Purpose/activity Type of data Legal basis ((Including basis of legitimate interest) 
Provide you with services requested by you or another on your behalf. To create, manage and administer your account (where applicable), to facilitate purchases you make and manage payments. 
  • Registration information  
  • Additional Registration Information about Examinees
  • Additional Registration information about Qualified Customers and Test Administrators
  • Courses/assessment information 
  • Enrolment support information 
  • Purchase information 
  • Customer services information 
  • Profile information 
  • Proof of identity information 
  • User-generated information 
  • Location information 
  • Activity and usage information 
  •  Application and systems log information 
  • Assessments, grades and feedback information 
  • Special category information 
  • Performance of a contract with you 
  • Necessary for our legitimate interests (to provide services requested by you or your employer.  For special category data used in relation to the provision of access arrangements, we will collect explicit consent from you.   For special category data relating to race, ethnicity, politics, beliefs or sexual orientation (for example, for equality monitoring [or providing access arrangements]), we rely on a substantial public interest on the basis of UK law on the equality of opportunity or treatment. 
Communicate with you about your use of the Services, including sending you updates about or request feedback on the Services, new features and changes to our policies; 
  • Registration information  
  • Additional Registration Information about Examinees 
  • Additional Registration information about Qualified Customers and Test Administrators
  • Purchase information 
  • Customer services information
  • Performance of a contract with you 
  • Necessary for our legitimate interests (to keep our records updated and to study how individuals use our Services) 
Operate, understand, develop and improve our sites, Services, applications and platforms;  
  • Location information 
  • Activity and usage information 
  • Application and systems log information 
  • Necessary for our legitimate interests (to define types of customers for our Services, to keep our website and Services updated and relevant, to develop our business and to inform our marketing strategy) 
  •  Consent. For example, for processing Personal Data derived from non-essential analytics cookies.  When we process your information based on your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on such consent before it is withdrawn.
Detect, prevent and respond to fraudulent or unlawful activity 
  • Registration information  
  • Customer services information 
  • Location information 
  • Activity and usage information 
  • Application and systems log information 
  • Recordings information 
  • Video and audio recording, recordings and still images or video  
  • Special category information 
  • Necessary for our legitimate interests (for running our business, provision of digital services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) 
  • Necessary to comply with a legal obligation 
  • For special category data used in relation to detecting and taking action against cheating, fraud or other irregularities:  For reasons of substantial public interest on the basis of UK law on preventing or detecting unlawful acts, protecting the public against dishonesty and similar, and preventing fraud.