, device type and operating system. We may also gather usage data, which includes information on how our Service is accessed and used.

We only collect personal information you choose to provide. This may include contact information such as your name, email address and phone number; the details you give when you register (name, email address, date of birth and GDC number); the CPD records and other information you upload to the app; and billing information for service purchases.

Our contact form

When you send us a message with the form on our contact page, we collect your name, email address, GDC number (if you give it) and your message, together with a one-way (keyed) hash of your IP address and your browser's user-agent string, which help us spot misuse of the form. We use these details to reply to you and to deal with your enquiry. Your message is stored in our database, hosted by Supabase in the UK (London). When a message arrives we are notified in Slack, our internal messaging tool, which shows our team your name, email address, GDC number (if given) and the start of your message. Your name and email address are also added to our contact records in Encharge, the email service we use to reply to enquiries and to keep in touch with people who have contacted us. We will not send you marketing emails unless you have asked for them.

To protect the form from spam, it uses Cloudflare Turnstile, which checks that the form is being sent by a person rather than an automated program. To do this, Cloudflare processes technical information about your browser and connection.

How we use your personal data

We use your personal data for purposes such as:

• Providing, maintaining and improving our Service.
• Processing transactions and sending related information, including transaction confirmations and invoices.
• Responding to your enquiries and support requests.
• Communicating with you about products, services, offers and promotions, and providing news and information we think will be of interest to you. Where the law requires your consent for marketing emails, we only send them if you have given it, and you can unsubscribe at any time.

Under the UK GDPR, we rely on the following lawful bases: performance of our contract with you (to provide the Service and process payments); our legitimate interests (to run, secure and improve the Service and to respond to enquiries); your consent (where we ask for it, for example for certain marketing); and compliance with our legal obligations.

How we share your personal data

We may share your personal data with third-party service providers that perform tasks on our behalf and help us provide our Service. These include payment processors, web analytics providers, and service providers for hosting and for technical and customer support. For this website they include Cloudflare (hosting, Web Analytics and Turnstile), Supabase (storage of contact-form messages), Slack (internal notification of contact-form messages) and Encharge (contact records and email).

We may also share your personal data when required by law or in the context of a business transfer. We do not sell your personal data to third parties.

Cookies and analytics

This website measures visits with Cloudflare Web Analytics, which is cookieless: it does not use cookies or local storage to collect usage information, and it does not track you across websites. This website does not use advertising cookies.

The app uses cookies and similar technologies to provide our services, understand how the Service is being used and customise the experience for our users. The types of cookies used include essential cookies, functional cookies and performance/analytical cookies. You can manage your cookie preferences through your browser settings.

Data security and retention

We use appropriate security measures to protect your personal data from unauthorised access, use and disclosure. However, no method of data transmission or storage is 100% secure. We retain your personal data for as long as necessary to provide our Service, comply with legal obligations or for other legitimate purposes. As a general rule, the data you upload to the app is removed 7 days after the end of an active subscription.

Your rights under UK data protection law

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have rights regarding your personal data. These include the right to access, correct or delete it, to restrict or object to its processing, to data portability, and to withdraw your consent at any time where we rely on consent. To exercise these rights, please contact us at dental@cpdpro.org.uk.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We would appreciate the chance to deal with your concerns first.

International transfers

Some of our service providers may process personal data outside the UK. Where they do, we rely on UK adequacy regulations or on appropriate safeguards, such as the International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last updated.

Contact

Questions about this policy or your personal data: dental@cpdpro.org.uk.