Effective Date: January 1, 2026
1. Introduction
The Chartered Institute of Public Administration and Governance (CIPAG) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, register for membership, purchase certifications, or engage with our services.
2. Information We Collect
We may collect the following categories of personal data:
- Identity Data: Full name, professional title, employer/organisation, government ID or passport number (for verification).
- Contact Data: Email address, postal address, telephone number, country of residence.
- Professional Data: Employment history, educational qualifications, professional certifications, public sector experience, CPD records.
- Financial Data: Payment card details (processed by third‑party payment gateways, not stored by CIPAG), billing address.
- Technical Data: IP address, browser type, device identifiers, cookies, and usage statistics.
- Communications: Correspondence with our support team, feedback, survey responses.
3. How We Collect Your Data
- Direct interactions: When you fill membership forms, register for events, purchase certifications, or contact us.
- Automated technologies: Cookies and server logs as you navigate our site.
- Third parties: Accredited country agents, payment providers, or examination proctors who share information with your consent.
4. How We Use Your Information
We use your personal data only for legitimate purposes, including:
- Processing your membership application, certification, or exam registration.
- Verifying your eligibility for membership tiers (Experiential/Professional Routes).
- Communicating important updates (exam schedules, policy changes, renewal notices).
- Improving our website, services, and member experience.
- Complying with legal obligations (anti‑fraud, tax, disciplinary proceedings).
- Publishing accredited member directories (with your explicit consent).
5. Legal Basis for Processing (GDPR & Global Standards)
For individuals in the European Economic Area (EEA) or United Kingdom, we rely on: (a) your consent, (b) performance of a contract, (c) legal obligation, or (d) legitimate interests (e.g., maintaining professional standards).
6. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined – typically the duration of your membership plus seven years following expiry or revocation (for audit and legal compliance). Examination records are retained for ten years to verify credential authenticity.
7. Data Sharing and Disclosure
We do not sell your personal data. We may share data with:
- Accredited country agents: To provide local support and process applications.
- Examination proctors and vendors: For secure test delivery.
- Professional verification services: Employers may verify your credential through our public registry (limited to name, certification, status).
- Legal authorities: When required by law or to enforce our terms and ethics code.
8. International Transfers
CIPAG is headquartered in the USA. Your data may be processed in the USA and other countries where we have operations or service providers. We ensure appropriate safeguards (Standard Contractual Clauses, EU‑US Data Privacy Framework) for cross‑border transfers.
9. Data Security
We implement industry‑standard security measures: encryption (SSL/TLS), access controls, regular vulnerability scans, and staff training. However, no method of transmission over the Internet is 100% secure.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data.
- Restrict or object to processing.
- Data portability (receive a copy of your data).
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact our Data Protection Officer at dpo@cipag.us.
11. Children’s Privacy
Our services are for public administration professionals aged 18 and above. We do not knowingly collect data from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Effective Date”. Significant changes will be notified via email.
13. Contact Us
If you have any questions, please contact us at:
CIPAG Data Protection Office
123 Governance Avenue, Suite 400
Washington D.C., 20001, USA
Email: privacy@cipag.us
