UAE CME MediPro. Compliance Enablement Solution for Healthcare Teams

Lost your password?

Privacy Policy


MediLearning International L.L.C-FZ
Last updated: 19 August 2026

1. Introduction

MediLearning International L.L.C-FZ (“MediLearning International”, “MediLearning”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Notice explains how we collect, use, store, disclose and protect personal data when you:

  • visit our website;
  • create a MediLearning account;
  • access our CPD/CME learning platform;
  • enrol in or complete CPD/CME activities;
  • purchase products or services;
  • use MediPro or participate in an employer-sponsored learning programme;
  • access MediLearning through one of our partners;
  • communicate with us; or
  • otherwise use our products and services.

MediLearning International is established in Dubai, United Arab Emirates and provides services internationally.

Depending on where you are located and how you interact with us, different privacy and data protection laws may apply.

These may include the UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (“UAE PDPL”), the EU General Data Protection Regulation (“GDPR”), UK data protection legislation and other applicable privacy and data protection laws in countries where we provide our services.

Where applicable local legislation provides additional rights or protections, we will process personal data in accordance with those requirements.


2. Who We Are

The data controller responsible for the processing described in this Privacy Notice is:

MediLearning International L.L.C-FZ
Meydan Grandstand
6th Floor, Meydan Road
Nad Al Sheba
Dubai
United Arab Emirates

For privacy or data protection enquiries:

Email: support@med-ilearning.eu

Where another company within the wider MediLearning group independently determines how and why personal data is processed, that company may act as a separate data controller and provide its own privacy information.


3. Who Our Services Are For

MediLearning International provides professional education, Continuing Professional Development (“CPD”), Continuing Medical Education (“CME”) and related services primarily to healthcare professionals and healthcare organisations.

Our professional learning services are not intended for children.

We do not knowingly collect personal data from children through our general CPD/CME services. If we become aware that we have collected personal data relating to a child in circumstances where we should not hold that information, we will take appropriate steps to delete or otherwise lawfully manage it.


4. Personal Data We Collect

The information we collect depends on how you interact with MediLearning.

4.1 Account and contact information

This may include:

  • your name;
  • email address;
  • telephone or mobile number;
  • country or region;
  • postal or billing address;
  • username and account information; and
  • communication preferences.

4.2 Professional information

Because MediLearning provides professional healthcare education, we may collect:

  • profession or healthcare role;
  • employer or healthcare organisation;
  • professional registration or identification number where required;
  • specialty or clinical area;
  • professional qualifications;
  • CPD/CME requirements;
  • accreditation-related information; and
  • professional learning interests and preferences.

4.3 Learning and CPD/CME information

When you use the MediLearning platform, we may process:

  • modules and courses in which you enrol;
  • learning progress;
  • module and course completions;
  • assessment and quiz results;
  • CPD/CME credits or points earned;
  • completion dates;
  • certificates;
  • learning history;
  • CPD collections;
  • course feedback;
  • saved learning content;
  • CPD notes or learning records where these features are available; and
  • other information necessary to provide and evidence your professional learning.

Where MediLearning allows you to record CPD completed outside the MediLearning platform, we may also process information you provide about that external learning, including course or activity details, provider information, dates, CPD credits and certificates or supporting records uploaded by you.

4.4 Transaction and payment information

When you purchase a product or service, we may process:

  • products or services purchased;
  • order number;
  • transaction amount;
  • currency;
  • billing information;
  • coupon or promotional code usage;
  • payment status;
  • transaction references; and
  • transaction history.

Card payments are processed using third-party payment service providers, including Stripe.

When you make a card payment, payment information is securely provided to Stripe for purposes including processing the transaction, authentication, security and fraud prevention.

MediLearning may receive information concerning the transaction, including your name, billing details, the product purchased, transaction amount, currency, payment status, payment reference and limited information about the payment method.

MediLearning does not ordinarily receive or store your complete payment card number or card security code on its own systems.

4.5 Communications

We may process information you provide when you:

  • contact customer support;
  • submit an enquiry;
  • communicate with us by email;
  • complete a form;
  • participate in a survey;
  • submit feedback or a review;
  • participate in a programme or promotion; or
  • otherwise communicate with MediLearning.

4.6 Technical and website information

When you access our websites or services, we may collect technical information including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • referring website or URL;
  • pages visited;
  • date and time of visits;
  • website interactions;
  • cookie and similar technology identifiers;
  • session information; and
  • website performance and diagnostic information.

We use technologies including Google Analytics and HubSpot to help us understand use of our website and services, subject to applicable consent requirements.


