(Effective as of 01/02/2019)
If you do not agree with our policies and practices, your choice is to not access the website.
The personal data, in any format, that we collect, and hold is important to us and is handled in accordance with this Statement. Where we ask you to provide information by which you can be identified when using our websites, or any DocXpo services, you can be assured that it will only be used in accordance with this Privacy Statement. We will always explain clearly what data we are collecting about you and why. We will only collect data we need to give you a better experience; to improve and deliver our services to you; and to meet our responsibilities to you.
DocXpo is the Data Controller and Data Processor of the information that you provide to us as a registered member on our website and to access our services and training. We also work with selected third party organisations to process data on our behalf and provide DocXpo Brands services. These third party processors must meet the same stringent data standards that we set ourselves. For all other queries relating to this Privacy Statement and our handling of personal data please contact support@DocXpo.com.
INFORMATION WE COLLECT
We may collect the following information from you when you join DocXpo e-learning courses/programme, place bookings, complete surveys or application forms, provide services to us, or purchase services from us:
- your name and gender;
- location, contact email addresses and contact telephone numbers;
- your credit/debit card and /or billing details;
- assessment information for qualifications;
- learning opportunities undertaken as part of continuous professional development;
- online self-assessment tools use and scoring;
- competency questionnaires use and scoring;
- date of joining DocXpo, membership status;
- Bookings/Purchases you have made from DocXpo;
- enquiries and contacts, you have made to DocXpo;
- user name and password;
- all data about what you learn and how you learn;
- the IP address you use to log in;
- photos and video footage (where captured at our online training/lecture);
- Sensitive data that we may collect (this includes Special Categories of personal data as defined by GDPR); and
- information you provide us when applying for special consideration or to defer an exam.
HOW WE COLLECT YOUR INFORMATION
We collect information from you, for example, when you:
- make enquiries with us
- book onto an E-Learning training course
- purchase learning materials
- choose to upload your information via your DocXpo account
- sign up to and/or make use of the services we (DocXpo) have available
We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:
- to respond to your enquiries
- to administer your membership and provide the benefits set
- to allow you access to the DocXpo site(s) and services
- to fulfil our obligations arising from any contracts entered into between you and DocXpo, and for their general management – this includes providing the services that we offer, where Terms and Conditions apply
- to administer and manage the examination and assessment processes
- to organise and deliver DocXpo e-learning courses,
- process payments from or to you
- to notify and remind you when your membership is due for renewal
- provide you with information relating to your studies
- provide you with news, products, services and membership updates
- invite you to provide feedback on our services,
- invite you to take part in research campaigns
- to monitor how you respond to our communications
- to allow us to monitor usage statistics as a basis for future improvements to relevant website processes
- to meet security and safety requirements where you participate in our e-learning course
- to verify your identity
- to enable us to track system use by user
- internal record keeping
- to periodically conduct quality checks on the data we hold on you
Your personal information will only be used for the purpose or purposes it was collected. It will not be sold, shared, or distributed to third parties unless we have your permission or where it is necessary for one of the reasons listed above.
DISCLOSURE OF YOUR INFORMATION
- To service providers, and other third parties we use to support our business and who are bound by confidentiality obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
- To fulfil the purpose for which you provide it.
- For any other purpose disclosed by us when you provide the information with your consent.
- To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
- If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of the Company, our customers, or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.
HOW LONG WE HOLD YOUR INFORMATION
DocXpo has a variety of obligations to keep the data that you provide us. These include ensuring that transactions are processed correctly, identifying fraud, and complying with any laws and rules that apply to us and to our service providers. DocXpo has a Data Retention Policy to ensure that your data is not held for longer than is necessary. We hold the information that you provide to us while you are an active, registered user and member, and when you register for our services. Therefore, even if you close your account or membership with us, we may keep certain data (such as membership information) to meet our obligations but for no longer than required or permitted by law.
WHERE YOUR INFORMATION IS STORED
Your information is held securely within Federal Republic of Nigeria (FRN), however may be stored and processed in any country in which our Regional Offices or agents operate in order to provide our services within those respective regions and/or to adhere to audit and regulatory requirements.
If your information is transferred outside the FRN for any purposes, then we will take measures to ensure that your data remains protected at all times to the standard imposed by the General Data Protection Regulation (GDPR). We require our trusted third parties to meet DocXpo data protection standards. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities may be entitled to access your personal data.
SECURITY OF YOUR PERSONAL INFORMATION
In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. DocXpo websites are maintained on a secure server. All our suppliers and contractors meet the standards we require. Restrictions are also in place so that users only have access to data that is required for them to do obtain their registered interest. Staff training is undertaken regularly, and checks are made by IT staff to ensure data quality is maintained.
All payment card details are processed by a third party payment processor who encrypts the details using SSL (Secure Socket Layer) technology. Once orders have been processed all encrypted credit card information on the webserver is deleted.
We also have in place a comprehensive email security Policy; all incoming and outgoing email is scanned by multiple security systems before being accepted or sent out. These security systems will block and hold messages that contain viruses and malware, spam messages or other inappropriate content.
Unfortunately, no data transmission or storage system is completely secure. If you feel that the security of your account or interaction with us has been compromised, please contact us immediately. If such a disclosure does occur, we will contact you as soon as possible to explain what has happened and take all steps required of us to meet our obligations under the legislation.
YOUR RIGHTS IN CONTROLLING YOUR PERSONAL INFORMATION
You can ask us to make changes in how your data is handled and we will respond promptly should a request be made. You have the following rights under the General Data Protection Regulation (GDPR) over the personal data that we are holding and processing about you:
Right to be informed: This Statement provides you with information in relation to how your data is processed. This ensures that we are transparent about what we will do with the information you supply to us.
Right of access: You may request details of personal information which we hold about you under the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This is called a Subject Access Request.
Right to request information held is accurate and how to update it. If you believe that any information we are holding on you is incorrect or incomplete, please email us at firstname.lastname@example.org and we will respond as quickly as possible.
Right to erasure. In certain circumstances, you may ask us to delete information about you and stop processing or publishing it. Right to object to the processing that is likely to cause you damage or distress. Where you challenge the accuracy or lawful processing of your information, we will consider this
Right to object. We will ensure that we have the right consents in place for sending you information. You can unsubscribe from our mailings and remove your details at any time. If you wish to stop receiving communications from us, you will be able to do so by contacting us at help@DocXpo.com.
A cookie is a tiny file that is stored on a user’s computer and issued to your computer when you enter a website. It stores a small amount of information relating specifically to the client and the website. The cookie can be accessed by both the web server and the user’s computer.
- carry information across pages of the site
- avoid having to re-enter information
- maintain a booking form
- after member login, to access member only information or receive member only privileges.
NOTIFICATION OF CHANGES
We keep this Statement under regular review and will update this page. You should check this page from time to time to ensure that you are aware of any changes.