1. Introduction

By enrolling in any IAAC program, accessing our website or learning platforms, or attending any IAAC event, you agree to this Privacy Policy.

2. Data We Collect

Identification Data – Name, date of birth, nationality, identification documents, and guardian details for participants aged 16–17.
Contact Data – Email address, phone number, mailing address, emergency contact.
Academic & Professional Data – Qualifications, licenses, certifications, course history, assessment results, attendance, and submitted materials.
Payment Data – Billing details, payment method, and transaction history (processed securely via third-party providers).
Technical Data – IP address, device type, browser type, usage analytics, cookies, and platform activity logs.
User-Generated Content – Any content voluntarily uploaded or shared in IAAC platforms, forums, chat, or live sessions.
Proctoring Data – Video, audio, ID scans, keystroke patterns, and screen recordings during assessments where applicable.

3. How We Use Your Data

Deliver courses, programs, and services.
Manage enrollment, billing, and certifications.
Verify identities for compliance and credential issuance.
Maintain academic integrity (including online proctoring).
Improve program quality and user experience.
Comply with legal, accreditation, and regulatory requirements.
Conduct analytics and business planning.
Send marketing communications in compliance with applicable laws.

4. Legal Basis for Processing

Performance of a contract – To provide the services you’ve enrolled in.
Legitimate interests – For fraud prevention, business analytics, and platform security.
Legal obligations – To comply with laws and regulations.
Consent – For marketing and certain optional data uses.

We may share your data with:

Accreditation bodies, regulatory agencies, and professional organizations.
Payment processors (e.g., Stripe, PayPal).
Learning platform providers (e.g., Zenler), IT vendors, cloud hosting providers.
Marketing, analytics, and advertising partners where legally permitted.
Proctoring service providers for assessments.
Professional advisers (legal, accounting, insurance).
Event venues for in-person logistics.

We may update our vendor list without notice; the latest list is available upon request.

6. International Transfers

Your data may be transferred across borders. Where legally required, we use appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Retention

Academic records: 7 years after last participation.
Proctoring data: 90 days unless extended for investigation or legal purposes.
Marketing preferences: Until unsubscribed or deleted.
Anonymized data: Retained indefinitely.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data. Requests may be sent to legal@theiaac.org. We may deny requests where permitted by law, particularly if deletion would affect our legitimate interests or legal obligations.

9. Age Requirements

Participation is allowed for those 18+ or 16–17 with documented guardian consent. Proof of age and consent may be required.

10. Security

We employ reasonable technical and organizational measures to protect data but are not liable for breaches outside our reasonable control.

11. Changes to This Policy

We may update this Privacy Policy at any time. Continued use of IAAC services after changes means you accept the revised policy.

IAAC Privacy Policy

Contents