Privacy Policy

Introduction

This webpage sets out how the IPMC collects, holds and processes personal data, rights regarding individual data and provides key contact information for queries relating to personal data issues. This Privacy Policy sets out how we may use, process and store your personal data. Personal data is any information that can be used to identify or be reasonable associated with a specific person.

We need your personal data in order to deliver contractual/legal obligations you may have with us or our business partners or to allow us to provide you our services. In other cases, we will collect that information from you with your permission and consent.

Where IPMC provides services to you on its own behalf (such as when you use our websites or purchase an examination), IPMC is a "Controller" for all the personal data collected. Where IPMC is administering exams and learning platforms on behalf of an official training provider, IPMC is the "Processor" for the platform administration and the training provider is the "Controller".

Your Data Protection

The General Data Protection Regulation (GDPR) came into effect from 25 May 2018.  As an EU Regulation, the new law took effect automatically and when the UK leaves the EU, the GDPR will be incorporated into UK law by the European Union (Withdrawal) Bill. The UK Government has also published the UK Data Protection Act 2018, which will supplement GDPR standards in the UK. This means that, even post-Brexit, IPMC will need to comply with the GDPR.

The GDPR’s data protection principles are similar to those under the old UK Data Protection Act 1998.  IPMC must be able to demonstrate that any personal data we handle is:

• processed lawfully, fairly and transparently;
• collected for specified, explicit and legitimate purposes;
• adequate, relevant and limited to what is necessary;
• accurate and kept up to date where necessary;
  kept for no longer than is necessary where data subjects are identifiable; and
• processed securely and protected against accidental loss, destruction or damage

How do we protect your personal data?

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need-to-know. They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We endeavour to ensure that suitable organisational and technical measures are in place to prevent the unlawful or unauthorised processing of your Data and against the accidental loss of or damage to your Data. This includes:

• storing Data on appropriately secure systems;
• training all our staff in their data protection responsibilities;
• working with reputable companies for data processing services who are data protection compliant and who enter into appropriate data sharing agreements; and
• ensuring that appropriate protection is in place when we work with trusted organisations based outside the European Economic Area (EEA)

Your data protection rights

Under data protection law, you have rights including:

• Your right ofaccess - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

• Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances.
• Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Personal information we may collect from you

IPMC may collect information from you because we have a legal reason (allowed by law or under contract) to collect the information, or because you have consented for us to do so for a specific purpose.

Information you give us

You may give us information about you with your consent or as required for you to use our services, for example:

• Information you provide to create an account with us
• The forms, emails, and other communications that you send us or otherwise contribute, such as support inquiries or posts to our message boards or forums. Please be aware that information on public parts of our websites and online platforms is available to others.
• Your marketing preferences.
• Information you share with us in connection with surveys or promotions.
• Information you share with us by applying for a job at IPMC.
• Information you submit to us at a conference or exhibition.

This information may be personal, financial, educational, or related to your employment history.

Sometimes we require you to provide us with information for legal reasons, such as to enter into a contract with us, when you are buying exams, assessments or other goods or services from us, or when you are applying for a job at IPMC.

Information obtained from other sources 

If you purchase an IPMC exam or online training delivered via one of our business partners or training providers, they may provide us with certain personal information about you (such your name and email address) to allow us to provide services to you. The privacy policy of the applicable business partner/ training provider will control how they use your information and share this information with us. Make sure you are comfortable with their privacy terms by reviewing their privacy policy.

Website and online usage information

IPMC’s website does not capture or store personal information, except where you voluntarily choose to provide your personal details (for example on one of our forms).

Where you provide IPMC with your personal details via the Internet, we will not pass this information to any other organisations or individuals without your consent.

Our web server automatically collects standard information, including your IP address, browser type, operating system and access times.We use a third party service, Google Analytics, to collect standard website performance information.  This information is processed in a way that it does not identify individuals. IP addresses are not linked to personally identifiable information.

If you visit one of our websites or use one of our online platforms, we may automatically collect information about you, for example:

• IP addresses
• Information about the technology you use to connect to our website and/or online platform
• What parts of our website or online platform you click on and how long you look at our website or online platform.

As well as the information that you provide, we receive and store a range of website and online platform usage information whenever you use one of our websites or online platforms. If we want to collect personal information, we will be clear and specific why we require this information and ask you to opt-in.

We use this to:

• assess the effectiveness of marketing campaigns
• develop and deliver services and information that better meet your needs
• inform you of events, services and products which we believe to be relevant to you, where you have consented to be contacted for such purposes.

Who might we share your information with?

IPMC may share your personal information with third parties, either because you have consented to allow us to do so or for a legitimate purpose or to comply with the law. For example, we may share your personal information with:

• The training organization who provided training to you before you took an examination, (for example, to share your examination result or to deal with a complaint) or from whom you have purchased online training delivered via IPMC owned products;
• With third parties because you have given consent
• With third parties who provide shipping or publishing services because you have purchased goods or services
• On our Successful Candidate Register if you have consented

Subcontractors and third parties for the purpose of the performance of a contract we hold with them or that we hold with you for a service you have chosen. They only receive data needed to provide their services to us and are required to use such data only in order to perform the services we hired them to do (unless otherwise required by law). We have agreements with our service providers that say that they cannot use any of this data for their own purposes or for the purposes of another third party.

How long will we keep your personal information?

IPMC will not retain your personal information for longer than required.

We will keep your personal information:

• For as long as required by law
• Until we no longer have a valid reason for keeping it
• Until you request us to stop processing it.

We will retain personal data collected for as long as required to do what we say we will in this policy, unless a longer retention period is required by law.

What if I chose not to give you my personal information?

If the personal information is necessary in order to supply goods or services to you under a contract between you and IPMG or via one of our business partners, then we will not enter into that contract or provide the services or goods if you do not give us your personal information.

Controlling your personal information

Where you have consented to receive communications from us or are currently receiving material relating to our products or services, you may at any time ask us to cease sending you such material by contacting us.

We will not sell, distribute or lease your personal information to third parties.