The UK and Ireland Testing Board collects personal data to carry out its functions as an Industry Body, provide candidate services, and comply with certain statutory obligations. All personal data is treated with the utmost confidentiality and appropriate security. This Policy describes our data protection procedures. Please review it carefully.
Our Commitment
The UK and Ireland Testing Board (UKITB) is committed to the responsible management, use, and protection of the personal data of our customers, members, beneficiaries, providers, and partners. Any personal data processed by UKITB is subject to the terms of this Policy, which supplements the UKITB Cookie Policy and any other applicable policies made available to you.
Personal Data Processed
The following is a broad description of the way UKITB processes personal information.
Reasons/purposes for processing informationUKITB processes personal information to enable us to promote our goods and services, for example,
Testing4All, develop new services, maintain our accounts and records and support and manage our staff.
Type/classes of information processedWe process information relevant to the above reasons and purposes. This may include:
• personal details
• education details
• goods or services provided
Who the information is processed about
• exam candidates
• customers and clients
• suppliers and service providers
• complainants and enquirers
With whom the information may be sharedWe sometimes need to share the personal information we process with the individual themselves and also with other organisations. Where this is necessary, we are required to comply with all aspects of the Data Protection Act (DPA).
Where we share data with FindWhatsWrong, the data is anonymised, allowing FindWhatsWrong Limited to conduct analytics on the performance of UKITB subscribers and others using its practical testing platform based on disclosed user characteristics. Personal Identifiable Information is not shared with FindWhatsWrong.
Transfers
It may sometimes be necessary to transfer personal information overseas. When needed, information is shared only within the European Economic Area (EEA). Any transfers made will be in full compliance with all aspects of the Data Protection Act.
How We Use Personal Data
We use personal data for the following purposes:
Transactions. We use personal data to complete transactions and respond to your requests.
Communications. We use personal data to send you administrative information, for example, updates to our terms, conditions, and policies. Except as permitted by law, we will not use your personal data for marketing purposes without your prior authorisation.
Conducting our business. We use personal data to perform analyses and audits, develop new products, enhance, improve, and modify our services, identify usage trends, determine the effectiveness of our promotional campaigns, and continue to operate and expand our business activities.
Research. We may use your personal data for research and analytics purposes, but only in accordance with and as permitted by law.
Compliance with the law and legal process. We may use and disclose your personal data to take any action that we believe to be necessary or appropriate: (a) to investigate, prevent and detect fraud and other illegal activities; (b) under applicable laws, including laws outside your country of residence; (c) in a judicial or administrative proceeding or in response to a valid legal order; (d) in compliance with a court order or other process authorised by law, to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (e) to enforce our terms of service and privacy policy; (f) to protect our rights, privacy, safety or property, and/or those of our affiliates, you and others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
Other. We use personal data for other purposes specifically disclosed at the time we collect it.
How We Protect Your PrivacyWe understand the importance of protecting your personal data. We restrict access to your personal data to authorised UKITB directors who need that information for legitimate purposes. We maintain technical, physical and administrative safeguards to ensure the privacy and confidentiality of your personal data. Our Data Controller monitors our adherence to policies and procedures and educates our organisation on this important topic.
Your Individual RightsYou have the following rights regarding the personal data that we collect and/or maintain about you
• Right to access your personal data. You may request access to any personal data we maintain about you.
• Right to correct your personal data. You have the right to ask us to correct your personal data contained in our electronic or paper records if you believe it is inaccurate. If we determine that the personal data is inaccurate, we will correct it if permitted by law.
Actions You May TakeIf you have questions about your privacy rights, or wish to request access to or correction of your data, you can contact us at the address in the footer or send us an email at
privacy@ukitb.orgPolicy Availability and DurationPolicy availability. A copy of this policy is available for you to view, print and/or download on our website.
Right to change the terms of this policy. We may change the terms of this policy at any time. If we change this policy, we will update the policy on our website and, if you are enrolled in a UKITB database at that time, we will send you the new policy, as required. In addition, you can obtain a copy of the new policy upon request when you email
privacy@ukitb.orgEffective date. This policy is effective as of 1st April 2019. This policy was last updated on 23rd of February 2026.
