We protect the privacy of everyone who visits our websites, studies with us or contacts us. This policy explains what personal data we hold, why, and the choices you have.
Personal data we collect
- Identity and contact details — name, organisation, email address and telephone number.
- Training records — courses attended, assessment results and certificate numbers.
- Application details — information and documents you send when applying for membership, centre accreditation or volunteering.
- Technical data — IP address, browser type and how you use our websites.
- Payment information — used only to process a purchase and never stored on our website.
We never sell personal data and we do not collect more than we need.
How we obtain it
- From you, when you enquire, enrol, apply or subscribe to our newsletter.
- From your employer or training centre, when they register you on a course.
- Automatically, when you use our websites (see our cookies policy).
How we use it
Most of the data we hold is needed to provide the services you asked for, for example to:
- deliver courses, issue certificates and keep them verifiable online;
- assess membership, centre and volunteer applications;
- answer enquiries and provide support;
- send our newsletter, if you have opted in;
- improve our products and services by analysing anonymous usage data;
- meet our legal and accounting obligations.
Certificate verification
To let employers and auditors confirm that a certificate is genuine, our verification service shows limited details — such as the holder’s name, course, issue date and validity — to anyone who enters a valid certificate serial number or scans its QR code.
Who we share it with
We share personal data only within ASOSH and with approved service providers who help us operate (for example hosting, email and payment processing), and only where:
- you have given consent;
- we are required to by law; or
- it is necessary to deliver a service you asked for — for example with the accredited centre delivering your course.
How we protect it
We restrict access to personal data to the people who need it, use encrypted connections on our websites and portal, and keep application documents in private storage that is not publicly accessible. Payments are handled by secure, certified payment providers.
How long we keep it
Certificate records are kept for as long as the certificate needs to remain verifiable. Applications that are not approved are deleted after a reasonable period. Other data is kept only as long as needed for the purpose it was collected or as required by law.
Your rights
You can ask us what personal data we hold about you, and ask us to correct it, delete it or stop using it for marketing. You can unsubscribe from our newsletter at any time using the link in each email. To make a request, email [email protected].
Changes to this policy
We may update this policy as our services and legal requirements change. The current version is always published on this page.