Assessments
Assessment Data and Confidentiality Notice
What personal information we collect when you sit a computer-based assessment, why, who can see it, how long we keep it and how we protect your confidentiality.
1. What we collect
- 1.1Account details (name, email, username), the assessment and course, your answers, scores and result, start and finish times and time per question.
- 1.2Security and technical information: your IP address, browser and device details, sign-in records and any integrity flags.
- 1.3Your acceptance of the Assessment Regulations (version, date, time and IP address).
- 1.4If you ask for a reasonable adjustment: the information you give us about your need and any evidence you send.
2. Why we use it
- 2.1To deliver and mark the assessment and send your result. To keep assessments secure and fair and to investigate suspected misconduct. To improve our questions and courses through question statistics. To support you and to meet legal duties.
- 2.2We use it only for these purposes. We do not sell it and we do not use it for advertising. Health information is used only to arrange your adjustment.
3. Who can see it
- 3.1You can see your own results and attempts. Our assessors, support staff and the Assessment Officer (George Mureithi, FCCA, FCPA, MBA, BSc (Hons)) can see attempt data where their role needs it. Our hosting and email providers process data for us under agreements that protect it.
- 3.2We share your result with an employer or sponsor only if you have agreed or they are paying and progress reporting was part of the enrolment. We share information with a professional body or the authorities only where the law requires it or in a matter you have agreed to.
4. How long we keep it
- 4.1Assessment results and attempts: while your account is active plus five years. Attempt logs with IP and device details: 24 months. Sign-in logs: 12 months. Records of your acceptance of the Regulations: as long as the attempt is kept. Adjustment information: only as long as the adjustment applies, then deleted or de-identified.
- 4.2Misconduct case records: five years from the decision. See our Data Retention Schedule. You may ask us to delete information sooner (see below).
5. Protecting confidentiality
- 5.1Data is sent over encrypted connections and held on access-controlled servers. Access is limited to people who need it and is logged. Marking keys and unreleased papers are never sent to candidates' devices. See our Information Security Policy.
- 5.2If personal information is ever exposed we will act under our Data Breach Response Policy and notify you and the regulator where required.
6. Your rights
- 6.1Under the Protection of Personal Information Act (POPIA, South Africa) and the Data Protection Act 2024 (Botswana) you may ask to see, correct or delete your information, object to its use and complain to the regulator. See our Data Protection Policy and Privacy Policy.
- 6.2To exercise your rights write to coreknowledgedigital@gmail.com. Security and integrity records may need to be kept while an investigation or appeal is open.