The APM Group Limited (“APMG”, “us”, “we”, “our”) is committed to protecting and respecting your data privacy. We want you to know how we use and protect your personal information. This includes informing you of your rights regarding your personal information that we hold.

This Privacy Policy sets out how we may use, process and store your personal data. Personal data is any information that can be used to identify or be reasonably associated with a specific person.

We need your personal data in order to deliver contractual/legal obligations you may have with us or our business partners or to allow us to provide you our services. In other cases, we will collect that information from you with your permission and consent.

Where APMG provides services to you on its own behalf (such as when you use our websites or purchase an examination from us), APMG is the “Controller” for all the personal data collected.

Where APMG is issuing a SFIA digital badge via the Credly platform, on behalf of a SFIA Licensed Assessment Partner, APMG is the "Processor" for the digital administration and the Licensed Partner responsible for your assessment and certification is the "Controller".

The laws that govern personal data in the UK are:

• the Data Protection Act 2018 and
• the United Kingdom General Data Protection Regulation (UK GDPR)
• the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (EU GDPR).

The independent authority that upholds information rights in the public interest in the United Kingdom is the Information Commissioner’s Office (the “ICO”). Further information can be found on the ICO website.

Our registration details with the ICO are as follows:-

• The APM Group Limited                Z6934466             

Please note these regulations apply to all APMG offices and to everyone we do business with who have access to personal information through APMG. These regulations are not restricted to UK citizens.

This is APMG’s registered address, company number and contact information:

The APM Group Limited
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG

Email:  dataprivacy@apmgroup.co.uk

Phone: +44 (0) 1494 452450

Our EU office is:-

APMG Benelux

Unit 1.15 BusinessCenter Spoetnik

Spoetnik 20

3824 MG Amersfoort

If you have questions, comments, or complaints about this Privacy Policy, please contact us using the details above.

APMG may collect information from you because we have a legal reason (allowed by law or under contract) to collect the information, or because you have consented for us to do so for a specific purpose, or we have a legitimate interest.

Information you give us

You may give us information about you with your consent or as required for you to use our services, for example:

• Information you provide to create an account with us
• The forms, emails, and other communications that you send us or otherwise contribute, such as support inquiries or posts to our message boards or forums. Please be aware that information on public parts of our websites and online platforms is available to others
• Your marketing preferences
• Information you share with us in connection with surveys or promotions
• Information you share with us by applying for a job at APMG
• Information you submit to us at a conference, exhibition or online event

This information may be personal, financial, educational, or related to your employment history.

Sometimes we require you to provide us with information for legal reasons, such as to enter into a contract with us, when you are buying exams, assessments or other goods or services from us, or when you are applying for a job at APMG.

If you are a trainer, facilitator or invigilator accredited or approved by APMG, the Trainer, Facilitator, Invigilator Data Protection Statement, outlining the processing of your data, is available on the APMG Network and/or via your sponsoring ATO.

Information obtained from other sources

If you purchase an APMG exam from one of our business partners or training providers, they may provide us with certain personal information about you (such as your name and email address) to allow us to provide services to you. The privacy policy of the applicable business partner / training provider will control how they use your information and share this information with us. Make sure you are comfortable with their privacy terms by reviewing their privacy policy.

If you have earned a SFIA digital badge through one of our Licensed Partners, they may provide us with certain personal information (such as your name and email address) to allow us to provide the services to you.

Information obtained from your use of our services

When you use our services, we collect information about your activity on and interaction with our websites and/or online platforms, such as your IP address, your device and browser type, your preferences, the web page you visited prior to coming to our website and/or online platform, and information about how you interact with our websites and/or online platforms.

Some of this information is collected automatically using cookies and similar technologies when you use our services. You can read more about our use of cookies in Section 5 below.

Websites and Online Platforms usage information

We use a third-party service, Google Analytics, to collect standard website performance information.  This information is processed in a way that it does not identify individuals. Web usage information is collected by our web server and from other sources including search engines, internet service providers, page tagging techniques including JavaScript, and cookies. We use IP addresses to analyse trends, track users' movement, and gather broad demographic information for aggregate use. IP addresses are not linked to personally identifiable information.

If you visit one of our websites or use one of our online platforms, we may automatically collect information about you, for example:

• IP addresses
• Information about the technology you use to connect to our website and/or online platform
• What parts of our website or online platform you click on and how long you look at our website or online platform.

As well as the information that you provide, we receive and store a range of website and online platform usage information whenever you use one of our websites or online platforms. If we want to collect personal information, we will be clear and specific why we require this information and ask you to opt-in.

