Privacy Policy
Draft privacy framework for the proposed CPMW learning and credential platform.
Information CPMW may collect
- Account and contact information;
- purchase and transaction records;
- course enrollment, progress, time, quiz and exam records;
- practicum and assignment submissions;
- credential issuance, renewal and status records;
- support communications;
- technical information such as IP address, browser, device and security logs.
How information may be used
To provide courses, administer assessments, issue and verify credentials, process payments, prevent fraud, support learners, maintain records, improve programs, enforce policies, and meet legal obligations.
Public credential verification
When a learner earns an eligible credential, CPMW may maintain a public verification record containing limited information such as practitioner name, credential name, credential number, issue date, renewal/expiration date and status. The enrollment flow should clearly disclose this before credential issuance.
Payments
Payment processors may receive payment information directly. CPMW should avoid storing full payment-card data unless using a compliant payment environment.
Retention
Educational and credential records may need to be retained for credential verification, audit, fraud prevention and legal obligations. Production policy should specify practical retention periods.
Choices and rights
Users may have rights to access, correct, delete or restrict certain personal information depending on applicable law. Public credential records may require separate handling because credential integrity and historical verification can create legitimate retention needs.
Security
CPMW should use reasonable administrative, technical and organizational safeguards, including HTTPS, access controls, password hashing, backups and audit logging.
Children
The final policy should specify the minimum account age and parental-consent approach if minors are permitted to enroll.
Contact
The production policy should list CPMW's legal/business contact address and privacy contact method.