Last Updated: July 2025

ICPPD’s Privacy Policy

1. General Privacy Statement

The International College for Personal and Professional Development Ltd (ICPPD) fully respects your right to privacy and actively seeks to preserve the privacy rights of those who share information with us. Any personal information which you volunteer to ICPPD will be treated with the highest standards of security and confidentiality, in accordance with the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018. This statement is intended to provide transparency but is not deemed to be a contractual undertaking.

2. Data Controller

ICPPD is the data controller in respect of all personal data collected and processed. If you wish to access your personal data, you may submit a Data Subject Access Request to the Data Protection Officer (DPO) via the contact details provided below.

3. Collection and Use of Personal Information

We do not collect personal data about you on our website except information you voluntarily submit, such as via phone, email, application forms, or website forms.

We use personal data only for the purposes for which it was provided and in compliance with data protection laws. We do not share personal data unless:

• You provide explicit consent
• It is necessary for contractual performance
• Required by law
• Necessary to protect our legitimate interests (where not overridden by your rights)

4. Categories of Personal Data Collected

Depending on your interaction with ICPPD, we may collect:

• Name, email, phone, postal address, date of birth, gender, country of birth, photograph, PPS number (if relevant)
• Application, education, and employment history
• Academic and assessment data
• Payment and financial information
• IP address, device, browser, and website usage data
• Health or vetting information (where relevant)

5. Legal Basis for Processing

We rely on Article 6 GDPR legal bases:

• Consent: e.g., for direct marketing or website forms
• Contractual necessity: e.g., course applications and participation
• Legal obligation: e.g., statutory reporting
• Legitimate interests: e.g., website analytics, IT security (where your rights are not overridden)

Where special category data is processed (e.g. Garda vetting or disability accommodations), we rely on:

• Article 9(2)(b) GDPR, supported by Section 46 of the Data Protection Act 2018
• Article 9(2)(g) GDPR, supported by Section 47 and Schedule 1 of the Data Protection Act 2018 (e.g., substantial public interest such as safeguarding or equality)

6. Data Retention

We retain personal data only as long as necessary. Examples:

• Application data: up to 2 years
• Learner records: in line with academic and legal obligations
• Website usage data (e.g., Google Analytics): up to 26 months

For more information, contact the DPO at the contact details provided below.

7. Sharing of Personal Data

We may share your data:

• With data processors acting on our behalf (e.g., cloud services, CRM, LMS platforms)
• With accrediting bodies
• With the Garda National Vetting Bureau
• With work placement providers
• With insurance providers to meet Protection of Enrolled Learners (PEL) obligations

Data processors are contractually bound to safeguard your data.

8. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission
• Explicit consent

9. Technical Data and Cookies

ICPPD logs technical data such as IP addresses for security and analytics purposes. Cookies may be used to:

• Understand site usage via Google Analytics
• Remember display preferences

We use a cookie consent mechanism to request your consent for non-essential cookies. You may manage cookies via your browser settings.

10. Data Security

ICPPD implements appropriate physical, technical, and organisational measures to protect your data. These include access controls, encrypted systems, and regular policy reviews. However, internet data transmission can be insecure, and you are responsible for protecting your passwords.

We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

11. Automated Decision-Making

ICPPD does not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

12. Your Rights Under GDPR

You have the right to:

• Access your data
• Rectify incorrect data
• Erase your data (where legally applicable)
• Restrict or object to processing
• Data portability
• Withdraw consent (where applicable)

Requests can be submitted by email or post to the DPO. We aim to respond within one month and do not charge for requests unless manifestly excessive.

13. Complaints

If you are unhappy with our processing of your data, you may contact the Data Protection Commission:

• Website: https://www.dataprotection.ie
• Address: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
• Tel: +353 57 868 4800 / +353 76 110 4800

14. Policy Changes

We may update this policy occasionally. The latest version will always be available on our website. Material changes may be notified by email or website notice.

15. Contact – Data Protection Officer (DPO)

Data Protection Officer
The International College for Personal and Professional Development Ltd
Magazine Road, Athlone, Co. Westmeath, N37Y5F6, Ireland
Tel: +353 90 6470484
Email: collegemanager@icppd.com