Privacy Policy

This Privacy Policy explains how Auditor Training — ISO International Services ("Auditor Training", "we", "us", or "our") collects, uses, discloses, and safeguards personal information when you use the Modular Audit Engine platform, websites, and related services (the "Platform"). We are committed to handling your information transparently and in accordance with applicable data protection laws, including the EU/UK GDPR where relevant.

We collect the following categories of personal information:

• Account and enrolment data — name, corporate email, professional role, region, and target programme.
• Identity verification data — government identification type and number, collected to issue verifiable certifications. This is recorded against your Student ID and is never shown on the public credential verification page.
• Learning data — course progress, module completion, assessment results, simulation activity, and AI tutoring interactions.
• Payment data — billing details and transaction records. Card details are processed directly by our payment provider; we do not store full card numbers.
• Communications — messages, proposal and invoice correspondence, support requests, and newsletter subscriptions.
• Technical data — IP address, device and browser information, and usage logs collected automatically when you use the Platform.

We use personal information to:

• provision learner workspaces, deliver courses, and grant access following payment;
• verify identity and issue, verify, or revoke credentials;
• process payments, issue invoices, and maintain transaction and audit records;
• provide AI-led tutoring and adaptive learning features;
• respond to enquiries, proposals, and support requests;
• send service messages and, where you have opted in, newsletters and updates;
• maintain security, prevent fraud, and comply with legal obligations.

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to deliver programmes you enrol in), legitimate interests (to operate, secure, and improve the Platform), consent (for example, for marketing communications, which you may withdraw at any time), and compliance with legal obligations (such as tax and record-keeping requirements).

Certain features use artificial intelligence to provide course-grounded tutoring and adaptive lessons. Your inputs to these features may be processed by trusted AI service providers solely to generate responses for your session. We do not use your identity verification data for these features, and these features do not make legally significant automated decisions about you.

We do not sell your personal information. We may share it with:

• Service providers — payment processing, hosting, email delivery, and AI tutoring providers, who process data on our instructions under appropriate safeguards;
• Your organisation — where your enrolment is sponsored or managed by an employer or B2B client, we may share enrolment and progress data with that organisation's administrators;
• Authorities — where required by law, regulation, or valid legal process; and
• Successors — in connection with a merger, acquisition, or reorganisation, subject to this Policy.

We operate globally across North America, EMEA, and APAC, and your information may be processed in countries other than your own. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms to protect your information.

We retain personal information for as long as necessary to provide the Platform, maintain credential and verification records, comply with legal, tax, and accreditation requirements, and resolve disputes. Credential and identity verification records may be retained for the lifetime of the issued credential to support verification. When information is no longer required, we delete or anonymise it.

We apply administrative, technical, and organisational measures designed to protect personal information against unauthorised access, loss, or misuse, including access controls, encryption in transit, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you may have the right to access, correct, delete, or restrict processing of your personal information, to object to certain processing, to data portability, and to withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

We use essential cookies and similar technologies to keep you signed in, remember preferences, and secure the Platform, and may use limited analytics to understand and improve usage. You can control cookies through your browser settings; disabling essential cookies may affect Platform functionality.

The Platform is intended for professional adults and is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can remove it.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by additional notice. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

For privacy questions or to exercise your rights, contact us at info@auditortraining.com.