Privacy Policy — PassThePanel
Legal

Privacy Policy

How PassThePanel collects, uses and protects your personal data.

Last updated: April 2026

PassThePanel Career Academy ("PassThePanel", "we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website at passthepanel.com, purchasing a guide, or submitting your details through any of our forms or advertisements, you agree to the terms of this Privacy Policy.

1
Section One

Who We Are

PassThePanel Career Academy is the data controller responsible for your personal data.

If you have any questions about how we handle your data, please contact us at [email protected].

2
Section Two

What Data We Collect

Data you provide directly
  • First name and last name
  • Email address
  • Phone number (if provided)
  • Payment information (processed securely by Stripe — we never store card details)
  • Any information you include when contacting us by email
Data collected automatically
  • IP address and approximate location
  • Browser type and operating system
  • Pages visited on our website and time spent
  • Referring URL (where you came from before visiting our site)
  • Device type (mobile, tablet, desktop)
Data from third-party platforms

If you submit your details through a Facebook or Instagram Lead Ad, Meta shares your name and email address with us directly. This data is subject to both Meta's Privacy Policy and this Privacy Policy.

3
Section Three

Why We Collect Your Data and Our Legal Basis

Under UK GDPR, we must have a lawful basis for processing your personal data. We use the following bases:

Contract — to fulfil your purchase

When you purchase a guide, we process your name, email and payment details to complete your order, deliver your PDF, and provide customer support. This is necessary to perform the contract between us.

Legitimate interests — to improve our service

We use website analytics data to understand how people use our site and to improve it. We may also contact you with information about our products that we believe are relevant to you based on your purchase history. You can opt out of this at any time.

Consent — for marketing communications

If you download our free guide or subscribe to our email list, you are consenting to receive marketing emails from us. You can withdraw this consent at any time by clicking the unsubscribe link in any email we send you.

Your right to withdraw consent: You can unsubscribe from our emails at any time using the unsubscribe link at the bottom of every email we send. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.

4
Section Four

How We Use Your Data

We use your personal data for the following purposes:

  • To process your order and deliver your purchased PDF guide by email
  • To send you the free guide you requested
  • To send you follow-up emails related to your purchase or enquiry
  • To send you marketing emails about our products and services (where you have consented)
  • To respond to your customer service enquiries
  • To improve our website and the relevance of our advertising
  • To comply with our legal and regulatory obligations
  • To prevent fraud and ensure the security of our business

We will never sell your personal data to third parties. We will never share your data with third parties for their own marketing purposes.

5
Section Five

Who We Share Your Data With

We share your data only with the third-party service providers necessary to operate our business. All third parties are required to handle your data securely and in accordance with UK GDPR.

GoHighLevel (GHL)

Our CRM and marketing automation platform. Your name, email and purchase data is stored here and used to manage communications and deliver your guides. GoHighLevel is based in the United States and operates under standard contractual clauses for international data transfers.

Stripe

Our payment processor. Stripe handles all card transactions. We never see or store your full card number. Stripe is PCI DSS compliant. See Stripe's Privacy Policy at stripe.com/gb/privacy.

Meta (Facebook and Instagram)

If you interact with our Facebook or Instagram ads, Meta may share your name and email with us as part of their Lead Ads product. We use Meta's advertising tools to reach potential customers. See Meta's Privacy Policy at facebook.com/privacy/policy.

Website analytics

We may use analytics tools to understand traffic patterns on passthepanel.com. These tools collect anonymised, aggregated data and do not personally identify you.

6
Section Six

How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

  • Purchase records: 7 years (legal requirement for financial records)
  • Email marketing contacts: Until you unsubscribe or request deletion
  • Customer service correspondence: 2 years from last contact
  • Website analytics: 26 months (industry standard)

When your data is no longer required, we will securely delete or anonymise it.

7
Section Seven

Your Rights Under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

Right of access

You have the right to request a copy of the personal data we hold about you. We will respond within 30 days.

Right to rectification

You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.

Right to erasure ("right to be forgotten")

You have the right to ask us to delete your personal data in certain circumstances — for example, if you withdraw your consent or if we no longer need the data for the purpose it was collected.

Right to restrict processing

You have the right to ask us to restrict how we process your personal data in certain circumstances.

Right to data portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transfer it to another controller.

Right to object

You have the right to object to our processing of your personal data for direct marketing purposes at any time.

Rights related to automated decision-making

We do not use automated decision-making or profiling that has legal or similarly significant effects on you.

✉️

To exercise any of these rights: Email us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days. There is no charge for exercising your rights.

8
Section Eight

Cookies

Our website uses cookies — small text files placed on your device — to help us understand how you use our site and to improve your experience.

Essential cookies

These are necessary for the website to function. They cannot be switched off. They are usually set in response to actions you take, such as completing a purchase.

Analytics cookies

These help us understand how visitors interact with our website by collecting and reporting information anonymously. We use this to improve the site over time.

Marketing cookies

These are set by our advertising partners (including Meta) and are used to build a profile of your interests so that relevant ads can be shown to you on other sites. They track your activity across sites.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the website.

9
Section Nine

Data Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. These include:

  • SSL/TLS encryption for all data transmitted between your browser and our website
  • Secure, access-controlled systems for storing customer data
  • Payment processing handled entirely by PCI DSS-compliant Stripe — we never handle or store card details
  • Regular review of our data handling practices

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. If you have concerns about the security of your data, please contact us at [email protected].

10
Section Ten

International Data Transfers

Some of our third-party service providers are based outside the United Kingdom. Where we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR. These safeguards include:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office
  • Adequacy decisions where the receiving country provides an equivalent level of data protection

If you would like more information about the specific safeguards in place for international transfers, please contact us at [email protected].

11
Section Eleven

Children's Privacy

PassThePanel is intended for adults seeking healthcare employment. Our services are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected] and we will delete it promptly.

12
Section Twelve

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of our website and services after any changes constitutes your acceptance of the updated policy.

For significant changes that materially affect how we use your personal data, we will notify you by email where we hold your contact details.

13
Section Thirteen

How to Complain

If you are unhappy with how we have handled your personal data, we ask that you contact us first at [email protected] so we can try to resolve the issue.

If you remain unsatisfied, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Questions about your data?

We are happy to help. Email us and we will respond within 2 business days.

✉️ [email protected]