✦ Governance
Policies & Procedures
The organisational policies that govern CHoM Academy's operation as a UK training provider — meeting the standard expected of accredited CPD providers.
Privacy Policy & GDPR Compliance
CHoM Academy is committed to protecting the privacy and personal data of all learners, facilitators, and website visitors. This policy describes how we collect, use, store, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
CHoM Academy is the data controller for personal data collected through the learning platform, course enrolments, coaching bookings, practice and client logging, and learner communications. We process personal data lawfully, fairly, and transparently, and only for the purposes necessary to deliver our educational services.
Data We Collect
- •Identity and contact data: name, email address, and role (learner, facilitator, admin).
- •Learning data: course enrolments, lesson progress, quiz scores, journal entries, and reflections.
- •Practice data: practice logs and client registration logs recorded for certification purposes.
- •Technical data: IP address, browser type, and platform usage data necessary for security and service delivery.
- •Marketing data: preferences for receiving communications, where consent has been given.
How We Use Your Data
We process personal data for the following lawful purposes: delivering enrolled courses and tracking learner progress; assessing and certifying practitioner competence; facilitating coaching and supervision bookings; communicating about courses, resources, and Academy updates (where consented); maintaining records required for CPD accreditation; and ensuring the security and proper functioning of the platform.
Your Rights
- •The right to access the personal data we hold about you.
- •The right to request correction of inaccurate or incomplete data.
- •The right to request erasure of your personal data, subject to legal and certification record-keeping obligations.
- •The right to object to or restrict certain processing of your data.
- •The right to data portability.
- •The right to withdraw consent for marketing communications at any time.
Data Retention & Security
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or certification reporting requirements. Practice and client logs are retained to evidence CPD certification and may be kept for the duration of the practitioner's certification plus a defined retention period.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction, including encrypted data storage, access controls limited to authorised personnel, and regular review of our data security practices.
Contact
For any privacy or data protection enquiry, or to exercise your rights under UK GDPR, please contact the Academy's data protection lead. We will respond to all legitimate requests within 30 days. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).