5. How We Collect Personal Data

We may collect personal data:

  • directly from you;
  • when you register for an account;
  • when you purchase a product or service;
  • when you enrol in or complete CPD/CME activities;
  • when you upload or record external CPD;
  • through your use of our website and platform;
  • from an employer or healthcare organisation providing you with access to MediLearning;
  • from an authorised business, marketplace or distribution partner;
  • through partner referral links or codes;
  • from service providers acting on our behalf;
  • from publicly available professional sources where lawful; and
  • from other sources where you have authorised the disclosure or where collection is otherwise permitted by law.

6. How and Why We Use Personal Data

We may use personal data to:

  • create and manage MediLearning accounts;
  • provide CPD/CME courses and educational services;
  • enrol users in learning activities;
  • record learning progress;
  • administer assessments;
  • issue CPD/CME certificates;
  • maintain professional learning records;
  • administer CPD credits;
  • process purchases and transactions;
  • provide customer and technical support;
  • respond to enquiries;
  • personalise relevant learning content;
  • administer employer or organisational learning programmes;
  • operate MediPro;
  • maintain records associated with accreditation requirements;
  • operate, secure and improve our websites and services;
  • analyse website and platform performance;
  • understand how users interact with our platform;
  • measure marketing and referral performance;
  • administer commercial partnerships;
  • communicate important information about accounts and services;
  • send marketing communications where permitted;
  • prevent fraud, abuse and security incidents;
  • maintain accounting and business records;
  • establish, exercise or defend legal claims;
  • comply with applicable legal, regulatory and contractual obligations; and
  • carry out other activities explained to you when information is collected.

7. Legal Bases for Processing

The legal basis we rely upon depends on the applicable law, information concerned and purpose of the processing.

Where applicable, our legal bases may include:

Performance of a contract

We process information where necessary to provide products or services requested by you, including managing your account, providing courses, recording learning activity, issuing certificates and processing purchases.

Consent

We may rely on your consent for particular activities, including certain marketing communications, non-essential cookies and technologies, optional disclosure of contact information to referring partners and other activities where consent is required.

Where processing relies on consent, you may withdraw your consent at any time, subject to applicable law.

Legitimate interests

Where permitted by applicable law, we may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

These interests may include:

  • operating and improving MediLearning;
  • providing customer support;
  • protecting our systems;
  • preventing fraud;
  • analysing service performance;
  • understanding product usage;
  • administering commercial relationships; and
  • measuring partner and referral performance.

Legal obligations

We may process or retain information where necessary to comply with applicable laws, regulatory requirements, tax and accounting obligations, lawful requests, accreditation requirements or court orders.

Other lawful grounds may apply where permitted or required under applicable data protection legislation.


8. Sensitive and Special Category Personal Data

MediLearning does not seek to collect sensitive or special-category personal data unless it is necessary for a specific legitimate purpose.

Where such information must be processed, we will do so only where an appropriate legal basis or lawful condition exists under applicable law.

Please do not provide unnecessary health, medical or other sensitive personal information through general enquiry, support or feedback forms.


9. MediPro and Employer-Sponsored Accounts

MediLearning provides organisational learning and CPD management services through MediPro.

If your MediLearning account is associated with an employer, hospital, clinic, healthcare organisation or other organisation using MediPro, authorised administrators or Group Leaders from that organisation may be able to access information concerning staff members assigned to their organisation.

Depending on the programme and permissions provided, this may include:

  • name;
  • email address;
  • professional role;
  • account information relevant to the organisational programme;
  • course or module enrolments;
  • learning progress;
  • module completions;
  • CPD/CME credits;
  • certificates;
  • CPD records;
  • compliance information; and
  • other professional learning information associated with the organisation’s MediPro account.

This information is made available so the organisation can administer, monitor and report on professional learning and CPD programmes.

Organisational administrators do not receive complete payment card details through MediPro.

Your employer or healthcare organisation may independently act as a data controller in relation to its use of your personal information. Questions concerning how your organisation uses information obtained through MediPro should also be directed to that organisation.


10. CPD Certificates and Accreditation

MediLearning may issue certificates or other records evidencing completion of accredited or recognised CPD/CME activities.

Unless otherwise specifically stated for a particular programme, MediLearning does not automatically submit your individual certificate or completion record to an accreditation or professional regulatory body on your behalf.

You are responsible for downloading and submitting your certificate to the appropriate professional or regulatory authority where required.

If a particular programme requires MediLearning to disclose identifiable learner information to an accreditation, regulatory or professional body, we will provide appropriate information about that processing where required.


11. Partner Referrals and Attribution

MediLearning works with selected commercial, professional, marketplace and distribution partners that may refer healthcare professionals and other users to our platform.

When you access MediLearning through a partner referral link, referral code or similar mechanism, we may record information identifying the referring partner.

We may associate subsequent activity with that referral for a defined attribution period.

