Privacy policy.

This privacy policy explains how GC Scientific collects, uses, stores, protects, and shares personal information when you use the GC Scientific website, member platform, admin systems, contact forms, resource library, vendor directory, therapy profile library, billing features, and any related platform services.

For the purposes of this policy, GC Scientific is the organisation responsible for deciding how personal information is used in connection with the platform. The platform has been built by Data Menu as the technical build provider. Data Menu may support the platform infrastructure, development, hosting, maintenance, debugging, and technical delivery where authorised by GC Scientific.

This policy applies to public visitors, account holders, members, clinic or team contacts, professional enquirers, administrators, and any person who submits information through the platform.

We may collect identity and contact information including your name, email address, clinic or organisation name, phone number, profession, role, enquiry type, and any information you provide through signup, contact, account, support, or enquiry forms.

We may collect account and membership information including your user ID, role, account status, subscription status, selected plan, billing state, email verification status, login activity, membership access level, restriction state, and administrative notes required to manage platform access.

We may collect billing-related identifiers supplied by Stripe, including customer IDs, subscription IDs, price IDs, current billing period dates, invoice references, and payment status metadata. GC Scientific does not store full card numbers through the platform.

We may collect platform usage and technical information including IP address, device information, browser type, session data, cookie identifiers, timestamps, page requests, security logs, access attempts, download requests, error logs, and information needed to protect the platform from misuse.

We may collect content interaction data including resources viewed, protected downloads requested, therapy profiles accessed, vendor directory access, search and filter inputs, account updates, and future AI Companion interactions where enabled.

GC Scientific is an educational and informational platform. It is not designed for submitting personal medical records, patient records, diagnosis details, prescription information, treatment instructions, emergency medical information, or highly sensitive clinical case files.

You must not submit confidential patient information, identifiable patient data, special category health data, prescription instructions, treatment plans, or regulated medical records through public forms, contact forms, account fields, or any future AI Companion interface unless GC Scientific has expressly provided a dedicated lawful and secure process for doing so.

If you voluntarily provide health-related, clinical, or sensitive information, we may process it only to review, respond to, manage, restrict, or delete the submission, or where required for legal, compliance, security, or platform protection reasons.

We use personal information to create and manage accounts, authenticate users, provide secure login, verify access rights, manage active, pending, restricted, expired, and administrative account states, and protect member-only content.

We use personal information to operate the member platform, including therapy libraries, protected resources, secure downloads, vendor directory access, account pages, billing pages, dashboard features, and admin-controlled content systems.

We use personal information to process contact enquiries, clinic or team enquiries, professional enquiries, support requests, membership questions, platform questions, and related communications.

We use personal information to manage subscriptions, billing states, plan access, upgrades, downgrades, cancellations, reactivations, invoices, payment status, and Stripe-hosted billing flows.

We use personal information to sync relevant signup and enquiry information to GoHighLevel where CRM credentials and integrations are active, including contact creation, tagging, source tracking, and structured enquiry data mapping.

We use personal information to maintain security, investigate abuse, prevent unauthorised access, monitor protected download requests, troubleshoot errors, audit administrative actions, improve reliability, and enforce platform rules.

Where applicable data protection law requires a lawful basis, we rely on contract where processing is necessary to create your account, provide membership access, manage billing, deliver platform functionality, and administer member-only services.

We rely on legitimate interests where processing is necessary to secure the platform, respond to enquiries, manage CRM records, improve operations, prevent misuse, maintain records, support users, protect content, and operate the business in a responsible way.

We rely on consent where the law requires consent, including certain marketing communications, optional cookies, or optional communications preferences. You can withdraw consent where consent is the lawful basis.

We rely on legal obligation where processing is necessary for accounting, tax, regulatory, fraud prevention, dispute handling, legal claims, compliance, or responding to lawful requests.

Where special category information is accidentally or voluntarily submitted, we may rely on explicit consent, legal claims, substantial public interest, or another lawful condition only where applicable and necessary. The platform is not intended to collect such information as part of normal use.

Payments, subscriptions, invoices, payment methods, checkout flows, customer portals, and billing changes are handled through Stripe. Stripe may process payment details, card information, billing addresses, fraud checks, and payment security information under its own terms and privacy policy.

GC Scientific receives limited billing metadata from Stripe, such as customer ID, subscription ID, price ID, subscription status, invoice information, billing period dates, and payment state. This information is used to control membership access and billing visibility inside the platform.

You should not send card details or payment security information through contact forms, email, public forms, account fields, or support messages.

GC Scientific may use GoHighLevel to manage contacts, enquiries, signup records, clinic enquiries, tags, source labels, and CRM follow-up. When integrations are enabled, information submitted through signup or contact forms may be sent to GoHighLevel.

