Privacy and data protection
The certification body processes candidate data only as necessary to administer applications, verify identity and eligibility, arrange assessments, make certification decisions, issue and renew credentials, provide public verification, and meet applicable legal and regulatory obligations.
Data may include name, contact details, identity information, qualifications and professional experience, booking details, assessment outcomes, supporting documents, and credential and renewal records.
Public verification displays only the minimum professional information necessary to confirm a credential, such as credential holder name, credential title, status, issue and expiry dates, and credential number. It does not display scores, identity documents, or supporting professional documents.
Sensitive documents are stored in protected private storage with restricted access and access-review logging. Candidate data is not sold, rented, or disclosed for unrelated marketing purposes.
Limited data may be shared with examination centres, service providers, or contracted organisations only where necessary to deliver certification services and subject to appropriate confidentiality and data-protection obligations.
Certification decisions, issued credentials, and suspension or withdrawal records are retained for the period necessary to protect credential integrity and comply with applicable law. Detailed retention periods are set out in the Privacy Notice and Data Retention Schedule.
