Privacy Policy

The IQA Hub is the data controller for account, billing and platform usage data. Where training providers upload learner records and assessment evidence, the provider is the data controller and The IQA Hub acts as a data processor on their documented instructions.

Account data: name, email address, telephone number, role, and login credentials (stored only as secure hashes).

Professional data: for IQA practitioners: qualifications, certificates, awarding organisation registrations, references, ID verification documents and CPD records.

Service data: courses, learner names and learner IDs (as issued by the awarding organisation), assessment evidence files, IQA decisions, actions, reports, messages and quality management records uploaded to the platform.

Technical data: audit trail entries (who did what, and when), IP addresses and standard server logs.

Billing data: payment is processed by Stripe; we never see or store full card numbers.

Contract: to provide the IQA management service you signed up for: allocation, sampling, reporting and evidence storage.

Legitimate interests: to keep the platform secure, prevent fraud, maintain the audit trail and improve the service.

Legal obligation: accounting, tax and regulatory record-keeping.

We use a small number of subprocessors to run the platform: cloud hosting and database infrastructure, secure file storage, Stripe (payments) and Resend (transactional email). Each is bound by a data processing agreement and may only process data on our instructions. We never sell personal data.

Audit trail and quality records are retained for as long as your organisation's account is active, because they form the evidence base regulators and awarding organisations may request. After account closure, records are retained for up to 6 years to meet legal and contractual obligations, then securely deleted.

Encryption in transit and at rest, role-based access control, multi-factor authentication options, organisation-level data isolation, and a tamper-evident audit trail of every significant action on the platform.

You have the right to access, correct, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies required for secure sign-in sessions. Where website analytics are enabled, we use Google Analytics to understand how visitors use the site; these cookies are only set on the public website and you can opt out using Google's browser add-on. We never use advertising or cross-site tracking cookies.

We may update this policy from time to time; material changes will be flagged in the platform. Questions about this policy or your data: email contact@theiqahub.com.