We use this to:

• assess the effectiveness of marketing campaigns
• develop and deliver services and information that better meet your needs
• inform you of events, services, and products which we believe to be relevant to you, where you have consented to be contacted for such purposes.

We also use Matomo to track website use trends using anonymous IP addresses.  This raw data is kept for 24 months to create reports but is not attributable to an individual.

Live Chat Services (APMG Live Chat)

This service allows you to chat live with us or one of our support agents in order to facilitate your navigation of any of our websites or online platforms.

APMG use the chat function of Chatlio,1329 N 47th ST #31231, Seattle, WA 98107, USA.

Messages and other information entered into the Chatlio chat window by yourself and/or APMG or its sub-contractors are sent to APMG via Slack, a service of Slack Inc., 500 Howard Street, San Francisco, CA 94105, United States. Chatlio uses cookies to identify recurring visitors and uses your location data to provide an indication as to where you are from to our support team.

We collect and process personal information about you with your consent and/or as necessary to perform our contractual obligations, provide our services, meet our legal obligations, protect the security of our systems, or fulfil other legitimate interests. When engaging in a live chat session with one of our support agents or staff members, APMG, Slack and Chatlio may store the following information:

• Name
• Email Address
• Candidate Number (if applicable)
• Browser
• Operating System
• Page URL on which a chat was initiated
• Local Time
• Location
• Agent Ratings
• Any other personal information you may provide in your messages to us

By using our live chat, you agree to Chatlio's and Slack’s methods of storage and use of data. For further information, please refer to the privacy policy of Chatlio: Chatlio Privacy Policy and Slack: Slack Privacy Policy

APMG Technical Helpdesk

Support calls are recorded to ensure that end user’s data security and rights are not breached during a support call.  These recordings are removed after 90 days.  It is in the legitimate interests of the individual for us to have a recording of such events so that we can investigate any claims of misconduct or unsatisfactory service.

APMG Communications

APMG use an email/marketing automation platform to send communications to our accredited organisations and trainers and newsletters to newsletter list recipients.  We collect and process information about you if you sign up on our website to receive newsletters or provide consent to receive marketing in the candidate portal.  You can withdraw your consent to receive newsletters at any time by clicking on unsubscribe in the newsletter or by changing your marketing preferences in the candidate portal

APMG may also send communications to candidates to ask for feedback after they have sat an exam in order for us to gain insight on how we can improve our services.  Survey responses are captured using Survey Monkey Survey Monkey Privacy Policy 

APMG uses the automated platform Mailchimp. 

Mailchimp is an online marketing platform operated by The Rocket Science Group LLC, a company headquartered in the State of Georgia in the United States.  For further information, refer to their Privacy Policy at MailChimp Privacy Policy

Social Media Campaigns

APMG runs social media campaigns using third party platforms to record media, edit and host.  These platforms include LinkedIn and YouTube. Participants of social media campaigns have provided APMG with consent to capture their images and testimonials and edit these for various campaigns.   

Online Campaigns

APMG hosts online events on third party platforms including Zoom.  To register for events, attendees provide their contact details and consent to be contacted by APMG and the event partners, to provide further information following the event and any relevant products, training or other events.  Where APMG has multiple event partners, attendee details will be shared with the appropriate event partner(s) for their region.  Attendee data is not processed for any other purpose or provided to any other third party other than for the purposes listed above.

Individuals can opt out of receiving communications from APMG by using the unsubscribe link in any APMG communication.

Our websites (including apmg-international.com, apmg-businessbooks.com and ppp-certification.com) and online platforms (including the APMG Learning Platform and the APMG Candidate Portal) puts small files (known as “cookies”) onto your computer to collect information about how you use our site.

Cookies are used to:

• measure how you use the website / online platform so it can be updated and improved based on your needs
• remember the notifications you’ve seen so we don’t show them to you again

APMG websites and online platforms do not use cookies to identify you personally, but to gain useful knowledge about how the site is used so we can keep improving it for our users. 

You will normally see a message appear on the site before we store a cookie on your computer.

Find out more about how to manage cookies by visiting about cookies or all about cookies

How we use cookies on our websites

Measuring website usage

APMG websites and online platforms use Google Analytics to collect data that we use to improve your experience of our sites and platforms.

