1. Who we are
A4Medicine is a trading name of Twenty First Century Medical Education Limited, a company registered in England and Wales (company number 10795257). Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
We are the data controller for the personal information described in this notice. We are registered with the Information Commissioner's Office (ICO), registration number ZB406831.
If you have any questions about this notice or your information, email [email protected].
2. The information we collect
- You create an account or subscribe (on our website or mobile app): name, username, email address, password (stored encrypted), plan and renewal choice, subscription history.
- You pay for a subscription: payments are processed by Stripe on behalf of Twenty First Century Medical Education Limited, and subscriptions are managed through Chargebee. We do not see or store your full card details.
- You ask us to activate access included with a book: name, email address, and proof of purchase (for example, your Amazon order number).
- You download a free resource or sign up for updates (on our website, YouTube links, or Facebook/Instagram forms): name, email address, profession, the UK nation you work in (or outside the UK), and whether you agreed to receive marketing emails.
- You email or message us: your message and contact details.
- You use our website: with your consent, cookies and similar technologies record how you use the site (pages visited, device and browser type, approximate location). See section 8.
We do not knowingly collect information about patients. Please do not send us any patient-identifiable information.
3. How we use your information, and our legal basis
- Provide your account, subscription and question banks: Contract (we need it to provide the service you signed up for).
- Activate access included with a book purchase: Contract.
- Send you clinical updates, free resources and offers by email: Consent (you ticked the box to receive them). You can unsubscribe at any time using the link in every email.
- Email existing customers and account holders about similar A4Medicine products: Legitimate interests and the "soft opt-in" under the Privacy and Electronic Communications Regulations. You can opt out at any time.
- Understand how our website is used and improve it: Consent (analytics cookies).
- Show our adverts on Facebook and Instagram to people who have agreed to hear from us, or to people with similar professional interests: Consent given for marketing, and legitimate interests. You can object at any time (see section 7).
- Keep financial and tax records: Legal obligation.
- Respond to your questions and requests: Legitimate interests.
4. Who we share your information with
We do not sell your personal information. We use trusted service providers who process it on our behalf and only on our instructions:
- HubSpot: contact database, forms and website analytics
- Brevo: sending our marketing emails
- Mailchimp: holds our older email list. We are moving these contacts to HubSpot and Brevo and will then close the account.
- Chargebee: managing subscriptions and billing
- Stripe: processing card payments
- Meta (Facebook and Instagram): advertising and lead forms. If you have agreed to marketing, we may share a scrambled (hashed) version of your email address with Meta so we can show you relevant adverts or find people with similar interests. Meta deletes the matching data after the match.
- Google: website analytics (Google Analytics) and our YouTube channel
- Amazon Web Services and Vercel: hosting our website, mobile app and their data
- Cloudflare: website security and performance
- Zoho: our business email
If you buy one of our books on Amazon, Amazon is responsible for your purchase data under its own privacy notice. We only receive limited order information from Amazon to fulfil the order.
We may also share information if the law requires it, or with professional advisers (such as our accountants) under a duty of confidentiality.
5. International transfers
Some of our providers are based in, or store data in, the United States or other countries outside the UK. Where this happens, we rely on the UK–US Data Bridge, UK adequacy regulations, or the UK International Data Transfer Agreement or Addendum, so that your information is protected to UK standards.
6. How long we keep your information
- Account and subscription records: while your account is active, then up to 6 years for tax and accounting purposes.
- Book access requests: for the length of the access period, then 6 years.
- Marketing contacts: until you unsubscribe or ask us to delete your details. We review our mailing list regularly and remove contacts who have not engaged with our emails for a long period. When you unsubscribe, we keep your email address on a suppression list only so that we never email you again.
- Website analytics: up to 14 months.
- Emails and messages: up to 2 years after your last contact with us.
7. Your rights
Under UK data protection law you have the right to:
- access a copy of your personal information
- ask us to correct inaccurate information
- ask us to delete your information
- ask us to restrict how we use it
- object to us using it, including the absolute right to stop direct marketing at any time
- receive your information in a portable format (data portability)
- withdraw consent at any time, where we rely on consent
To use any of these rights, email [email protected]. We will respond within one month.
If you are unhappy with how we have handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) via the ICO website, or by telephone on 0303 123 1113.
8. Cookies
We use essential cookies to make the website work, for example to keep you logged in. With your permission, we also use analytics cookies (Google Analytics and HubSpot) to understand how the site is used. You can change your choice at any time using Cookie Settings at the bottom of every page.
9. Children
Our services are for healthcare professionals and students. They are not intended for anyone under 18.
10. Changes to this notice
We may update this notice from time to time. The latest version will always be on this page.
Last updated: 31 October 2026
