GDPR Consent

DRAFT – FOR REVIEW

This document explains how CertifySafe Academy (CSA) may process personal data in connection with registration, training, assessment, certification and related administrative activities.

1. Purpose of Data Processing

CSA may process candidate information for the following purposes:

  • Creating and administering a Moodle learner account.
  • Managing course enrolment and training participation.
  • Recording assessment attempts, results and completion status.
  • Issuing, maintaining and verifying certificates.
  • Communicating operational and training-related information.
  • Maintaining audit, quality and compliance records.
  • Responding to support, complaint, appeal or verification requests.

2. Categories of Personal Data

Information processed may include:

  • Name and contact information.
  • Date of birth and nationality.
  • Residential address and postal code.
  • Identification type, identification number and expiry date.
  • Employer or company information where applicable.
  • Course participation and assessment information.
  • Certificate and verification records.
  • System and audit information necessary for security and traceability.

3. Lawful and Fair Processing

CSA will process personal information only for legitimate and authorised purposes connected with its training and certification activities and in accordance with applicable data-protection requirements.

4. Data Security

CSA applies appropriate controls including:

  • Role-based access to authorised systems.
  • Secure transmission of system data.
  • Controlled storage of official training and certification records.
  • Audit logging and traceability of relevant system activity.
  • Use of approved service providers and platforms.

5. Data Retention

Records are retained in accordance with their operational, certification, audit and legal purpose and with CSA's applicable document-control and retention requirements.

6. Candidate Rights

Subject to applicable law, candidates may have rights to:

  • Request access to their personal data.
  • Request correction of inaccurate information.
  • Request restriction of processing where applicable.
  • Object to certain processing where legally permitted.
  • Request deletion where applicable.
  • Raise a concern with the relevant supervisory authority.

7. Consent and Acknowledgement

By selecting the corresponding registration checkbox, I confirm that I have read and understood this GDPR Consent information and acknowledge the processing of my personal data for the purposes described above.