Privacy Policy

1. What we collect

• Application information: organisation name and address, contact name and email, activity details, learning outcomes, faculty information, evaluation arrangements and declarations.
• Uploaded documents: programmes, timetables, faculty lists and evaluation instruments, stored in private storage accessible only to reviewers and administrators.
• Payment records: amount, currency, status and a payment reference. Card details are handled by our payment processor and never reach our systems.
• Correspondence: emails you send us and our replies.
• Technical information: server logs of requests to this site, used for security and diagnostics.

2. Why we hold it

• To assess applications and issue decisions — performance of a contract with you.
• To maintain the public register — legitimate interests in verifiable accreditation.
• To investigate complaints and appeals — legitimate interests and legal obligations.
• To keep accounting records — legal obligation.

3. What appears publicly

The register shows the provider name, activity title, accreditation number, status, credit value, delivery format, standards version and validity dates. Reviewer names are published on the reviewers page. Nothing else from an application is published: contact details, uploaded documents, fee information and review notes are not public.

4. Who we share it with

• The reviewer allocated to your application, who is bound by confidentiality.
• Our hosting, database and email providers, acting on our instructions.
• Our payment processor, for taking and reconciling payments.
• A regulator, professional body or court where we are legally required to.

We do not sell personal information and we do not use it for advertising.

5. How long we keep it

• Applications, review findings and decisions: six years from the decision.
• Uploaded documents: three years from the decision.
• Register entries: retained as a permanent record of accreditations issued.
• Accounting records: six years, as required by law.
• Server logs: ninety days.

6. Your rights

You may ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it where we no longer need it, object to processing based on legitimate interests, or ask us to restrict processing while a dispute is resolved. Send us a message from our contact page and we will respond within one month. You can also complain to the Information Commissioner's Office.

7. Cookies

This site does not use advertising or tracking cookies. Cookies are used only where they are strictly necessary for the site to work, such as protecting form submissions against cross-site request forgery.

8. Security

Application data is held in an access-controlled database. Uploaded documents are held in private storage that is not publicly readable. Access is limited to those who need it to review applications or administer accreditations.

9. Contact

Data protection enquiries: use the contact form on our contact page.