Privacy Policy

CERPM

Privacy Policy

Last updated: 7 September 2026

CERPM operates cerpm.com. This policy explains what personal information we collect through the website, why we use it, how long we keep it and the choices you have.

1. Who we are

CERPM is responsible for deciding how personal information collected through cerpm.com is used. For privacy or data-protection questions, contact resources@cerpm.com.

2. Information we collect

Depending on how you use the site, we may collect:

  • Email addresses submitted through the “Notify Me” or other email signup forms.
  • Contact information and messages you send through a contact form or by email.
  • Order and transaction information if you use a CERPM shop or purchase a product through the website.
  • Technical information such as IP address, browser/device information, security logs and information generated by cookies or similar technologies used by WordPress and its plugins.

We do not ask for special-category personal data through the current CERPM signup form.

3. How and why we use your information

We use personal information for the following purposes:

  • Launch notifications and CERPM email updates — where you have asked to receive them. Our lawful basis is your consent.
  • Responding to enquiries — to answer messages and provide information you request. Our lawful basis is our legitimate interest in communicating with people who contact us.
  • Operating and securing the website — including administration, fraud/spam prevention, troubleshooting and security. Our lawful basis is our legitimate interest in running a secure and reliable website.
  • Processing purchases — if you buy something from CERPM, we use the information necessary to fulfil the transaction. Our lawful bases may include performance of a contract and compliance with legal obligations.

4. Email updates and your choices

If you enter your email address into the CERPM launch signup form and select Notify Me, we will use it to send the launch announcement and occasional CERPM updates described beside the form.

You can withdraw your consent at any time by using an unsubscribe option in our emails or by contacting resources@cerpm.com. Withdrawing consent does not affect processing that took place before you withdrew it.

5. Forms and stored entries

CERPM currently uses WordPress and SureForms to operate website forms. Form submissions may be stored in the WordPress administration area so we can manage signups and enquiries. Website administrators can access those entries where necessary.

6. Cookies and similar technologies

WordPress and installed website functionality may use cookies or similar local-storage technologies for essential site operation, security, forms, account or shopping functionality. Where non-essential cookies require consent under UK law, we will request that consent before using them.

Some future CERPM pages may also contain embedded content or services supplied by third parties. Those services may process information under their own privacy policies.

7. Who we share information with

We do not sell or rent your personal information. We may share information with trusted service providers where this is necessary to operate CERPM, such as website hosting, form-processing, email-delivery, security, payment or ecommerce providers. They may process information only as needed to provide those services or meet their own legal obligations.

We may also disclose information where required by law, regulation, legal process or to protect our legal rights.

8. International transfers

Some technology providers may process or store information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we expect the relevant provider or arrangement to use an approved transfer mechanism or other lawful safeguard.

9. How long we keep information

  • Email signup records: normally until you unsubscribe, ask us to delete them, or the list is no longer required. We may retain minimal suppression information where necessary to make sure we respect an opt-out.
  • Contact enquiries: normally for up to 24 months after the last meaningful interaction, unless there is a legitimate reason to keep them longer.
  • Order and accounting records: where applicable, normally for up to six years or for any longer period required by law.
  • Technical/security records: only for as long as reasonably necessary for website operation, security and the retention policies of the relevant service provider.

10. Security

We take reasonable technical and organisational steps to protect personal information. No internet service can guarantee absolute security, but access to website administration and stored form entries is restricted to authorised users.

11. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to:

  • ask for access to your personal information;
  • ask us to correct inaccurate information;
  • ask us to delete information;
  • ask us to restrict how information is used;
  • object to certain uses of your information;
  • receive certain information in a portable format; and
  • withdraw consent where processing is based on consent.

To exercise a right, email resources@cerpm.com. We may need to verify your identity before acting on a request.

12. Complaints

If you have a concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO). More information is available at ico.org.uk.

13. Children

CERPM is aimed at professionals and is not designed to collect personal information from children.

14. Changes to this policy

We may update this policy as CERPM develops, for example when we introduce new website features, services or marketing tools. The “Last updated” date at the top of this page will show when the policy was most recently revised.

Return to CERPM