Legal

Privacy Policy

This policy explains what personal data we collect when you use this website or contact us about NMC OSCE training, why we collect it, and the choices you have. Last updated: 31 October 2026.

Who we are

OSCE Nurse Training Cambridge ("ONTC", "we", "us") is run by Shalu Kumar. We are the controller of the personal data described in this policy. You can contact us about anything in it:

What we collect and why

When you contact us

If you email, phone or message us on WhatsApp, we receive your name, contact details and anything you choose to tell us, such as your exam date or the course you are interested in. We use this to answer your questions and, if you wish, to arrange your training. Our lawful basis is taking steps at your request before entering into a contract, and our legitimate interest in replying to enquiries.

When you book a course

We keep the details we need to run your training: your name, contact details, the course and dates you booked, and payment records. Our lawful basis is performing our contract with you, and our legal obligation to keep business and tax records.

When you visit this website

We do not use advertising, marketing or tracking cookies. We use Cloudflare Web Analytics to see which pages are visited and how quickly they load. It does not use cookies, does not store anything on your device and gives us only anonymous, combined figures. Like any website host, Cloudflare also processes technical data such as your IP address to deliver pages securely. Our lawful basis is our legitimate interest in running a secure, working website. See our Cookie Policy.

Videos

Videos on this site are shown from YouTube in its privacy-enhanced mode, and only after you press play. Once a video plays, YouTube (Google) processes data under its own privacy policy.

Reviews and photos

We show a selection of reviews that nurses have posted publicly on Google, with the reviewer's first name as it appears on Google. Photos of nurses at our training days are shown only with the permission of the people pictured. If you would like a review or photo of you removed, contact us and we will remove it.

Template downloads and emails

If you ask us to email you a printable template, we use your email address to send it to you. If you also tick the box to receive our emails, we will send you occasional OSCE tips and course dates. We only send these with your consent, and you can withdraw it at any time.

Your email address is stored by our email provider, MailerLite, which processes it on our behalf. We do not sell or share it with anyone else. Every email we send includes a link to unsubscribe, or you can ask us to remove your details by emailing us.

Who we share it with

We do not sell your personal data. We use a small number of trusted providers who process data on our behalf, only for the purposes above:

  • Cloudflare: hosts this website and protects it from attacks.
  • Microsoft: our email (Outlook).
  • WhatsApp (Meta): if you choose to message us there.
  • MailerLite: sends template and newsletter emails.

Some of these providers store data outside the UK, including in the United States. Where they do, they use safeguards recognised under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.

How long we keep it

We keep enquiries for up to 12 months after our last contact, unless you go on to book. If you book a course, we keep your booking and payment records for six years after the end of the financial year they relate to, as UK tax law requires. We then delete them.

How we protect it

We only keep the personal data we need, in accounts protected by strong passwords and two-step sign-in, and we only share it with the providers listed above.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct it if it is wrong;
  • ask us to delete it;
  • ask us to restrict how we use it, or object to our use of it;
  • ask for it in a form you can take to another provider;
  • withdraw your consent at any time, where we rely on consent.

To use any of these rights, email us at [email protected]. We will reply within one month. There is normally no charge.

Complaints

If you are unhappy with how we have used your data, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.