Legal

Privacy Policy

Last updated: 24 May 2026

CORE Certified ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use and protect information about you when you use our website and services.

1. Who We Are

CORE Certified is the data controller for personal data collected through this website. If you have questions about this policy, contact us at compliance@core-certified.com.

2. What Data We Collect

Identity data — first name, last name, job title.
Contact data — email address, phone number.
Account data — username, password (hashed), certification progress.
Payment data — billing address. Card details are processed directly by Stripe and never stored by us.
Technical data — IP address, browser type, pages visited, time spent on site (via cookies).
Communications data — messages you send us via the contact form or email.

3. How We Collect Your Data

When you register for a certification programme.
When you make a payment through our site.
When you contact us via the contact form or email.
Automatically via cookies and analytics tools when you browse our site.

4. How We Use Your Data

To create and manage your account and certification progress.
To process payments and issue certificates.
To respond to enquiries and provide support.
To send programme-related communications (exam results, reminders, certificates).
To improve our website and services.
To comply with legal obligations.

5. Legal Basis for Processing

Contract — processing is necessary to deliver the certification services you have purchased.
Legitimate interests — to operate, improve and secure our platform.
Consent — where you have given explicit consent (e.g. marketing emails).
Legal obligation — where we are required to process data by law.

6. Data Sharing

We do not sell your personal data. We may share data with trusted third parties who assist in operating our platform, including:

Stripe — payment processing.
Zoho / WP Mail SMTP — email delivery.
Hosting provider — website infrastructure.

All third parties are required to process your data securely and only for specified purposes.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Certification records are retained for a minimum of 7 years. You may request deletion of your data at any time (subject to legal retention requirements).

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data.
Correct inaccurate data.
Request erasure of your data.
Object to or restrict processing.
Data portability.
Withdraw consent at any time.

To exercise any of these rights, contact us at compliance@core-certified.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use cookies to improve your experience on our site. For full details, please see our Cookie Policy at /cookie-policy/.

10. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Passwords are stored using industry-standard hashing. Payment data is handled entirely by Stripe under PCI-DSS compliance.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of our site after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related queries, contact us at compliance@core-certified.com or write to us at the address on our contact page.