01Information we may use
This may include identity and contact details, employer or professional information, programme enquiries, enrolment records, participation, assessment evidence, results, certificates, payments, accessibility requests, correspondence and technical security information.
02Purposes and lawful basis
Processing supports steps requested before a contract, performance of a programme or client agreement, legitimate educational and administrative interests, legal obligations, consented communication and the establishment or defence of rights. Special-category information is requested only where necessary and lawful.
03Sharing and processors
Information may be shared with authorised faculty, assessors, learning-platform, payment and event suppliers, professional advisers, organisational clients where the individual has been informed, and public authorities where required. Access is limited by role and purpose.
04International transfers and security
Where a supplier or participant arrangement requires an international transfer, EAB applies the mechanism and safeguards required by applicable UK data-protection law. Administrative and technical controls are proportionate to the information and risk.
05Retention and rights
Records are retained according to educational, contractual, verification, legal and security needs, then deleted or anonymised. Applicable rights may include access, correction, deletion, restriction, objection and portability. Concerns may also be raised with the UK Information Commissioner.
06Contact
Submit a privacy enquiry through the contact form using the subject ‘Data protection’. EAB may verify identity before disclosing or changing personal information.