Privacy & Data
Data Retention & Security
How FCO stores, protects, retains and deletes information, and the responsibilities of account holders.
This policy describes how FCO Assessment Foundation handles the storage, protection, retention and deletion of the information it holds.
Data Minimisation
We collect only the information reasonably needed for the relevant program, assessment or service, and avoid collecting sensitive information that is not necessary.
Access Controls
Access to student, participant and organisational data is limited to authorised personnel whose role requires it. Access rights are reviewed when roles change, and are removed when an engagement ends.
Storage and Secure Practices
Data is stored using established service providers with access restrictions in place. Administrative accounts use individual credentials, and records are handled in line with this policy. We do not claim any specific security certification.
Account Security Responsibilities
Users are responsible for keeping their login credentials confidential, using a strong password, not sharing accounts, and informing us promptly if they suspect unauthorised access.
Backups
Where applicable, backups are maintained to support recovery from technical failure, and are subject to the same access restrictions as live data.
Incident Handling
If a data incident is identified, we act to contain it, assess what information may be affected, take corrective steps, and inform affected users or institutions and any authority where required under applicable laws and regulations.
Retention and Deletion
Information is retained only as long as reasonably necessary for the program, reporting, legal, accounting or organisational purposes. Assessment records may be retained to support verification of results and certificates. Data that is no longer required is deleted or anonymised.
Third-Party Service Providers
We use third-party providers for hosting, payments, communication and analytics. Such providers process information for the purposes for which they are engaged and operate under their own terms and privacy policies.
Requests
Data access, correction or deletion requests may be sent to support@fcofoundation.org.
Questions about our policies?
For questions, concerns or requests relating to FCO Assessment Foundation policies, please contact our team.