Privacy policy
1. Certificate data is personal data
A certificate record contains the learner's name, course, institute and dates. We process it to operate the registry, under contract with the issuing institute and with a learner notice at issuance. Applicable regimes include India DPDP Act 2023, EU/UK GDPR, and UAE PDPL depending on where you are.
2. Data minimisation on public pages
Verification pages show only what verification requires: learner name, course, institute, status and dates. Learners can set their certificate page to link-only visibility. Employers verifying certificates need no account, and we collect no verifier identity.
3. Erasure vs. registry integrity
On a valid erasure request we anonymise the public display while retaining a hashed audit record, so the registry's integrity (and fraud detection) survives without exposing personal data.
4. Analytics
Verification counts are aggregated (count, country, day) without personal identifiers. Product analytics on portals are privacy-respecting and used to improve the service.
5. Contact
privacy@pqual.com for access, correction, or erasure requests. Breach-notification runbooks are maintained and tested.