Privacy Policy
The association should collect only the personal data needed to manage enquiries, membership, instructor recognition, student records, and governance duties.
Expected Data Types
- Contact details for students, instructors, and association members
- Instructor recognition, training history, and assessment records
- Student progression records where a framework requires them
- Messages, enquiries, complaints, and governance correspondence
A full privacy policy should be completed before launch, including controller details, retention periods, lawful bases, subject access rights, and processor information for any portal, email, payment, or database services.