Sub-processors

Data may include website and application request metadata, application runtime data and deployment logs needed to operate the service.

Data may include request metadata, IP addresses and security-related traffic information used to route and protect the service.

Data may include organisation records, user accounts, staff records, training records, assessments, appraisal records, CPD records, development action records, registration or check details, evidence metadata and uploaded evidence files.

SkillProof stores Stripe customer, subscription and billing status identifiers. Card details are handled by Stripe and are not stored directly by SkillProof.

Data may include recipient email addresses, message subjects, operational message content and delivery metadata needed to send and troubleshoot those emails. Any future marketing email would require an appropriate permission and suppression process.

Data may include the contact details and enquiry information submitted through those forms.

Data may include a hashed or pseudonymous visit identifier, page path, allowlisted campaign information, device category and website interaction events. SkillProof does not send public form contents, raw query strings or customer workspace data to Google Analytics.

Data may include advertising click identifiers and a linked Analytics conversion outcome. SkillProof does not fire a separate thank-you-page conversion, configures ad personalisation as denied and does not send form contents, names, email addresses, telephone numbers or customer workspace data through the Google tag.

Data may include masked page interactions, device and browser information used for session recordings, heatmaps and website usability analysis. SkillProof masks the public page body and does not load the public Clarity integration on private customer application routes.