Privacy Policy

Last updated: 13 September 2026

Who we are

Competas Global Limited ("Competas", "we", "us") provides safety and technical competency assessment and passporting for the energy sector. We are the data controller responsible for the personal data described in this policy.

Competas Global Limited is registered in England and Wales (company number 09912563). Registered office: 1 Beauchamp Court, 10 Victors Way, Barnet, Hertfordshire, EN5 5TZ.

For any privacy question, or to exercise your rights, contact us at contact@competas.com.

This policy explains what personal data we collect, why, how we use and protect it, how long we keep it, and the rights you have. It applies to candidates who take our assessments, sponsors and account holders who use our platform, and visitors to our sites.

What personal data we collect

Depending on how you use Competas, we may collect:

• Identity and contact details: name, email address, username, telephone/mobile number, postal address, date of birth, sex/gender, and country.
• Account and sponsorship details: account type, sponsor code, registration numbers, and the status of your registration and assessments.
• Professional information: current and previous roles, years of experience, qualifications, references, and CV where you provide one.
• Assessment data: your responses to competency and psychometric assessments, and the competency and psychometric profiles the platform generates from them.
• Identity verification images: a passport or profile photograph used to confirm your identity.
• Proctoring data: where an assessment is proctored (through our proctoring provider), the session is recorded to confirm identity and assessment integrity. This includes webcam video and audio of you during the assessment, a recording of your photographic ID for identity verification, a recording of your screen during the session, and, where required, a second-camera recording (for example from a mobile device) showing your surroundings.
• Technical data: information needed to keep you signed in and to operate the service securely (a session cookie). We do not use analytics, advertising, or tracking cookies.

Special category data

Identity photographs and proctoring video that identify you by your image are biometric personal data, which is a special category of data under the UK GDPR. We process this data only for identity verification and to maintain the integrity of proctored assessments, on the basis of your explicit consent, which we ask for before a proctored assessment begins. We apply additional safeguards to this data, restrict access to it, and retain it only as long as needed for the purpose. You can withdraw your consent, but we may then be unable to verify your identity, proctor your assessment, or issue a passport.

Why we use it, and our legal basis

• To register and manage your account, and to provide the assessment and passporting service you or your sponsor have signed up for (performance of a contract).
• To verify your identity and maintain the integrity of assessments, including proctoring (explicit consent for biometric data; our legitimate interest in a trustworthy assessment).
• To generate and issue your competency and psychometric profiles and passport (performance of a contract).
• To communicate with you about your account, assessments, and support requests (performance of a contract; legitimate interest).
• To keep the service secure and meet our legal and regulatory obligations (legitimate interest; legal obligation).

We do not sell your personal data. We do not use it for advertising. We do not carry out automated decision-making that produces legal or similarly significant effects on you without human involvement.

Who we share it with

We share personal data only where necessary to run the service, and only with parties bound to protect it:

• Your sponsor, where your assessment is sponsored by an employer or organisation, so they can see the status and outcome of the assessment they have arranged.
• Service providers who operate the platform on our behalf (processors): our hosting provider (DigitalOcean), our payment provider (Stripe), our proctoring provider (ProctorExam), and our email provider. Each is contractually required to protect your data and to process it only on our instructions.

We may disclose data where we are legally required to, or to establish, exercise, or defend legal claims.

Where a provider processes data outside the UK/EEA, we ensure appropriate safeguards are in place (such as UK-approved transfer mechanisms).

How long we keep it

We keep your personal data for as long as your account is active, and for up to 10 years after your last activity with us, to support the competency-passport record and to meet legal and contractual requirements. After that, we securely delete or anonymise it.

We may keep anonymised data, from which you cannot be identified, for research and statistical purposes.

How we protect it

We hold personal data on secured infrastructure, accessible only to a limited number of people who need it and who are required to keep it confidential. Access is per person and controlled. Data is encrypted in transit, sensitive data is encrypted at rest, and payment card details are handled by our payment provider and are not stored on our systems. We keep our systems patched, back up data, and review our security arrangements as technology changes.

Your rights

Under the UK GDPR you have the right to:

• be informed about how your data is used (this policy);
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to processing in certain circumstances;
• data portability; and
• withdraw consent where we rely on it (for example, for biometric data).

To exercise any of these, contact contact@competas.com. We will ask you to verify your identity, and we will respond within one month (or, for complex requests, we will tell you if we need up to a further two months). We do not charge for these requests unless they are manifestly unfounded or excessive.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at https://ico.org.uk/concerns/.

Cookies

We use a single, strictly necessary cookie to keep you signed in during your session. It is essential to operate the service and does not track you. We do not use analytics, advertising, or tracking cookies, so no cookie consent banner is required. You can control cookies through your browser settings, though disabling the session cookie will prevent you from signing in.

Other websites

Where our sites link to other websites, those sites have their own privacy policies and we are not responsible for them. Please review their policies before sharing information with them.

Changes to this policy

We may update this policy from time to time. Where changes are material, we will make that clear here. Please check back for the current version.

Contact

For any question about this policy or your personal data, contact us at contact@competas.com.