The cookies we use on websites are:

Read the Google Analytics privacy document (available at Google Analytics Privacy) for more details about the data collected by Google Analytics. To opt out from Google Analytics visit: Google Analytics Opt Out 

Our Introductory Message

Our Introductory Message

We are legally obliged to tell you that we use cookies on our sites and online platforms and gain your consent to their use. We do this via a pop-up message when you first visit our website or online platform. We store a cookie on your computer so that we know that you have acknowledged the pop-up and the site knows not to show it again:  

Content Management System

We use the Drupal content management system on our websites and online platforms, which also sets a number of cookies:

How we use cookies on our online platforms

For further information on the use of Cookies on all APMG-International online platforms please see APMG Cookie Policy

Google AdWords

Google Analytics allows us to record information about the page a user has seen on our website, for example the URL of the page. The Google Analytics JavaScript libraries use HTTP Cookies to "remember" what a user has done on previous pages / interactions with the website.

Important: Google Analytics does not store any personal information about website users. Please refer to the Google Analytics privacy document for more details.

Information about how visitors can opt out of Google’s use of cookies can be seen at  Google’s Ads Settings.

Third Party Cookies

First-party cookies are those that we set for our websites and online platforms; third party cookies are cookies that originate from different websites. We do not control the setting of third-party cookies, so if you are concerned you should check the policy on the third-party website.

An example of a third-party website we use is YouTube. We have a number of videos on apmg-international.com and although we own (or have permission to use) them, the video content is actually streamed from YouTube. You may therefore receive a YouTube cookie if you view one of our videos.

We believe in protecting the privacy of children. In line with this belief, we do not knowingly collect or maintain personal information from persons under 16 years of age, for our public examinations, and no part of any of our websites or online platforms is directed at persons under 16 years of age. If you are under 16 years of age, then please do not use or access our websites or online platforms at any time or in any manner. We will take appropriate steps to delete any personal information of persons less than 16 years of age, if it was provided directly by them.

If you are a parent or legal guardian or carer (responsible adult) and believe your child has given us information, you can contact us at dataprivacy@apmgroup.co.uk, and we will take appropriate steps to investigate and address the issue.

If you are  under the age of 16 and have sat one of our examinations, as part of an agreement between a training organisation and your school, APMG processes your data with consent from your parent, guardian or carer (Responsible Adult) and does not transfer your data to any third party apart from the Scheme Owner that owns the qualification in question (if applicable – see Section 10 below for further information).

If you are a parent, guardian or carer (Responsible Adult)  who has signed an application form authorising the delivery of examination services to a candidate under the age of 16, APMG will retain your personal information (as provided in the application form) for a period of 5 years from completion of the application form so that we retain a record of consent for all children aged between 13-16 until such time they reach an age that parental, guardian or carer consent is no longer required.

Please note that, should the parent, guardian or carer (Responsible Adult) withdraw their consent, APMG will stop processing the personal data of the candidate under the age of 16 and therefore will be unable to verify any certification awarded to that candidate.

APMG collects information for some or all of following reasons:

• To provide services to you, for example:
  • information that identifies you, such as your name, username and email address
  • to allow you to register and sit an examination with us
  • to deliver online training you purchased from us or one of our business partners / training providers
  • after you have taken one of our educational certifications/ qualifications, to manage your certification, including validation of your certification/qualification by us
  • to provide you with any of the services available via our websites and/or online platforms.
• To provide information about products or services you have shown interest in purchasing within a reasonable time afterwards, if you are an existing APMG customer.
• To provide information to you about products or services you have purchased from us, or related products or services.
• To notify you of any updates to products where you hold an existing certification.
• To provide information to you about our products and services if you have consented to receive it.
• To employ you or consider you for employment.
• To provide goods or services to you under contract.
• For legal reasons, for example, if you have entered into a contract with us.

APMG may process your information because:

• We have a contract with you;
• You have given us permission to do so;
• We must provide services to you after you have purchased something from us or one of our business partners;
• We must provide services to you because you have taken one of our qualifications;
• As a legitimate interest to keep you informed of any changes to your existing certifications;
• To comply with the law.

All these are reasons APMG may legally process the information we have about you.

We primarily store and process your personal data in the UK and EU/European Economic Area (“EEA”). If we do transfer your personal data outside the UK or EEA it will be because you have consented or because we have a legal reason to do so. Your data may also be processed by staff (who work for us) operating outside the EEA all of whom are covered by this policy.

Some examples of reasons your data may be processed outside the UK and EEA include:

• Order fulfilment
• Payment processing
• Technical support services
• Live Chat services.

If your personal data cannot be processed within the UK and EEA, we will:

• Comply with all other data protection principles;
• Where possible, process it in a country that is on the list of the UK Commissioners’ countries that provide adequate protections for the rights and freedoms of data subjects;
• Make sure we have assessed the adequacy of protections in all other cases.