Information used for partner attribution may include:

  • referral link visits;
  • pages or products viewed;
  • modules or collections viewed;
  • products added to cart;
  • progression to checkout;
  • account registration;
  • purchases;
  • products purchased; and
  • relevant subsequent activity associated with the referral.

We may use this information to:

  • measure partner performance;
  • understand customer journeys;
  • calculate commercial attribution;
  • administer commercial agreements;
  • improve our products and services; and
  • provide appropriate reporting to partners.

Partner attribution does not automatically mean that the referring partner receives your name, email address, telephone number or other personal contact details.


12. Partner Follow-Up and Optional Sharing of Contact Details

In some circumstances, we may give you the option to allow the organisation or partner that referred you to MediLearning to contact you.

Where required, this will be presented as a separate and optional choice.

If you provide the relevant consent, MediLearning may share information such as:

  • your name;
  • email address; and
  • telephone number,

with the referring partner for the purposes explained to you when consent is requested.

We will not make your personal contact details available to a referring partner for optional partner follow-up merely because you accessed MediLearning through that partner’s referral link.

Where partner follow-up relies upon your consent, you may withdraw that consent in accordance with applicable law.

Withdrawal will not affect processing or disclosures lawfully carried out before consent was withdrawn.


13. Cookies, Analytics and Similar Technologies

We use cookies and similar technologies to operate, protect, analyse and improve our website.

These technologies may be used for:

  • authentication and login;
  • maintaining user sessions;
  • shopping cart and checkout functionality;
  • security and fraud prevention;
  • remembering preferences;
  • analytics;
  • website performance measurement;
  • CRM and customer journey analysis;
  • referral and partner attribution; and
  • marketing where permitted.

We currently use services that may include Google Analytics, HubSpot and Stripe, as well as cookies required by WordPress, WooCommerce and other functionality necessary to operate the MediLearning platform.

Where required by applicable law, non-essential cookies and similar technologies will not be used until you have provided the appropriate consent.

You can find further information in our Cookie Policy and manage available choices through our cookie consent controls.


14. Google Analytics

We use Google Analytics to understand how visitors use our website.

Google Analytics may collect information such as device and browser information, approximate location, website interactions, session information and identifiers stored using cookies or similar technologies.

We use this information to understand website usage and improve our platform, content and services.

Where required by applicable law, Google Analytics will be subject to the user’s cookie or analytics consent choices.


15. HubSpot

We use HubSpot as a customer relationship management and website analytics platform.

Depending on how you interact with MediLearning and your cookie preferences, HubSpot may process information concerning website visits, page interactions, forms, communications and information you provide directly to us.

Where a website visitor subsequently identifies themselves, for example by completing a form, information about their website interactions may be associated with their contact record where permitted.

HubSpot analytics and tracking technologies are managed in accordance with applicable consent requirements.


16. Sharing Personal Data

We do not sell your personal data.

We may share personal data where necessary with trusted organisations that support our services, including:

  • website hosting and infrastructure providers, including Kinsta;
  • cloud and technology service providers;
  • learning management and website technology providers;
  • payment providers, including Stripe;
  • CRM providers, including HubSpot;
  • analytics providers, including Google;
  • email and communications providers;
  • IT and security providers;
  • authorised employers or healthcare organisations using MediPro;
  • professional advisers;
  • business, marketplace and distribution partners where permitted and appropriate; and
  • government, judicial, regulatory or law-enforcement authorities where legally required.

Where organisations process personal data on our behalf, we seek to ensure that appropriate contractual, organisational and legal safeguards are in place.

We may also disclose information in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, subject to appropriate safeguards.


17. International Transfers

MediLearning International is established in Dubai, United Arab Emirates and operates internationally.

Your personal data may therefore be processed in countries other than the country in which you live.

Our technology providers and other service providers may operate infrastructure in the UAE, European Economic Area, United Kingdom, United States and other jurisdictions.

Where required by applicable data protection law, we use appropriate mechanisms and safeguards for international transfers. Depending on the circumstances, these may include:

  • transfers to countries recognised as providing an adequate level of protection;
  • contractual data protection safeguards;
  • Standard Contractual Clauses where required under GDPR;
  • contractual protections imposed on processors and service providers;
  • consent where legally appropriate; or
  • another transfer mechanism permitted under applicable law.

18. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction and unlawful processing.

These measures may include:

  • access controls;
  • authentication;
  • secure communications;
  • website and server security;
  • system monitoring;
  • backups;
  • software security measures; and
  • restrictions on access to personal information.

No online system can guarantee absolute security. We therefore continually review and improve our security arrangements as our services and technology develop.


19. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, contractual, accreditation, accounting and reporting requirements.

Different categories of information may therefore be retained for different periods.

