Who we are
IFEIA (International Framework for Educational Institutions Accreditation) is the controller of the personal data described in this policy. You can reach us at [email protected] or at 600 N King St, Wilmington, DE 19801, USA.
What we collect
- Contact details and the content of messages you send us by email, through the inquiry process or through the application process.
- Information in an application: institution and programme details, the names and work contact details of the people named as contacts, and the supporting documents submitted.
- Verification enquiries: what you ask us and how to reply to you.
- Basic technical data (such as IP address and browser type) processed by our hosting provider to deliver, secure and troubleshoot the website.
Why we use it, and our basis
- To answer inquiries and verification requests (our legitimate interest in running the service, and taking steps at your request).
- To assess applications and administer accreditation, monitoring, complaints and appeals (performance of our process with the applicant, and our legitimate interest in sound decisions).
- To keep the public registry accurate and to protect against misuse of certificates and the mark (legitimate interest and, where applicable, legal obligation).
- To keep the website secure (legitimate interest).
The public registry
Registry records are public by design. They show institution details, the scope and level accredited, numbers, dates and status. They are not meant to contain personal data about individuals. If you believe a record contains personal data that should not be there, write to [email protected] and we will review it promptly.
Who we share it with
We do not sell personal data and we do not use it for advertising. We share it only with reviewers, committee members and appeals panel members who need it for a specific matter and who are bound by confidentiality; with service providers who process it for us under written terms (for example website hosting and email); and where the law or a valid legal request requires it.
International transfers
We operate from the United States and our providers may process data in other countries. Where data about people in the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Application records are kept while an accreditation is in force and for a reasonable period afterwards, so that we can answer questions about past decisions, then deleted or anonymised. Inquiries that do not proceed are deleted on request or after a reasonable period. Records of appeals and complaints are kept as long as needed to resolve them and to evidence our process.
Security
We use reasonable technical and organisational measures to protect personal data, including access limits and the use of reputable providers. No system is completely secure; if a breach affecting you occurs we will tell you and the relevant authority where the law requires.
Your rights
Depending on where you live you can ask to see, correct, delete or export the personal data we hold about you, to restrict or object to its use, and to withdraw consent where we rely on it. Write to [email protected] and we will reply within a reasonable time. If you are not satisfied you may complain to your local data protection authority.
Children
This website and our services are for institutions and professionals. We do not knowingly collect personal data from children.
Cookies and tracking
This website does not use advertising cookies or third-party trackers. If that changes we will update this policy and ask for consent where the law requires it.
Changes
We may update this policy. The current version is the one on this page, with its effective date at the foot.
Effective 30 October 2026. Questions: [email protected].