APMG will also transfer your personal information to the owner of the scheme qualification you have chosen to undertake and our business partner(s) from whom you have purchased our services (if any). Please see Section 10 below for more details.

By using our services, or submitting your personal data, you agree to this transfer, storing and/or processing.

APMG may share your personal information with third parties, either because you have consented to allow us to do so or for a legitimate purpose or to comply with the law. For example, we may share your personal information with:

• The training organization who provided training to you before you took an examination (for example, to share your examination result or to deal with a complaint);
• A scheme owner who provides an online platform for training and/or additional resources for a training course you have enrolled in;
• Our group companies, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006;
• With third parties because you have given consent;
• With third parties who provide shipping or publishing services because you have purchased goods or services;
• On our Successful Candidate Register if you have consented;
• Subcontractors and third parties for the purpose of the performance of a contract we hold with them or that we hold with you for a service you have chosen. They only receive data needed to provide their services to us and are required to use such data only in order to perform the services we have hired them to do (unless otherwise required by law). We have agreements with our service providers that say that they cannot use any of this data for their own purposes or for the purposes of another third party. A list of these organisations can be found here Copyright, Legal and Policies.

Please note some of these organisations may be located outside UK and/or EEA, for example:

• Taking an on-line exam at home or in the office via ProctorU
  • This service allows you to take an online exam from the comfort of your own home or office with online proctoring.  We use a third party supplier, ProctorU, to provide this service.  Their privacy policy can be seen here ProctorU Privacy Policy.  For APMG test-takers, ProctorU retain any recordings from the exam session for 7 months, in line with the APMG appeals period, and other data is retained for 1 year from the last interaction with the test-taker.
• Taking an on-line exam at home or in the office via APMG In Person Proctoring (AIPP)
• This service allows you to take an online exam from the comfort of your own home or office using the APMG proctors, where your organisations level of security prevents you installing the software required to be proctored via ProctorU.  APMG use Zoom Zoom Privacy Policy  and Calendly Calendly Privacy Policy as the platform and scheduling mechanism for proctoring the exam.  APMG does not record the exam sessions.
• Obtaining a digital badge and certificate via Credly
  • This service allows successful candidates and SFIA badge recipients to claim a digital badge to embed on an email signature, website, social media or a digital CV.  Successful candidates and those claiming SFIA badges following assessment by a SFIA Licensed Assessment Partner are required to register and accept their digital badge on Credly. A digital certificate will also be available on their personal account of successful candidates only, SFIA badges do not have a digital certificate.  Each certificate has a unique verifiable link built into it allowing individuals, teams, managers and employers to quickly validate any certificate presented electronically.  Candidates can also print their own certificate on demand from their Credly account. Their privacy policy can be seen here Credly Privacy Policy
• IP owners of the APMG qualification you have chosen to undertake. Please note that some Scheme Owners are based outside the UK and/or EEA as shown in the table below (if required, each organisation has its own Privacy Policy published on their website, links to which can be found on the product pages) Where APMG transfers data outside the UK and EEA, we have implemented appropriate safeguards to protect your data:

*Note: in the event that the owner of a scheme changes, and we have a contractual obligation to share data with the new Scheme Owner, we will do so after notifying you of a change of Scheme Owner.

Other reasons APMG may share your personal information with a third party

If APMG or substantially all of its assets are acquired by a third party, personal data held by APMG about its customers will be one of the transferred assets of the company.

In addition, APMG will share your personal data with third parties for the following reasons:

• If we are under a duty to disclose or share your information in order to comply with any legal obligation,
• To enforce or apply our Website Terms of Use, Terms and Conditions of Sale, or other agreements
• To protect our rights, property, or safety, our users, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
• For audit purposes by National Accreditation Bodies i.e. UKAS, by whom we are accredited.

Aggregated or anonymized data with personal information removed

APMG may, from time to time, provide third parties with data that has been aggregated or anonymized.  This means that personal information that could be used to identify you has been removed from the data.  An example of this may be how many candidates have taken an exam in a country.

Data provided to third parties in this way is not personal data; however, we do respect your right to object to your data being used in this way.

Access to your stored personal data via password

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site or online platform, you are responsible for keeping that password confidential. We ask you not to share passwords with anyone.

Transmission and storage of your personal data

Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.

Transmission and storage of your personal data

Unfortunately, the transmission of information via the internet is not completely secure. Although we have technical and organisational measures in place to protect your data, we cannot guarantee the security of your data as it is transmitted and stored.

APMG will not retain your personal information for longer than required.

We will keep your personal information:

• For as long as required by law
• Until we no longer have a valid reason for keeping it
• Until you request us to stop processing it

We will retain personal data collected for as long as required to do what we say we will in this policy, unless a longer retention period is required by law.

