Privacy policy

QOSH is an Occupational Safety & Health awarding body. This policy explains what personal data we collect about learners, Approved Training Centres, and visitors to qosh.org, why we collect it, and how it is handled.

What we collect

• Learner records: full name, date of birth, and email (and, optionally, phone) are recorded when a learner is enrolled by a QOSH administrator.
• Certification records: certificates contain a snapshot of the learner's name, the course title, duration, completion date, issue date, and authorised signatory at the time of issuance.
• Analytics: when enabled and consented to, Google Analytics 4 records anonymised page-view data.

How we use it

Learner data is used solely to issue, verify, revoke, and reinstate certifications. Certification snapshots are necessary to make every credential independently verifiable for the lifetime of the credential. We do not sell, rent, or share personal data with third parties.

Verification

Certificates can be verified publicly by certificate ID. The public verification page displays only the name, course title, duration, completion date, issue date, and signatory associated with that certificate. No other personal data is exposed.

Cookies

See the Cookie policy for what cookies we use and how to control them.

Your rights

You may request access, correction, or deletion of your personal data by contacting our team. Please note that issued certificate snapshots are preserved to maintain the integrity of past verifications; revocation, not deletion, is the standard remedy for invalidating a credential.

This is placeholder copy maintained in good faith. It does not constitute legal advice; a final policy will be reviewed and replaced before launch.