When determining retention periods, we consider:

  • the nature of the information;
  • why the information is processed;
  • the duration of your relationship with MediLearning;
  • CPD/CME certification requirements;
  • professional and accreditation requirements;
  • accounting and legal requirements;
  • security and fraud prevention;
  • dispute resolution;
  • applicable limitation periods; and
  • our legitimate business requirements where permitted by law.

Learning, CPD/CME and certification records may be retained for longer where necessary to verify professional learning achievements or satisfy relevant record-keeping requirements.

Information contained in backups may remain for a limited additional period before being securely deleted or overwritten.


20. Marketing

Where permitted by applicable law, we may send information about MediLearning products, services, educational content, CPD/CME opportunities and relevant offers.

Where consent is required, we will obtain consent before sending such communications.

You may unsubscribe from electronic marketing communications at any time using the unsubscribe option contained within the communication or by contacting:

support@med-ilearning.eu

Unsubscribing from marketing will not prevent us from sending essential communications concerning your account, purchases, learning activity, certificates, security or services you use.


21. Your Privacy Rights

The rights available to you depend on the privacy and data protection laws applicable to your circumstances.

Subject to applicable law, you may have the right to:

  • receive information about how your personal data is processed;
  • access personal data we hold about you;
  • correct inaccurate or incomplete information;
  • request deletion of personal data;
  • restrict certain processing;
  • object to certain processing;
  • withdraw consent where processing is based on consent;
  • request portability of certain personal data;
  • object to certain automated decision-making or profiling where applicable; and
  • lodge a complaint with an appropriate data protection authority.

These rights are not absolute and may be subject to exceptions provided by applicable law.

To exercise a privacy right, contact:

support@med-ilearning.eu

We may need to verify your identity before fulfilling your request.


22. EEA Users

Where GDPR applies to our processing of your personal data, you have the rights provided under GDPR, subject to applicable limitations.

GDPR may apply to MediLearning’s processing in circumstances including where we offer relevant goods or services to individuals in the European Economic Area or monitor their behaviour within the EEA.

You may have the right to lodge a complaint with the data protection supervisory authority responsible for the country in which you live or work, or where you believe an infringement has occurred.

We encourage you to contact MediLearning first so we have an opportunity to address your concern.


23. UK Users

Where UK data protection legislation applies, you may exercise applicable rights provided under the UK GDPR and Data Protection Act 2018.

You may also have the right to make a complaint to the UK Information Commissioner’s Office.


24. UAE Users

Where UAE data protection legislation applies, we will process personal data and respond to requests in accordance with applicable UAE requirements.

Individuals may have rights concerning access to information, correction, deletion, restriction or cessation of certain processing, portability, objection to certain automated processing and other rights provided under applicable UAE law.


25. Users in Other Countries

MediLearning operates internationally.

Privacy and data protection laws outside the UAE, EEA and United Kingdom may provide additional rights concerning personal data.

Where such legislation applies to MediLearning’s processing, we will respect the rights and requirements applicable under that legislation.

You may contact us at support@med-ilearning.eu if you have questions about privacy rights applicable to your location.


26. Legal Disclosures

We may disclose personal data where reasonably necessary to:

  • comply with applicable law;
  • respond to valid legal proceedings;
  • comply with a court order;
  • respond to an authorised government or regulatory authority;
  • protect our legal rights;
  • investigate fraud or unlawful activity; or
  • protect the rights, security or safety of MediLearning, our users or others.

Where appropriate, we will seek to limit disclosures to the information reasonably necessary for the relevant purpose.


27. Third-Party Websites

Our website may contain links to websites and services operated independently by third parties.

MediLearning is not responsible for the privacy practices of independent third-party websites.

We encourage you to review their privacy information before providing personal data.


28. Social Media

MediLearning maintains accounts on social media platforms and may provide social sharing features, links or integrations through our website.

Interactions with those services may result in the relevant platform provider processing information in accordance with its own privacy policy.

Where non-essential social media tracking technologies are embedded within our website, they will be managed in accordance with applicable cookie and consent requirements.


29. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to:

  • our services;
  • our technology;
  • business or partner arrangements;
  • processing activities; or
  • applicable laws or regulatory guidance.

The current version will be published on our website and will show the date it was last updated.

Where a change materially affects how we process personal data, we may provide additional notice where appropriate or legally required.


30. Contact Us

For questions about this Privacy Notice, our handling of personal data or your privacy rights, please contact:

MediLearning International L.L.C-FZ
Meydan Grandstand
6th Floor, Meydan Road
Nad Al Sheba
Dubai
United Arab Emirates

Email: support@med-ilearning.eu

Please provide sufficient information for us to understand your request and, where necessary, verify your identity.

We will respond in accordance with the requirements and timeframes of applicable data protection law.