Privacy Policy

1. Information We Collect

We may collect the following types of information:

2. How We Use Your Information

We use collected information to:

• Provide and operate the CPDForge platform
• Generate training course content
• Manage user accounts and subscriptions
• Process payments
• Improve platform performance and security
• Respond to customer support requests

3. Data Security

We implement appropriate technical and organisational measures to protect your information. This includes encrypted storage of sensitive credentials and secure communication protocols (HTTPS).

4. Third-Party Services

CPDForge relies on the following third-party services:

• OpenAI -- AI content generation
• Stripe -- payment processing
• Resend -- transactional email delivery

These services may process data necessary to perform their functions.

5. Data Retention & Account Lifecycle

We retain personal data only as long as necessary to provide the service or to meet legal obligations. We treat three distinct situations differently:

• Cancelling your subscription stops billing, but your account and data remain so you can return later. Any credentials you have already earned stay publicly verifiable.
• Account deletion deactivates and hides your account and blocks sign-in. It can be restored on request during a short recovery window; data is retained until you request erasure or that window elapses.
• Erasure ("right to be forgotten") permanently removes or anonymises your personal data. Two categories are retained by design, on the basis of legal obligation and legitimate interest: (a) issued credentials, kept as an accreditation record and to honour our public-verification commitment — but with your personal identity redacted, so a verifier sees "Holder identity withdrawn — credential validity confirmed" rather than your details; and (b) our tamper-evident audit log, retained for security and compliance. Aggregate financial and analytics records may also be retained with personal identifiers removed.

6. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Request deletion or erasure of your personal data
• Withdraw consent where applicable

To exercise these rights, contact us via our Support page. We action erasure requests within one month. Please note that erasure does not revoke credentials you have already been awarded — they remain publicly verifiable with your personal identity redacted, as described in section 5.

7. Cookies & first-party analytics

CPDForge may use cookies or similar technologies to maintain sessions and improve user experience.

We also operate a first-party analytics and attribution measurement to understand, in aggregate, how visitors discover and use our platform (for example which channel or landing page brought you here). We handle this on a consent-aware basis:

• If you accept cookies: we store a single random, non-identifying visitor id on your device to recognise your journey across visits. It contains no personal data and is never linked to your IP address.
• If you have not yet chosen, or accept only essential cookies: we collect cookieless, non-persistent, fully anonymous measurement pings only. Nothing is stored or read on your device, no identifier persists beyond the page, and no personal data is processed. This aggregate measurement relies on our legitimate interest in understanding how our service is found and used.
• If you reject cookies (or your browser sends "Do Not Track"): we send no first-party analytics at all.

We never sell this data, never store your IP address against it, and you can change your cookie choice at any time via the cookie banner.

8. Changes to This Policy

We may update this Privacy Policy periodically. Updated versions will be posted on this page.

9. Contact

For privacy questions or requests:

Contact us via our Support page.

CPDForge is operated by CPDFORGE AI LTD, registered in England and Wales under company number 17306615. Registered office: 66 Paul Street, London, England, United Kingdom, EC2A 4NA.