Privacy Policy

At CPD Signature Service, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website, use our services, or apply for CPD accreditation. We aim to be transparent, clear, and fully compliant with all relevant UK data protection laws, including the UK GDPR and the Data Protection Act 2018.

  1. Information We Collect

1.1 Personal Information

We collect personal information that you provide directly to us when:

Submitting a CPD accreditation application

Registering for updates or newsletters

Contacting us via email, phone, or web forms

Examples include:

Full name and date of birth

Organisation or trading name and type

Home and business address

Contact telephone number and email address

Website URL and social media links

Company Registration Number (if applicable and provided)

Description of your training activities and delivery methods

1.2 Usage and Technical Information

We automatically collect technical data when you use our website or services:

IP address

Browser type and version

Pages visited and time spent

Device type and operating system

Referring website or search engine

This information helps us improve website performance, user experience, and security. It is not used to identify you personally.

1.3 Cookies and Tracking Technologies

We use cookies and similar tools to:

Ensure proper website and application form functionality

Track user interactions for analytics purposes

Improve website content and service delivery

Cookie retention: Analytics cookies are retained for up to 13 months. Essential cookies expire at the end of your browser session unless otherwise stated.

You can manage or disable cookies at any time through your browser settings. For guidance, visit the Information Commissioner’s Office (ICO) Cookies Guidance at www.ico.org.uk.

  1. How We Use Your Information

2.1 To Provide Services

We use your data to:

Review and process CPD accreditation applications

Manage your accreditation account and provider record

Maintain your listing on the CPD Signature Service Provider Register

Issue accreditation credentials and certificates

2.2 To Communicate With You

We use your contact details to:

Send updates about your application and accreditation status

Respond to any queries you raise with us

Send important service-related notices

With your explicit consent, we may also send newsletters or updates about our CPD services. You can unsubscribe at any time via the link in any email we send.

2.3 To Improve Our Services

Data collected helps us:

Analyse website usage and application trends

Optimise our accreditation processes and provider experience

Detect and prevent fraud or misuse of our platform

2.4 Legal and Regulatory Compliance

We may process your data where necessary to:

Comply with UK laws and regulations

Meet obligations from government or professional bodies

Resolve disputes or enforce our agreements

  1. How We Share Your Information

3.1 Trusted Service Providers

We may share your information with carefully selected third-party providers who assist us in operating our platform, including:

Website hosting and technical infrastructure providers

Email and CRM communication platforms

Analytics service providers

All third parties are contractually required to keep your data secure and to use it only for the specific purpose for which it was shared. We do not sell your personal data to any third party.

3.2 Legal Requirements

We may disclose your information to law enforcement agencies, regulators, or other authorities if required to do so by law or in response to a valid legal request.

3.3 Accreditation Verification

Your business name, organisation description, and public contact details (as submitted in your application) may be displayed on the CPD Signature Service Provider Register, which is publicly accessible. This allows learners and employers to verify your accreditation status.

3.4 Analytics

Aggregated and anonymous usage data may be shared with analytics providers to help us understand how our platform is used. This data cannot be used to identify you individually.

  1. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right to Access

Request a copy of the personal data we hold about you

Right to Correct

Ask us to update any inaccurate or incomplete information

Right to Erasure

Request that we delete your data, subject to any legal obligations to retain it

Right to Restrict Processing

Ask us to limit how we use your data in certain circumstances

Right to Object

Object to processing based on our legitimate interests

Right to Data Portability

Request your data in a commonly used, machine-readable format

Right to Withdraw Consent

Where consent is the basis for processing, you may withdraw it at any time

To exercise any of these rights, please contact us at info@cpdservice.co.uk. We will respond to all valid requests within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK’s data protection authority: Information Commissioner’s Office (ICO)

  1. Data Retention

We only retain your personal data for as long as is necessary for the purposes set out in this policy. Our standard retention periods are as follows:

Accreditation Application Data

Retained for the duration of your accreditation and for up to 3 years after your accreditation expires or is terminated

Up to 3 years

General Enquiry and Contact Data

Retained for up to 2 years from the date of last contact

Up to 2 years

Website Usage and Analytics Data

retained for up to 13 months

Up to 13 months

Legal and Compliance Records

Retained for as long as required by applicable law

As required by law

When your data is no longer required, it is securely deleted or anonymised so that it can no longer be linked to you.

  1. Data Security

We take the security of your personal information seriously. The measures we have in place include:

Secure servers and encrypted databases

Encrypted communication channels for sensitive data transfers

Strict access controls, ensuring only authorised personnel can access personal data

Regular security reviews and monitoring of our systems

While we do everything reasonably possible to protect your information, no method of data transmission over the internet is completely secure. We cannot guarantee absolute security, but we will notify you promptly in the event of a data breach that is likely to affect your rights or freedoms.

  1. Cookies & Analytics

We use cookies to:

Ensure the website and application form function correctly

Monitor site performance and traffic patterns

Track engagement with our content and application journey

Types of cookies we use:

Essential Cookies

Required for the website to work. These cannot be disabled.

Analytics Cookies

Help us understand how visitors use our site. Retained for up to 13 months.

Preference Cookies

Remember your settings and choices during your visit.

  1. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in how we operate or in applicable law. When we make significant changes, the updated version will be posted on our website with a revised effective date. We encourage you to review this policy periodically.

  1. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please get in touch:

Add Your Heading Text Here