Privacy & Data Protection Policy

The British Institute for Artificial Intelligence Ltd acts as the Data Controller responsible for your personal data. For all inquiries regarding data protection, Subject Access Requests, or privacy compliance, contact our appointed Data Protection Officer at [email protected].

We collect information essential for course registration, identity verification, examination administration, and certificate issuance. This includes delegate names, professional contact details, corporate billing credentials, attendance records, and assessment submissions.

We process personal data strictly in compliance with Article 6 of the UK GDPR: (a) Performance of a contract when delivering accredited training; (b) Compliance with statutory legal obligations; (c) Legitimate business interests in ensuring academic integrity; and (d) Consent for optional communications.

BRITAI does not sell or lease personal data to external advertisers. Data may be shared strictly with accredited qualification bodies (e.g., CPD Certification Service) for validation, and secure cloud infrastructure providers adhering to ISO/IEC 27001 standards.

We employ AES-256 bit encryption in transit and at rest, alongside multi-factor authentication and strict role-based access controls. Delegate training records and certification credentials are maintained securely for 6 years to satisfy accreditation verification requirements.

Under UK data protection law, you possess enforceable rights including the Right of Access, Rectification, Erasure, Restriction of Processing, and Data Portability. You also have the right to lodge a formal complaint with the UK Information Commissioner Office (ICO).