Privacy and Cookies Policies

Privacy Policy of ProQual AB Ltd

ProQual AB Ltd operates the website.

When we process your personal data, ProQual Awarding Body (AB) will comply with all applicable data protection legislation, including the UK GDPR and the Data Protection Act 2018. 

Your personal data includes all the information we hold that identifies you or is about you.

More information about the types of personal data we process about you is set out below.  

Everything ProQual AB does with your personal data counts as processing it, including collecting, storing, amending, transferring and deleting it. 

This privacy policy provides information about the personal data we process about you, why we process it and how we process it.

It applies to individual customers of ProQual AB Ltd. as well as our business contacts and other customer and other 3rd party organisations (i.e., CSCS, CPCS, COIT, CITB etc.) 

Our responsibilities 

ProQual AB Ltd. (a company registered in England with registered company number 0746445 and registered address at ProQual House, Unit 1, Innovation Drive, Newport, Brough HU15 2GX) is the controller of the personal data you provide.  


What data do we process about you and why? 

  • Centre Contacts 

We will process the information you provide in the application you submit on behalf of your organisation to become a ProQual AB Approved Centre (a ‘Centre’).

The Centre application will include personal information about you as our Centre contact.

Even if you are not our Centre contact, we may process personal data about you if it is included in an application submitted by a Centre.

Information we may process about you as a Centre contact or as someone referenced within a Centre application may include: 

  • your full given name 
  • your email addresses and other contact information 
  • images, videos and information about you taken as part of a quality assurance visit recordings, either onsite or carried out virtually using video conferencing; and 
  • any other personal data about you provided by the Centre in a Centre application. 

We may use your personal data for the following purposes: 

  • to provide you with information about the Centre, candidate registrations, enquiries and results and to send certificates to the Centre 
  • to manage and arrange Centre quality assurance visits 
  • to communicate regulatory changes and updates 
  • to send you marketing information where we are entitled to do so under data protection laws 


  • Assessors and Internal Quality Assurance (IQA) staff 

We will process the information you provide in your application to become an Assessor or IQA or the personal data about you in an application made by a Centre to us.

This information is likely to include your name, email address, telephone number and other contact information, your teaching and training qualification certificates, proof of your professional qualifications, your employment history and training experience and references.

If the application is successful, your personal data will be stored on our system for the period in which you are recorded as a Centre Contact, i.e., a Centre Co-ordinator, Assessor, IQA, Centre Administrator, Head of Centre, Finance Contact etc.

Please notify us, or ask the Centre to notify us, if you cease providing services as a Centre Contact. 

If you submit an application to a Centre via us and your application is incomplete, it will be deleted no later than 12 months after receipt if there has been no further activity on the application during that period.

If your application is unsuccessful as a Centre Contact, we will delete it promptly following our decision, except to the extent we are required to retain your personal data for regulatory purposes.

We will also delete Centre applications (and any personal data held about you within those applications) no more than 12 months after receipt of an incomplete application or promptly following a decision not to appoint a Centre, subject to any regulatory requirement that we continue to hold personal data within the application.  

Where there is a legal or regulatory requirement for us to process your personal data, we rely on the fact that we are required by law to process it.

Otherwise, we process your personal data on the grounds of our legitimate interests in considering your application. If your application is successful we will also process some of your data on the grounds of fulfilment of our contract with you. 


  • Candidates 

If you are undertaking vocational work-based learning awards (i.e., Certificates or Diplomas) or qualifications (NVQs) provided by ProQual AB, we collect the information we need in order to provide those products and services to you including but not limited to your name, date of birth, gender, telephone number and qualification awarded.

It may also include photos of you and copies of your signature.  

This information will be held by us for a period of 3 years from the date you complete your work-based learning award or qualification so that we can comply with regulatory requirements and requirements to deliver future services such as certificate re-prints and confirmation of awards. 

Information that is processed as part of the qualification, will be held for no longer than 3 years from the date the information is collected.  

We may also capture personal data about you when we conduct an external quality audit visit (such as video evidence of training, assessment, internal verification etc.).

Once we have concluded our review, the personal data stored for this purpose will be deleted or destroyed as per our data retention guidance. 

If you contact us to request a replacement certificate, we will retain a record of the address to which you wish the certificate to be sent for no longer than 3 years. 


  • Business customers and suppliers (including external consultants, EQAVs, SMEs etc.)  

If the organisation for which you work purchases services or products from our website or provide services to us, the only personal data we are likely to process about you is your name and your business email address.

The remainder of the information we collect will be company information and therefore not covered by data protection legislation. We process your personal data on the grounds of our legitimate interests in fulfilling the order placed by the company for which you work or receiving services from the company for which you work. We will retain your personal data for the duration of our contract with the organisation for which you work or, if earlier, until we are notified that you are no longer the relevant person to contact at the organisation. 

If you are a centre contact, your information may be provided to us by the centre for which you work. The information we hold about you is likely to include your name, email address and telephone number. We process your personal data in order to: 

  • communicate with the centre about, for example, courses, exam results and certificates; 
  • liaise with the centre to organise and undertake external quality visits; 
  • communicate regulatory changes and updates; 
  • market ProQual AB’s products and services; and 
  • purchase and provide products and services from and to you. 

We will retain personal data relating to Centre contacts for the duration of our contract with the Centre or, if earlier, until the Centre informs us that you are no longer the relevant person to contact at the Centre. 


