Legal review required. This is an honest description of what the site as built actually does. It is not legal advice and it is not complete: the controller identity, registered address, ICO registration and lawful basis wording need to be confirmed by whoever is accountable for data protection before publication.
Who is responsible
CPD Accredited is the data controller for personal data collected through cpdaccredited.co.uk. Registered office and company number: TODO add registered office address, TODO add company registration number.
Data protection enquiries go to hello@cpdaccredited.co.uk.
What we collect
- Enquiry and report forms. The name, email address, organisation and message you type in, plus any accreditation reference you supply. Where you choose to report anonymously, we do not collect your name or email address.
- Newsletter. The email address you give us, and nothing else.
- Provider accreditation records. The contact details of the person accountable for an accredited activity, and correspondence about the assessment.
- Server logs. Requests to the site are logged by our hosting provider, including IP address and user agent, for security and reliability.
The site does not use analytics or advertising trackers, and it does not embed third party scripts on any page.
Why we collect it
- To answer your enquiry or investigate your report.
- To carry out and maintain accreditations, and to run the annual review.
- To publish the accredited provider register, which names providers and activities.
- To send updates where you have asked for them.
- To keep the service secure and available.
The register is published because accreditation is only checkable if it is public. It names organisations and learning activities. It does not publish the names of individual learners.
Who we share it with
We do not sell personal data and we do not share it for marketing. We use service providers to run the site and send email, and they process data on our instructions only.
Where we investigate a report, we may put the substance of it to the provider concerned. We do not disclose who made the report.
How long we keep it
- Enquiries and reports: for as long as needed to deal with them, and then for our records.
- Accreditation records: for the accreditation period and afterwards, so the register history stays accurate.
- Newsletter subscriptions: until you unsubscribe.
- Server logs: for the period set by our hosting provider.
Specific retention periods need to be set and stated here.
Your rights
You can ask us for a copy of your personal data, ask us to correct it, ask us to delete it, and object to how we use it. Write to hello@cpdaccredited.co.uk.
If you are not satisfied with how we have handled your data, you can complain to the Information Commissioner's Office.
Cookies
This site sets no cookies of its own and shows no cookie banner, because there is nothing to consent to. If that changes, this section and a consent mechanism have to change with it.