Privacy Notice

1. Controller

United Knowledge Group Ltd, company number 16959290, is the controller for personal information processed for its own professional-certification activities unless a specific notice states otherwise.

2. Information we process

• Identity and contact details.
• Account and authentication records.
• Application, CV, education, experience and portfolio evidence.
• Identity documents where required for candidate verification.
• Assessment responses, scores, proctoring/integrity events and certification decisions.
• Payment references and transaction status (payment-card data is normally handled by the payment provider).
• Support, complaints, appeals and privacy communications.
• Security logs, IP/device information and audit events.
• Issued credential and verification-status records.

3. Purposes and lawful bases

Processing may be necessary to take steps at your request or perform a contract, comply with legal obligations, and pursue legitimate interests such as examination integrity, fraud prevention, security, quality assurance and defence of legal claims. Where consent is the appropriate basis, it is requested separately. The exact lawful basis can differ by processing activity.

4. Data minimisation

Only information reasonably necessary for the defined certification, verification, security or legal purpose should be collected. Scheme owners must justify required evidence. Passport or identity-document collection must be limited to what is necessary for identity assurance and should not be reused for unrelated purposes.

5. Sharing and processors

Information may be shared with authorised service providers supporting hosting, email, payments, identity/verification, assessment delivery, security or professional advice where necessary. Providers receive only information appropriate to their role and are subject to contractual and security controls where required.

6. International transfers

If personal information is transferred outside the UK, United Knowledge Group must use an applicable lawful transfer mechanism and provide information about the relevant safeguard where required.

7. Retention

Information is not kept indefinitely merely in case it may be useful. Retention periods are set by record category, certification lifecycle, legal limitation periods, security and audit needs. When identifiable information is no longer required, it should be securely deleted or anonymised. A controlled retention schedule is maintained internally.

8. Security

Access controls, logging, encryption or equivalent safeguards, secure document handling, backups and incident-management controls are used proportionately to the risk. No internet service can guarantee absolute security.

9. Your rights

Depending on the lawful basis and circumstances, rights may include access, rectification, erasure, restriction, objection and data portability. A request can be submitted through the Candidate Centre privacy-request function or the official privacy contact. Identity may be verified before protected information is disclosed or changed.

10. Complaints

You may raise a privacy concern with United Knowledge Group. Where UK data-protection law applies, you may also have the right to complain to the Information Commissioner’s Office.

11. Changes

This notice is version-controlled and must be reviewed whenever vendors, purposes, retention rules, transfer arrangements or assessment technologies materially change.

Automated processing, recipients and transfers

UKG is the controller for information collected through this service. Relevant data may be processed by contracted hosting, email, payment, security, document-processing and verification providers acting under instructions or their own disclosed legal roles. Where data is transferred internationally, UKG uses an applicable lawful transfer mechanism and proportionate safeguards. No solely automated adverse certification decision is made from a low-confidence or mismatch signal; you may request authorised human review at info@ukg-ltd.com.