We may keep just enough of your personal information to ensure that we comply with your requests not to use your personal information or comply with your right to erasure. For example, we must keep your request to be erased, even if it includes your personal data, as an audit trail that requests are dealt with in accordance with UK GDPR.

If you have questions about our Data Retention Policy. Please contact: dataprivacy@apmgroup.co.uk

If you have visited an APMG website and/or registered for an online event

If you have sat an exam with APMG

*mandatory field

**unless the candidate exercises their right to erasure, however this does void their certification(s).

***if a parent, guardian or carer withdraws consent for us to process the personal data of a child under the agree of 16, we will stop processing and will be unable to verify the certification.

Note 1:- The data is only shared with an external proctor if the candidate sits an online proctored exam, and the data is only shared with external scheme owners if the exam sat is owned by an external scheme owner, in accordance with the table in section 10.

Note 2:- If the candidate is under the age of 16 they do not receive a digital badge and their data is not shared with an external badge provider.  We do not publish their data on the Successful Candidate Register and we also do not send marketing materials to under 16’s so their marketing preference is automatically defaulted to not receive marketing.

For schemes that are course only and have no exam, course details will be reported to APMG via an online form, for the purpose of invoicing, and may include personal data.  This information will be stored securely for 7 years

If you have attended a course only

If you have made a purchase from the APMG Store

If you are a user of one of our online portals

APMG uses automated decision-making when marking candidate exam answers.  For online and paper based exams, the exam is either marked directly by the online exam portal, or the answer sheets are scanned and marked by our exam system.  The provisional results are provided to the candidates before APMG officially releases them.  The marking algorithm is one mark per correct answer and the pass or fail result is determined by the minimum pass score for each product, which can be found on the individual product pages. Candidates can contact APMG direct to express their opinion and contest the decision, requesting human intervention to manually mark their exam answers.  Alternatively, if they attended training via one of our training companies, their training company can make this request to APMG on their behalf.  Upon request, APMG will manually mark the exam and issue a decision. The APMG decision from manually marking the exam will be final.

Once we no longer require information, we securely destroy it. We use commercially reasonable technical, organizational, and administrative measures to protect our Services against unauthorized or unlawful access or processing and against accidental loss, theft, disclosure, copying, modification, destruction, or damage. Nonetheless, we cannot guarantee that transmissions of your information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by us or our service providers. You should not share your user name, password, or other security information for your account with anyone. If you have reason to believe that your interaction with us is no longer secure (e.g., if you feel that the security of any account you might have with us has been compromised), please contact us immediately as detailed in section 15, below.

If the personal information is necessary in order to supply goods or services to you under a contract between you and APMG or via one of our business partners, then we will not enter into that contract or provide the services or goods if you do not give us your personal information.

Where you have consented to receive communications from us or are currently receiving material relating to our products or services, you may at any time ask us to cease sending you such material by contacting us.

We will not sell, distribute or lease your personal information to third parties.

APMG International is a subsidiary of The APM Group Limited. You may request details of personal information which we hold about you under the GDPR. If you would like a copy of the information held on you please contact our Data Protection Officer via dataprivacy@apmgroup.co.uk or write to:

F.A.O. Data Protection Officer

APM Group Ltd
Sword House
Totteridge Road
High Wycombe
Buckinghamshire
HP13 6DG

APMG will respect your legal rights to your data.

Below are the rights that you have under law, and what APMG does to protect those rights:

If you have any issues or concerns or just want to provide feedback regarding this Privacy Notice, or any of APMG’s data processing activities, please contact the Data Protection Officer at dataprivacy@apmgroup.co.uk 

Our websites and online platforms may contain links to other websites. Anonymous visit or session information may be passed to other websites for the web usage information purposes described above. None of this information can be related to an individual user of the website. The operators of other sites may collect information from you, which will be used by them in accordance with their own terms and conditions, and privacy policies.

This privacy notice applies only to our websites and online platforms. We are not responsible for privacy practices within any other website. You should always be aware of this when you leave this website and we encourage you to read the privacy statement on all other websites that you visit.

We may update or amend this Privacy Policy from time to time, to comply with law or to meet our changing business requirements. When we update our Privacy Notice, we will take appropriate measures to inform you, consistent with the significance of the changes we make. Any updates or amendments will be posted on the APMG International website. We encourage you to review the APMG International website regularly for the latest information on our privacy practices. By continuing to access our websites and/or online platforms or using any of our services, your access and use will be subject to these updates and amendments.