Information synced to GoHighLevel may include name, email, clinic or organisation, enquiry type, message content, source tags, membership interest, and related CRM fields. This helps GC Scientific manage communications and respond to enquiries.

Advanced automation workflows, campaigns, pipelines, or marketing sequences are separate from the platform build and may be configured separately by GC Scientific. If marketing communications are used, they should include appropriate unsubscribe or preference controls where required.

GC Scientific may introduce an AI Companion inside the authenticated platform. The AI Companion is intended to operate within predefined platform logic and approved GC Scientific content only.

The AI Companion should not be treated as a doctor, clinician, pharmacist, prescribing professional, legal adviser, compliance adviser, or emergency support tool. It must not be used to submit patient records, confidential clinical details, diagnosis requests, treatment instructions, or regulated medical decisions.

AI Companion interactions may be logged for safety, security, quality control, debugging, abuse prevention, and platform improvement. Where user account context is used, it should be limited to what is appropriate for the feature and access level.

The AI Companion is intended not to browse the web, access external systems, or perform autonomous unrestricted actions. Any future actions should be limited to predefined secure platform functions.

The platform may use essential cookies and similar technologies to keep users signed in, maintain secure sessions, protect member access, remember authentication state, prevent fraud, and operate the website correctly.

Essential cookies are required for login, account security, protected routes, billing flows, and platform reliability. Optional analytics, marketing, or tracking cookies should only be used where configured and where legally appropriate.

You can manage browser cookies through your browser settings. Blocking essential cookies may prevent login, protected downloads, billing access, account features, or other secure platform functions from working correctly.

We may share personal information with trusted service providers that help operate the platform, including hosting providers, database providers, authentication systems, email delivery services, Stripe, GoHighLevel, storage providers, security tools, analytics providers where used, and technical support providers.

Data Menu may access limited information where necessary to build, maintain, debug, secure, support, or improve the technical platform on behalf of GC Scientific. Such access should be limited to authorised technical purposes.

We may disclose information where required to comply with law, enforce terms, protect users, investigate security incidents, prevent fraud, defend legal claims, or respond to lawful requests from competent authorities.

We do not sell personal information. We do not allow unauthorised public access to member accounts, protected resources, private vendor listings, admin systems, or restricted content.

Some service providers may process data outside your country, including outside the United Kingdom or European Economic Area. This may include cloud hosting, CRM, payment, email, analytics, infrastructure, or support providers.

Where required, GC Scientific expects appropriate safeguards to be used for international transfers, such as contractual protections, adequacy decisions, standard contractual clauses, or equivalent lawful transfer mechanisms.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including account management, membership access, billing, support, legal obligations, dispute handling, security, audit, and business administration.

Account and membership records may be retained while your account exists and for a reasonable period afterwards. Billing records may be retained for accounting, tax, legal, and audit purposes. Contact enquiries may be retained to manage support, CRM history, and business communications.

Security logs, download logs, access logs, and technical logs may be retained for a limited period unless needed for investigation, fraud prevention, platform protection, legal claims, or compliance.

Where information is no longer needed, we may delete, anonymise, archive, or restrict it, subject to legal, technical, and operational requirements.

GC Scientific uses technical and organisational measures designed to protect personal information, member-only content, admin systems, protected files, and account access. These may include authenticated access checks, role-based permissions, protected download routes, private file storage, session controls, secure billing flows, and restricted admin areas.

No online service can guarantee absolute security. You are responsible for keeping your login details confidential, using strong passwords, protecting your devices, avoiding credential sharing, and notifying GC Scientific if you suspect unauthorised access.

You must not attempt to bypass access controls, access another user’s account, scrape protected content, abuse download routes, attack the platform, or interfere with platform security.

Depending on where you are located and which data protection laws apply, you may have rights to access, correct, delete, restrict, object to, or request portability of your personal information.

You may also have the right to withdraw consent where processing is based on consent, and the right to complain to a relevant data protection authority. In the United Kingdom, this may be the Information Commissioner’s Office.

Rights are not absolute. GC Scientific may need to retain certain information for legal, security, accounting, fraud prevention, dispute, contractual, or legitimate business reasons.

To make a privacy request, contact GC Scientific using the contact route provided on the platform. We may need to verify your identity before responding.

GC Scientific is not intended for children. The platform is designed for adults, professionals, clinics, teams, and members with a legitimate interest in advanced therapy education and protected platform resources.

You must not create an account or submit information if you are below the age required to use the platform in your jurisdiction.

GC Scientific may update this privacy policy from time to time to reflect changes in law, platform functionality, integrations, business operations, security practices, or service providers.

The latest version will be posted on this page. Continued use of the platform after changes are published means the updated policy applies from the stated effective date.