Legal
Privacy Policy
This Policy explains how IPSB (“we”, “us”) collects and uses personal information when you use ipsb.co and related assessment and certification services. For how purchases and certificates work contractually, see our Terms of Service.
1. Who is responsible
International Psychotherapy Standards Board, Oxford, United Kingdom.
Contact: info@ipsb.co.
2. Information we collect
- Account and identity: name, email address, date of birth, password (stored as a hash), and optional profile fields you provide (for example experience or employment band).
- Assessment data: answers, scores, tiers/bands, certified level, attempt history, timestamps, and related session data needed to run and resume assessments.
- Purchase data: order status, amounts, course/track, and Stripe identifiers (we do not store full card numbers on our servers; Stripe processes payments).
- Certificate and register data: register number, issue date, level, and details shown on verification.
- Technical and usage data: IP address, browser/user agent, approximate region when detectable (for example from payment billing country, CDN country header, or timezone), cookies or similar technologies, and analytics events.
- Communications: messages you send us, and transactional emails we send (account credentials, links, receipts).
3. How we use information
- To deliver assessments, results, certificates, retakes, and account access.
- To process payments, prevent fraud, and handle renewals where applicable under our Terms.
- To operate the public certificate verification register.
- To send service emails (for example account credentials and assessment resume links).
- To understand site usage, improve services, and measure marketing performance (for example Meta and Amplitude, where configured).
- To meet legal, tax, and security obligations.
4. Legal bases (UK GDPR)
Where UK GDPR applies, we typically rely on: contract (to provide the assessment and certificate you request); legitimate interests (security, analytics, service improvement, fraud prevention); consent where required for certain cookies or marketing; and legal obligation where we must retain or disclose information.
5. Sharing
We share personal data with processors who help us run the service, including:
- Stripe — payments and saved payment methods.
- Email providers (for example Mailchimp Transactional / Mandrill) — transactional email.
- Analytics / advertising tools (for example Meta / Amplitude) — when configured.
- Hosting and infrastructure providers for the website and database.
We may also disclose information if required by law, or to protect rights, safety, and the integrity of assessments. We do not sell your personal information.
6. International transfers
Some processors may process data outside the UK/EEA. Where required, we rely on appropriate safeguards (such as standard contractual clauses) provided by those vendors.
7. Retention
We keep account, assessment, purchase, and certificate records for as long as needed to provide the service, maintain the verification register, handle renewals and disputes, and meet legal retention needs. You may request deletion of account data; we may retain limited records where we have a continuing legal or legitimate need (for example proof of purchase, fraud prevention, or a public register entry tied to a certificate you have already used).
8. Security
We use reasonable technical and organisational measures (including hashed passwords and access controls). No method of transmission or storage is completely secure.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. You may also complain to the UK Information Commissioner’s Office (ICO) or your local supervisory authority. To exercise rights, email info@ipsb.co.
10. Cookies and similar technologies
We use cookies and similar technologies for essential site operation (for example sessions), and, where configured, analytics and advertising measurement. You can control cookies through your browser settings; disabling some cookies may affect sign-in or assessment continuity.
11. Children
The service is intended for users aged 16 or over. We do not knowingly collect data from children under 16.
12. Changes
We may update this Policy from time to time. The “Last updated” date will change when we do. Significant changes may be highlighted on the site or by email where appropriate.
13. Contact
Privacy questions: info@ipsb.co.