Privacy

What we hold

• Your account — name, email address, and optionally a backup address, profession, regulator, registration number, role or grade, and registration date.
• Your CPD record — the activities you log or import, including any reflection you write. Reflection can be personal; it is shown to nobody but you unless you export or print it yourself.
• Attendance — when you sign a register: your name, email, and the professional body and registration number you give, with a server timestamp.
• Registers you organise — the event details you enter, and the signatures of people who attend.
• Sign-in — a password stored only as a bcrypt hash, session tokens, and a short-lived count of failed sign-in attempts used to slow down guessing.

What we don’t hold

Event feedback is stored with no link to the person who gave it — not a hidden one, none at all — and only the date, not the time. That is deliberate: it means feedback cannot be traced back to you by an organiser, by us, or by anyone who obtained the database. It also means we cannot retrieve your own feedback for you, because there is nothing identifying it.

There is no advertising, no analytics or tracking pixels, and no third-party sharing. Cookies are limited to the ones that make signing in work.

Who can see it

• Your CPD record is visible only to you.
• An organiser sees the details you give when you sign their register — that is the point of a register, and it is what makes your attendance evidence.
• An attendance slip carries a verification code. Anyone you give that code to can confirm the attendance is genuine, and can download the slip, which shows your name, email and registration number. Share the code only with people you intend to.
• Organisers see feedback for their event as anonymous totals and comments, never who said what.

How long, and how to remove it

We keep your data while your account exists. You can download everything as a JSON file at any time, and close your account from the same page.

Closing your account deletes your profile, sign-in and CPD record. Two things are kept and stated plainly before you confirm: attendances you signed on other people’s registers are anonymised rather than deleted, and registers you organised are kept and closed. Both are other people’s evidence — removing them would alter an organiser’s record of who attended and invalidate slips already issued to auditors.

Your rights

Under UK GDPR you can ask for a copy of your data, correct it, or ask us to delete it — the account page does all three without needing to ask. You can also complain to the Information Commissioner’s Office.

This service is in testing. If anything here is unclear or you want data removed in a way the account page doesn’t cover, contact us and we will do it by hand.