Draft for legal review
Privacy Policy
How CEPI proposes to collect, use, protect and retain personal information.
Information CEPI collects
CEPI may collect identity, contact, professional, qualification, application, consent, certificate and correspondence information supplied through its forms and professional services.
How information is used
Information is used to administer registrations, memberships, nominations, certificate verification, professional communication, fraud prevention and CEPI's legitimate operational obligations. Optional updates are sent only when separate consent is provided.
Storage and retention
Application files are stored privately. Provisional retention periods are 90 days for delivery logs, 24 hours for rate-limit records, 24 months for unsuccessful applications and registrations, 24 months for audit logs, and active lifetime plus seven years for approved membership and certificate history. These periods require legal approval.
Choices and requests
Individuals may request access, correction, marketing withdrawal or deletion where applicable by contacting CEPI. Identity verification may be required before a request is completed.