  • Recruitment Candidates to ProQual AB 

We will process personal data about you if you apply for a role with us. That personal data is likely to include: 

  • identity data such as your first name, middle names, last name, marital status, title, date of birth and gender; 
  • contact data such as your postal address, email address and telephone numbers; 
  • background data such as your education, career background and work experience; 
  • personal information such as your skills and qualities; 
  • any other information that you include on any CV, application or covering letter you send to us. If this information includes special categories of data we will process that information on the grounds of consent because you have chosen to provide it to us. 

We process your personal data on the grounds of our legitimate interests in determining whether or not we have a suitable vacancy for you. 

If you are successful we will retain your personal data in line with our employee privacy policy, a copy of which will be provided to you if you accept a role with us. 

If you are unsuccessful or if we do not have any suitable active roles, we will retain your personal data for 24 months from the date of your application. 


Our collection of your personal data 

We use different methods to collect data from and about you including through: 

  • Direct interactions 

You may give us your personal data by filling in forms on our website or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you: place an order for our services or provide products or services to us; submit a query about our products whether on our website or by email or phone; request for marketing to be sent to you; or otherwise correspond with us. 

  • Automated technologies or interactions 

As you interact with our website, we may automatically collect personal data about you. You can find out more information in our cookie policy available below.  

  • Information received from our clients and the Centres to which we provide services 

We may receive information about you from your employer so that we can liaise with you in respect of the qualification you wish to undertake.  

If you are a tutor, assessor, IQA or Centre contact we may receive information about you from the Centres with which we work.  



Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website. It also allows us to improve our website.

 A 'Cookie' is a small piece of information that we store on your computer. Our system will issue cookies to your computer when you access the site. We use the following cookies

  1. Strictly necessary cookies; These are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website.
  2. Analytical/performance cookies; These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  3. Functional Cookies; These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
  4. Remarketing Cookies; These allow us to recognise your interests, based on the web pages you visit on our website, and allow us to present you with relevant promotions and updates to keep you up to date with ProQual AB. Third party vendors, Google, Facebook and LinkedIn, use these cookies to serve ads in various places across the internet. If you wish to opt out of remarketing cookies, simply click on the below links and follow the opt out processes:

Google: Network Advertising Initiative opt-out page

Facebook: Your Ad Preferences

LinkedIn: Advertising Preferences and Third Party Data

This website uses tracking software to monitor its visitors to better understand how they use it. This software is provided by Google Analytics which uses cookies to track visitor usage. The software will save a cookie to your computer’s hard drive in order to track and monitor your engagement and usage of the website, but will not store, save or collect personal information.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including “strictly necessary” cookies) you may not be able to access all or parts of our website. 

You can remove cookies from your computer at any time by going into the settings in your browser and deleting the browsing history and cookies stored. The exact location of this setting will depend on your browser of choice.


Who will receive or have access to your personal data? 

Your personal data is only transferred to the extent that this is necessary. Recipients of your personal data may include: 

  • third-party marketing partners that send marketing and service communications to you on our behalf where you have consented to us doing so or where we have other grounds for sending you marketing in accordance with data protection legislation. Your personal data may be transferred to those providers located outside of the UK and EEA, including in the US, in which case the transfer takes place on the basis of standard contractual clauses; 
  • third-party providers through which our emails to you are routed in order to assist with tracking and delivery of emails. Your personal data may be transferred to those providers located outside of the UK and EEA, including in the US, in which case the transfer takes place on the basis of standard contractual clauses;   
  • legal advisers to the extent they need to see your personal data to provide us with legal advice;  
  • our external hosted data centre; 
  • our disaster recovery solution; 
  • third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy policy. 

If you are a candidate, we may also share your data with: 

  • awarding organisations and regulators to the extent necessary to provide you with the products and services requested for you; 

the national Learning Record Service; 

  • other regulatory bodies, i.e., Ofqual, to the extent we are required to do so in relation to, for example, investigations, sanctions, revocation of certifications. 

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.  

Unless otherwise expressly stated in this privacy policy, we do not transfer your personal data outside of the EEA. 


What are your rights? 

You benefit from a number of rights in respect of the personal data we hold about you. We have summarised your rights below, and more information is available from the Information Commissioner’s Office website (

These rights apply for the period in which we process your data.

  1. Access to your data 

You have the right to ask us to confirm that we process your personal data, as well as access to and copies of your personal data. You can also ask us to provide a range of information, although most of that information corresponds to the information set out in this fair processing notice.  

2. Rectification of your data 

If you believe personal data we hold about you is inaccurate or incomplete, you can ask us to rectify that information. We will comply with your request within one month of receiving it unless we do not feel it is appropriate in which case we will let you know why. We will also let you know if we need more time to comply with your request.

3.  Right to be forgotten 

In some circumstances, you have the right to ask us to delete personal data we hold about you.  

There are certain scenarios in which we are entitled to refuse to comply with a request. If any of those apply, we will let you know.

4.  Right to restrict processing  

In some circumstances, you are entitled to ask us to suppress the processing of your personal data. This means we will stop actively processing your personal data but we do not have to delete it. 

5.  Data portability 

You have the right to ask us to provide your personal data in a structured, commonly used and machine-readable format so that you are able to transmit the personal data to another data controller. 

6.  Right to object 

In some circumstances, you are entitled to object to us processing your personal data.  

Automated decision making 

Automated decision making means making a decision solely by automated means without any human involvement.  

We do not carry out any automated decision making using your personal data. 

Your right to complain about our processing 

If you think we have processed your personal data unlawfully or that we have not complied with GDPR, you can report your concerns to the supervisory authority in your jurisdiction. The supervisory authority in the UK is the Information Commissioner’s Office (“ICO”). You can call the ICO on 0303 123 1113 or get in touch via other means, as set out on the ICO website -

Any questions? 

If you have any questions or would like more information about the ways in which we process your data, please contact