Privacy Policy

1. Who We Are

The Global Education and Development Services (GEDS) is a professional body established in 1915, operating as a company limited by guarantee registered in England and Wales. We are committed to protecting your privacy and handling your personal data responsibly.

2. Data We Collect

We collect and process the following categories of personal data:

2.1 Information You Provide

When you apply for membership, register for qualifications, or use our services, you may provide:

• Identity data: name, title, date of birth, gender
• Contact data: email address, telephone number, postal address
• Professional data: employment history, qualifications, job title, employer details
• Educational data: academic qualifications, training records, assessment results
• Financial data: payment card details, billing address, transaction history
• Account data: username, password, account preferences

2.2 Information We Collect Automatically

When you visit our website, we automatically collect:

• Technical data: IP address, browser type, operating system, device information
• Usage data: pages visited, time spent, click patterns, referral sources
• Location data: approximate location based on IP address

2.3 Information from Third Parties

We may receive information from:

• Accredited training centres regarding your qualifications and assessments
• Employers sponsoring your membership or training
• Referees providing professional references
• Publicly available professional networking platforms

3. How We Use Your Data

We use your personal data for the following purposes:

3.1 Membership Services

• Processing membership applications and renewals
• Maintaining the membership register and directory
• Providing member benefits and services
• Communicating about your membership status

3.2 Qualifications and Training

• Registering learners for qualifications
• Processing assessments and issuing certificates
• Maintaining qualification records
• Quality assurance and standards verification

3.3 Communications

• Sending service-related communications
• Providing newsletters and professional updates (with consent)
• Notifying you of events, courses, and opportunities
• Responding to enquiries and support requests

3.4 Business Operations

• Processing payments and managing accounts
• Improving our website and services
• Conducting research and analysis
• Complying with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

5. Data Sharing

We may share your personal data with:

5.1 Service Providers

Third parties who provide services on our behalf, including payment processors, IT service providers, email platforms, and cloud hosting services. These providers are contractually bound to protect your data.

5.2 Training Centres

Accredited training centres delivering GEDS qualifications, who require learner data to provide educational services and submit assessment results.

5.3 Regulatory Bodies

Ofqual and other regulatory authorities as required for qualification oversight and compliance purposes.

5.4 Professional Verification

Employers and other parties conducting legitimate verification of your membership status or qualifications, subject to your consent where required.

5.5 Legal Requirements

Law enforcement agencies, courts, or other parties where we are legally required to do so.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

• Membership records: Duration of membership plus 7 years
• Qualification records: Permanently retained for verification purposes
• Financial records: 7 years as required by law
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months
• Enquiry correspondence: 3 years

When data is no longer required, it is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit using TLS/SSL
• Secure data storage with access controls
• Regular security assessments and penetration testing
• Staff training on data protection
• Incident response procedures
• Regular backups and disaster recovery planning

While we take all reasonable precautions, no data transmission over the internet can be guaranteed to be 100% secure.

9. International Transfers

Your personal data may be transferred to and processed in countries outside the UK and European Economic Area. When this occurs, we ensure appropriate safeguards are in place, including:

• Transfers to countries with adequate data protection laws
• Standard contractual clauses approved by the UK Government
• Binding corporate rules for group companies

10. Cookies

Our website uses cookies and similar technologies to enhance your experience and analyse website usage. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

We encourage you to review this policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: