Privacy notice
This notice explains how The CPD Accreditation Bureau uses the personal data you give us through this website. We keep it short and plain.
Who we are
The CPD Accreditation Bureau is an independent CPD accreditation body based in Malta. For anything about your data, write to hello@cpdaccreditationbureau.com.
What we collect
When you send an accreditation enquiry we collect your name, work email, organisation, country, optional website, the type of provider you are, roughly how many activities you would like accredited, and any message you choose to add. We also record the country your request came from, as reported by our hosting provider, to understand where interest is coming from.
Why we use it
We use these details only to reply to your enquiry and to contact you about accreditation with the Bureau. Our legal basis is your consent, which you give by ticking the box on the form.
Where it is kept
Your details are stored in a database hosted by Cloudflare, set to keep the data within the European Union. Cloudflare acts as our data processor. We do not sell your data or share it for marketing.
How long we keep it
We keep your details for up to two years from our last contact with you, unless you become an accredited provider or ask us to delete them sooner.
Provider accounts and submissions
When an organisation joins, we keep the contact name, email address and organisation name for its provider account, together with its membership details and the submissions and files it uploads for assessment. We use these to provide accreditation, to contact the provider about its membership and submissions, and to keep the records the Accreditation Standard requires. Our legal basis is the contract between us.
Payments are handled by Stripe, which receives the payment and billing details directly; we never see or store card numbers. Sign-in links and service emails are sent through our email provider, Resend. Uploaded files are stored with Cloudflare in the European Union. We keep provider records for as long as the membership lasts and for six years after it ends, to meet accounting and accreditation record-keeping duties.
Certificate checks and the Find CPD directory
When a learner completes an accredited activity, the provider records their certificate with us. Anyone who enters a certificate number on our Verify page sees the learner’s first name and the first letter of their surname, with the activity, hours and completion date. We never show full names, email addresses or other contact details. The Find CPD directory lists accredited activities and the business details their providers choose to publish. You do not need to give us any personal details to check a certificate or search the directory.
Your rights
- Ask for a copy of your data.
- Ask us to correct or delete it.
- Withdraw your consent at any time, which stops us contacting you.
- Complain to Malta’s Information and Data Protection Commissioner (IDPC) if you are unhappy with how we handle your data.
To use any of these rights, email hello@cpdaccreditationbureau.com.
Cookies and tracking
The provider portal uses one essential cookie to keep you signed in. It contains no personal details and is removed when you sign out or after 30 days. This website does not use advertising or analytics cookies. Fonts are served from our own website. Photographs are loaded from Unsplash, so your browser connects to Unsplash’s servers to display them. If spam protection is switched on, Cloudflare Turnstile checks that form submissions come from a person.