Privacy Policy

What We Collect

• Your account: your name and email address. Your password is stored only in scrambled (hashed) form.
• Enrollments and exams: the certifications you enroll in, each exam attempt with the questions given and the answers chosen, your scores, and each time you leave the exam page during an attempt.
• Certificates and membership: credential numbers, award and expiry dates, membership status and member number.
• Corporate accounts: the organization's name, invoice email, billing address and purchase order reference, and the people on its roster.
• Payments: Stripe processes all payments. Card details go directly to Stripe and never reach IIAAIT. We keep a record of what was paid and when.
• Site visits: the pages viewed, the links and buttons clicked, and the IP address they came from.
• Messages: what you send through the contact page, with your name and email address.

How We Use It

• To run your account, enrollments, exams, certificates and membership.
• To email you about your account, payments, renewals and results.
• To review complaints about exam questions and uphold the exam rules.
• To keep the site secure and see how it is used.

IIAAIT does not sell or rent personal information, and does not use it for advertising.

What Others Can See

• Anyone who enters your credential number at iiaait.org/verify sees your name, the certification, its award and expiry dates, and the credential number. If you are a member, it also shows your membership status.
• Anyone who enters your member number sees your name, the certifications you hold, your membership status and the year you joined.
• Your member badge and email signature show your name, member number and credentials.
• If an organization pays for your membership, its account contact sees your course progress, credentials and membership dates.
• Your email address is never shown publicly.

Who We Share It With

• Stripe, to take payments and send invoices and receipts.
• Our web host, which stores the site and its data and sends its emails.
• Google, through Google Analytics and Google Fonts on public pages (see Cookies).
• Authorities, only when the law requires it.

Cookies

• One cookie keeps you logged in. It ends when you log off or close your browser.
• Public pages use Google Analytics, which sets its own cookies to count visits. It is not used on your account, exam, certificate or payment pages.
• No advertising cookies are used.

How Long We Keep It

• Certificate records are kept so credentials can be verified, including after they expire.
• Exam attempts are kept so results can be reviewed.
• Accounts do not expire. You can ask for yours to be deleted.

Your Choices

Ask for a copy of your information, a correction or the deletion of your account through the contact page, from the email address on your account. Some records, such as issued certificates and payment records, are kept where needed to verify credentials or meet legal and tax obligations.

Security

Personal information is stored in private storage on the server, outside the public website. Pages are served over a secure connection, and administrator access is restricted.

Changes

Changes to this policy are posted on this page with a new date.