Last updated: October 20, 2026
Who we are
This website and the Path to Practice app, books, courses, and newsletter are operated by Dr. Filipe Santos MD (“we”, “us”). Contact us through the contact page, or by mail at 517 Richmond St East, Suite 1042, Toronto, ON M5A 1R4, Canada.
What we collect and why
- Newsletter (The Weekly Ten): your email address, optional name, the interests/pathway you select (e.g. MCCQE, NAC, PRA, PER), where you signed up, and a record of your consent (date, time, and confirmation click). Used only to send you the newsletter and the occasional course and book announcements you agreed to. Legal basis: your express consent.
- Purchases: name, email, and billing details, processed by Stripe. We never see or store full card numbers. Legal basis: performing the contract with you; records are kept as tax law requires.
- Consultations: the information you share when booking or during a consultation. Legal basis: performing the service you requested.
- Site usage: cookies and analytics via HubSpot (after you accept the cookie banner) and Google Analytics, advertising measurement via the Google Ads tag and the Meta Pixel (which tells Google and Meta when a visit or purchase followed one of our ads), and Microsoft Clarity, which records how visitors move through pages (clicks, scrolls, and taps) so we can see where the site is confusing. Clarity masks the text you type into forms, and the eligibility screener never sends your answers to us. For visitors in the European Economic Area, the United Kingdom, and Switzerland, Google Analytics runs without cookies unless consent is given. Legal basis: consent, and our legitimate interest in understanding aggregate site usage.
Who processes data for us
Brevo (email delivery, data hosted in the EU), HubSpot (contact management and site analytics), Make (moves signup data between the two), Stripe (payments), Google (site analytics via Google Analytics, and conversion measurement for Google Ads), Meta (conversion measurement for Facebook and Instagram ads via the Meta Pixel; Meta also receives a scrambled (hashed) copy of the email addresses of people who bought from us or registered for our sessions, so we can show our ads to similar people, and Meta matches them and does not keep the addresses for any other purpose), Microsoft (Clarity, session recordings and heatmaps), and DigitalOcean (website hosting). Each acts under a data-processing agreement and only on our instructions. We never sell your data.
How long we keep it
Newsletter contacts: if you haven’t opened or clicked anything for 24 months, we send one “still want these?” email; if there is no response within 30 days, we delete you from the mailing system. Purchase records are kept as long as tax and accounting law requires. Consultation confidentiality obligations survive for five years (see below).
Your rights
Every email has a one-click unsubscribe that takes effect immediately. You can also ask us at any time to access, correct, export, or delete your personal data: use the contact page and we will respond within 30 days. If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada; in the EU/EEA, to your local data-protection authority.
Consultation confidentiality
Information disclosed in connection with consultation services is treated as confidential: it is used only to deliver the services, protected with reasonable safeguards, never shared without written consent except as required by law, and returned or destroyed on request. These obligations survive for five years after services end (trade secrets indefinitely).
Changes
We will post any updates here with a new “last updated” date.