Privacy Policy

    Last updated: December 30, 2025

    1. Introduction

    MATE CME ("we," "our," or "us") is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our continuing medical education platform and services.

    2. Data Controller

    MATE CME acts as the data controller for the personal data we collect. For any data protection inquiries, please contact our Data Protection Officer at privacy@matecme.com.

    3. Legal Basis for Processing

    We process your personal data under the following legal bases:

    • Contract Performance: Processing necessary to provide our CME courses and services you have purchased

    • Legal Obligation: Processing required for compliance with accreditation requirements, professional licensing regulations, and audit obligations

    • Legitimate Interests: Processing for improving our services, fraud prevention, and platform security

    • Consent: Processing based on your explicit consent, such as marketing communications

    4. Information We Collect

    Personal Information

    We collect personal information that you voluntarily provide when using our services, including:

    • Name and contact information (email address, phone number, mailing address)

    • Professional credentials and license information (required for CME certification)

    • Payment and billing information

    • Account credentials

    • Course completion records, evaluation scores, and certification data

    • Survey responses and feedback

    • Communications with our support team

    Automatically Collected Information

    When you access our platform, we may automatically collect:

    • Device information (browser type, operating system)

    • IP address and approximate location data

    • Usage data and analytics (pages visited, time spent, course progress)

    • Cookies and similar tracking technologies

    5. How We Use Your Information

    We use the collected information for the following purposes:

    • Providing and maintaining our CME courses and services

    • Processing transactions and sending related information

    • Generating CME certificates and reporting completion to accrediting bodies

    • Verifying professional credentials with licensing authorities

    • Sending administrative information, course updates, and account notifications

    • Responding to inquiries and providing customer support

    • Improving our platform and developing new features

    • Complying with legal obligations and regulatory requirements

    • Preventing fraudulent activity and ensuring platform security

    • Sending marketing communications (only with your explicit consent)

    6. Information Sharing and Disclosure

    We may share your information in the following circumstances:

    • Accreditation Partners: We share completion data with AKH, Inc., Advancing Knowledge in Healthcare, and relevant accrediting bodies (ACCME, state medical boards) for certification reporting as required by law

    • Professional Licensing Boards: CME records may be shared with state licensing authorities upon their request or as required for license renewal

    • Service Providers: Third-party vendors who assist in operating our platform (payment processors, hosting providers, email services) under strict data processing agreements

    • Legal Requirements: When required by law, court order, governmental authority, or professional regulatory bodies

    • Business Transfers: In connection with a merger, acquisition, or sale of assets, with continued privacy protection

    • With Your Consent: When you have given explicit permission

    7. Data Retention and CME Compliance Requirements

    Important Notice Regarding Data Retention: As a CME provider accredited through AKH, Inc., we are legally required to retain certain records for compliance purposes. This may limit our ability to delete some of your data upon request.

    We retain your personal information according to the following guidelines:

    • CME Completion Records: Retained for a minimum of 6 years as required by ACCME accreditation standards and may be retained longer based on state licensing requirements

    • Professional License Information: Retained for the duration of your account plus 6 years for audit and verification purposes

    • Evaluation and Survey Responses: Retained for 6 years for accreditation compliance and quality improvement

    • Financial Records: Retained for 7 years as required by tax and accounting regulations

    • Account Information: Retained while your account is active and for 6 years after closure

    • Marketing Consent Records: Retained for as long as you have an account to document consent status

    Under GDPR Article 17(3)(b), we may refuse deletion requests when data processing is required for compliance with legal obligations. CME records fall under this exception as they are required for professional licensing, accreditation audits, and regulatory compliance.

    8. Your Rights Under GDPR

    If you are located in the European Economic Area (EEA) or UK, you have the following rights regarding your personal data:

    • Right of Access: Request a copy of all personal data we hold about you

    • Right to Rectification: Request correction of inaccurate or incomplete information

    • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal retention requirements for CME records

    • Right to Restrict Processing: Request limitation of how we use your data

    • Right to Data Portability: Request transfer of your data in a machine-readable format

    • Right to Object: Object to processing based on legitimate interests or for direct marketing

    • Right to Withdraw Consent: Withdraw consent for marketing communications at any time

    • Right to Lodge a Complaint: File a complaint with your local data protection authority

    To exercise these rights, please contact us at privacy@matecme.com. We will respond to your request within 30 days. Note that some requests may be limited by our legal obligations to retain CME records.

    9. Account Deactivation vs. Data Deletion

    You may request to deactivate your account at any time. When you deactivate your account:

    • Your account will be disabled and you will no longer be able to log in

    • Your profile will not be visible to other users

    • You will stop receiving marketing communications

    • CME completion records, certificates, and professional credentials will be retained as required by accreditation and licensing regulations

    • You can request reactivation of your account at any time

    Full data deletion requests will be evaluated on a case-by-case basis. We will delete all data that is not subject to legal retention requirements and provide you with documentation of what was retained and why.

    10. Marketing Communications

    We will only send you marketing communications if you have explicitly opted in during registration or through your account settings. Marketing communications may include:

    • New course announcements and promotions

    • Special offers and discounts

    • Industry news and educational content

    • Partner offers (only with your specific consent)

    You can withdraw your marketing consent at any time by:

    • Clicking the "unsubscribe" link in any marketing email

    • Updating your preferences in your Account Settings

    • Contacting us at privacy@matecme.com

    Note: Even if you opt out of marketing, you will still receive essential transactional emails about your account, purchases, and course completions.

    11. Data Security

    We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

    12. International Data Transfers

    Your data may be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on Standard Contractual Clauses approved by the European Commission or other valid legal mechanisms to ensure adequate protection of your data.

    13. Cookies and Tracking Technologies

    We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and personalize content. You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain features. For detailed information, please see our Cookie Policy.

    14. Third-Party Links

    Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

    15. Children's Privacy

    Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information.

    16. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the updated policy on our platform with a new "Last updated" date. Your continued use of our services after such modifications constitutes acceptance of the updated policy.

    17. Contact Us

    If you have questions or concerns about this Privacy Policy, wish to exercise your data rights, or need to contact our Data Protection Officer, please reach out to us at:

    MATE CME - Data Protection
    Email: support@matecme.com