Privacy policy

International Council of Specialized Online Certifications ("ICSOC", "we", "us") runs this website and the public register of educational institutions. This policy explains how we handle personal information. We do not sell personal information.

1. What we collect

Information you send us

• Recognition applications: the institution's details, and the name, job role, email address and telephone number of the person applying, plus any documents or messages they provide.
• Reports and contact messages: your message and, if you choose to give them, your name and email address.
• Dashboard accounts: for institution owners and administrators who have an account, name, email address, phone number, profile details and a password, which is stored in a protected (hashed) form.

Information collected automatically

• Basic technical data such as IP address, browser type and pages visited, in server logs and through Google Analytics, to keep the site secure and understand how it is used.
• A small session cookie when you use a form or sign in to the dashboard, to keep you signed in and protect forms from abuse.

Information on the public register

The register shows information about institutions (their name, logo, website, location, description and recognition status). It is intended to be public. We do not publish the personal contact details of applicants.

2. How we use it

• to review applications, decide recognition status and issue certificates;
• to respond to reports, corrections and messages;
• to run and secure the website, prevent spam and abuse, and keep the register accurate; and
• to meet legal obligations.

Where the law requires a legal basis, we rely on our legitimate interest in running a trustworthy register, on taking steps at your request (such as processing an application), on consent where we ask for it, and on legal obligations.

3. Who we share it with

We share personal information only with service providers who help us run the site (such as our web host and Google Analytics), and where the law or a legitimate legal request requires it. We may publish the outcome of a recognition (for example, that an institution is recognized, or that a recognition was revoked), but not the applicant's personal contact details.

If you report a concern, we may need to tell the institution concerned what the issue is so that it can respond. We will not give them your name or email address unless you agree.

4. Where it is stored and for how long

Information is stored on servers operated by our hosting provider, which may be located outside your country. We keep personal information only as long as we need it for the purposes above or as the law requires, and then delete or anonymise it.

5. Cookies and analytics

We use Google Analytics to understand how visitors use the site, which sets cookies. You can block or delete cookies in your browser settings, or use Google's opt-out tools. Our session cookie is needed for forms and sign-in to work securely.

6. Security

We use reasonable technical and organisational measures to protect personal information, including hashed passwords, access controls on our dashboard, and protections on our forms. No system is completely secure, so please take care with what you share.

7. Your rights

Depending on where you live, you may have the right to ask for a copy of the personal information we hold about you, to have it corrected or deleted, to object to or restrict how we use it, and to complain to your local data-protection authority. To make a request, email [email protected]. We may need to confirm your identity first.

8. Children

This site is not directed at children under 13, and we do not knowingly collect their personal information.

9. Changes and contact

We will update this policy when our practices change and will change the date below. Questions can be sent to [email protected], or by post to our offices listed on the About page.

Last updated: 29 October 2026