Last updated: August 14, 2026
Who we are
This website and the Path to Practice app, books, courses, and newsletter are operated by Dr. Filipe Santos MD (“we”, “us”). Contact us through the contact page, or by mail at 517 Richmond St East, Suite 1042, Toronto, ON M5A 1R4, Canada.
What we collect and why
- Newsletter (The Weekly Ten): your email address, optional name, the interests/pathway you select (e.g. MCCQE, NAC, PRA, PER), where you signed up, and a record of your consent (date, time, and confirmation click). Used only to send you the newsletter and the occasional course and book announcements you agreed to. Legal basis: your express consent.
- Purchases: name, email, and billing details, processed by Stripe. We never see or store full card numbers. Legal basis: performing the contract with you; records are kept as tax law requires.
- Consultations: the information you share when booking or during a consultation. Legal basis: performing the service you requested.
- Site usage: cookies and analytics via HubSpot (after you accept the cookie banner) and Google Analytics. For visitors in the European Economic Area, the United Kingdom, and Switzerland, Google Analytics runs without cookies unless consent is given. Legal basis: consent, and our legitimate interest in understanding aggregate site usage.
Who processes data for us
Brevo (email delivery — data hosted in the EU), HubSpot (contact management and site analytics), Make (moves signup data between the two), Stripe (payments), Google (site analytics via Google Analytics), and DigitalOcean (website hosting). Each acts under a data-processing agreement and only on our instructions. We never sell your data.
How long we keep it
Newsletter contacts: if you haven’t opened or clicked anything for 24 months, we send one “still want these?” email; if there is no response within 30 days, we delete you from the mailing system. Purchase records are kept as long as tax and accounting law requires. Consultation confidentiality obligations survive for five years (see below).
Your rights
Every email has a one-click unsubscribe that takes effect immediately. You can also ask us at any time to access, correct, export, or delete your personal data — use the contact page and we will respond within 30 days. If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada; in the EU/EEA, to your local data-protection authority.
Consultation confidentiality
Information disclosed in connection with consultation services is treated as confidential: it is used only to deliver the services, protected with reasonable safeguards, never shared without written consent except as required by law, and returned or destroyed on request. These obligations survive for five years after services end (trade secrets indefinitely).
Changes
We will post any updates here with a new “last updated” date.