Privacy Policy

• Account and identity data such as name, email address and login credentials managed through the authentication provider.
• Contact and enquiry data submitted through forms, including professional interests and messages.
• Purchase, subscription and transaction information provided by the relevant payment or learning-platform provider.
• Usage, technical and security information required to operate, diagnose, protect and improve the service.
• Content or files voluntarily uploaded by users where a product feature allows it.

• To provide accounts, courses, memberships, services and requested support.
• To process enquiries and legitimate commercial communications.
• To maintain security, prevent abuse, investigate errors and restore service.
• To comply with applicable legal, tax, accounting and contractual obligations.
• To improve the Institute and its products using aggregated or appropriately controlled operational information.

The Institute may rely on specialist providers for hosting, authentication, payments, learning delivery, email, analytics or other operational functions. Data is shared only to the extent reasonably necessary for the relevant service and subject to the provider's own contractual and security framework.

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected, to maintain the user relationship, to protect the service, or to meet legal and accounting requirements. Retention periods may vary by data category and provider.

Where applicable, users may have rights to access, correct, delete, restrict or object to certain processing, request portability, and withdraw consent where consent is the legal basis. Requests can be sent to the contact address shown on the Institute website. Identity verification may be required before a request is completed.

Because the Institute operates internationally and uses global technology providers, information may be processed in countries other than the user's own. Appropriate safeguards should be used where required by applicable data-protection law.

Reasonable technical and organisational measures are used to protect information, but no online service can guarantee absolute security. If a material incident affecting personal data is confirmed, the Institute will follow the notification and response obligations applicable to the situation.

Privacy questions or requests can be directed through the Institute contact page or to the email address published there.