Privacy policy

1. Who is responsible

Merino Composite Academy is the controller of the personal data described below. You can reach us about any privacy matter at support@merinocompositeacademy.com.

2. What we collect

Purchase data: when you buy, Gumroad, Inc. collects your name, email address, country and payment details and shares the order information with us. Payment card details are handled by Gumroad and its payment processors — we never see or store them.

Data you send us: whatever you choose to include when you write by email or WhatsApp, apply for the mentorship or submit a case — your name, professional registration, phone number, practice details, clinical photographs and videos.

Technical data: pages visited, approximate location, device and browser information, and campaign parameters, collected through analytics and advertising tools such as Google Analytics, Google Ads, the Meta pixel and the TikTok pixel, which use cookies and similar technologies.

3. Why we use it and on what basis

To perform our contract with you: deliver access, run the Premium case review, issue your certificate, answer your questions and process refunds.

For our legitimate interests: improving the programme, understanding which parts of this site work, preventing fraud and unauthorised sharing, and defending legal claims.

With your consent, where required: marketing emails, and non-essential analytics and advertising cookies. You may withdraw consent at any time.

To comply with legal, tax and accounting obligations.

4. Clinical images

Material you send for case review is used only to review your case and is stored in access-restricted accounts. We ask that it never contain patient-identifying information, and confirming that is your professional responsibility as the treating clinician.

We do not publish material you send, and we do not show it to third parties. Anonymised material may be used for internal teaching; if you object, tell us in writing and we will not use it.

5. Sharing

We share data only with service providers that make the Academy work — payments (Gumroad), course hosting, email, file storage (including Google services) and analytics — and with professional advisers or authorities where the law requires it. We never sell your personal information.

Some providers are based outside your country, including in the United States and Brazil. Where required, transfers rely on the appropriate legal safeguards.

6. Retention

Purchase and tax records are kept for as long as the law requires. Case-review material is kept for the duration of your programme and for a reasonable period afterwards, and is then deleted. Marketing data is kept until you unsubscribe.

7. Your rights

Depending on where you live — for example under the UK and EU GDPR, Brazil’s LGPD, the Australian Privacy Act or California law — you may ask to access, correct, delete, restrict or port your personal data, to object to processing, or to opt out of the sale or sharing of personal information (we do neither). Write to support@merinocompositeacademy.com and we will respond within the period required by the applicable law. We may need to verify your identity first.

Deleting data that is needed to provide the programme may end your access, and doing so is not a ground for a refund.

8. Cookies and children

You can block or delete cookies in your browser; essential cookies are needed for the site to work. This site and the programme are intended for dental professionals and students aged 18 or over, and we do not knowingly collect data from children.

9. Security and changes

We take reasonable technical and organisational measures to protect personal data, but no online service can be guaranteed absolutely secure, and we cannot be held liable for unauthorised access that occurs despite those measures.

We may update this policy by publishing a new version on this page with a new “last updated” date.