Version 4.0; Last update: July 20, 2026

About This Privacy Statement

PECB respects the privacy rights of every visitor to its websites. We collect, use, store, and otherwise process information obtained through our websites only as described in this Privacy Statement.

This Privacy Statement explains PECB’s practices regarding the Personal Data it collects and processes. By accepting this Privacy Statement, you acknowledge that you have read and understood it and agree to the processing of your Personal Data as described herein.

In this Privacy Statement:

• “PECB Group Pte. Ltd,” “we,” “us,” and “our” refer to the owner and operator of the websites, whose office is located at Singapore Land Tower, 50 Raffles Place, #46-01, Singapore 048623.
• “You” and “your” refer to any user or visitor of our websites.
• “Privacy Statement” or “Statement” refers to this document.
• “PECB websites” or “websites” refers to pecb.com, MyPECB.com, PECB Insights, PECB Conference, PECB Help, PECB Connect, PECB Skills, PECB Regional Webinars, and any other domains owned or maintained by PECB.

PECB acts as the data controller of the Personal Data you provide in connection with applications, registrations, certifications, examinations, and other activities described in this Privacy Statement. As the data controller, PECB determines the purposes and means of processing your Personal Data, including how it is collected, used, stored, disclosed, and otherwise handled.

We collect the categories of Personal Data described in the “What Personal Data We Collect” section below. These may include account registration details such as your full name, email address, telephone number, country of residence, and other relevant information.

We process your Personal Data for the purposes described in the “Legal Bases and Purposes for Processing Your Personal Data” section below. These purposes include providing and managing certification, training, and examination services; creating and maintaining your account; providing customer support; improving our services; and protecting the security of our websites and systems.

Purpose of This Privacy Statement  

The purpose of this Privacy Statement is to describe how PECB collects, uses, stores, discloses, and otherwise processes your Personal Data, in connection with our websites and platforms, as well as our products and services.

Please read this Privacy Statement carefully to understand how we handle your Personal Data. If you do not understand any part of our Privacy Statement, please contact us at dpo@pecb.com. Your use of our websites is also subject to our Terms and Conditions.

When This Privacy Statement Applies

To access certain features—such as creating an account, registering for training, taking examinations, or acting as a PECB client, partner, trainer, auditor, invigilator, or distributor—you may be required to provide Personal Data, or we may collect it directly from you.

You are responsible for ensuring that the Personal Data you provide is accurate and up to date. Inaccurate information may affect your ability to use our services or our ability to contact you.

What Personal Data We Collect

We may collect and process your Personal Data:

• Directly from you;
• From the device(s) you use to access our websites, and
• From third parties, such as authorized partners or screening providers.

Personal Data We Collect Directly from You^[1]

Depending on how you interact with PECB and which services you use, we may collect the following categories of Personal Data directly from you:

• Account Registration Data (Identity and Contact Data): Your full name, company name, email address, phone number, year of birth, city, state/province, and country.
• Professional and Certification Data: Your CV, work experience, education, training records, references, and certification application details.
• Examination Data: Government-issued or other identification documents, emergency contact details (for online exams), webcam footage, screen activity, and periodic screenshots, exam answers and score, exam feedback.
• Trainer, Examiner and Invigilator Data: Additional information required for trainer, examiner or invigilator applications, including video recordings for trainer applicants.
• Communications and Support Data: Information you provide when contacting us or using chat or customer support features (name, email, country/region, phone number)
• Financial Data: We store invoices and payment-related information concerning services purchased and Annual Maintenance Fees (AMFs). PECB does not store credit or debit card details.
• Other data: Marketing preferences, job applications, requests for special accommodations, including health or medical information where necessary, feedback, complaints and appeals.

Detailed processing activities are listed in the PECB Data Processing Activities Register.

Personal Data We Collect from Your Devices

When you visit our websites, we may collect technical information, such as IP address, browser type, device information and usage patterns through cookies and similar technologies.

For more information, please refer to our separate Cookie Policy.

Personal Data We Receive from Third Parties

We may receive Personal Data from our authorized partners, background-screening providers’, sanctions-screening providers, references, and other service providers.

Personal Data Collected Directly by Third Parties

Certain third parties may collect data directly from you, including:

• Payment processors, which collect and process payment information;
• Background-screening providers, which collect information in connection with auditor applications.
• Authorized PECB partners which collect and process information for purposes such as course and exam administration.

These third parties process data according to their own privacy policies.

Why and How We Process Your Personal Data

Depending on the specific processing activity, we process your Personal Data on one or more of the following lawful bases:

• The performance of a contract with you or pre-contractual steps at your request before entering into a contract;
• Your consent;
• Compliance with a legal obligation; and
• Our legitimate interests or those of a third party, provided that such interests are not overridden by your rights and interests.

The main purposes for which we process your Personal Data include:

• Providing and managing our certification, training, and examination services;
• Creating and maintaining your account;
• Protecting the integrity and security of examinations;
• Complying with applicable legal and regulatory obligations, including international economic sanctions requirements;
• Providing customer support;
• Sending marketing communications based on your consent or our legitimate interests;
• Improving our products and services,  and
• Maintaining the security of our websites, platforms, and systems

A more detailed overview of our processing activities, including the relevant categories of Personal Data, purposes, and lawful bases, is available in the PECB Data Processing Activities Register.

How We Share Personal Data

We may share your Personal Data where necessary, with:

• Authorized PECB partners and trainers for purposes such as course administration and the management of examination results;

Third-party service providers listed in the PECB Third-Party Data Processors Register.

• Background-screening and sanctions-screening providers; and
• Regulatory, law-enforcement, judicial, or government authorities where required or permitted by law.

We do not sell your Personal Data to third parties.

Personal Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, comply with applicable legal and regulatory requirements, resolve disputes, and enforce our agreements.

Further information about applicable retention periods is provided in the PECB Data Processing Activities Register and the PECB Third-Party Data Processors Register.

How We Protect Your Personal Data

We implement appropriate technical and organizational measures, including encryption where appropriate, to protect the confidentiality, integrity, and security of your Personal Data.

However, no method of transmission over the internet or electronic storage is completely secure. Therefore, although we take reasonable steps to protect your Personal Data, we cannot guarantee its absolute security.

Rights Regarding Your Personal Data

PECB processes Personal Data in accordance with the EU General Data Protection Regulation (“GDPR”) and/or Singapore’s Personal Data Protection Act (“PDPA”), to the extent that each law applies.

Where the EU GDPR or PDPA applies to the processing of your Personal Data, you may have the right to:

• Access your Personal Data and receive information about its processing;
• Request the correction of inaccurate or incomplete Personal Data;
• Request the deletion of your Personal Data;
• Request the restriction of processing of your Personal Data, including processing for direct-marketing purposes;
• Receive certain Personal Data in a structured, commonly used, and machine-readable format and request its transfer to another organization, where applicable;
• Withdraw your consent to the collection, use, or disclosure of your Personal Data by providing reasonable notice;
• Not be subject to certain decisions based solely on automated processing, including profiling; and
• Lodge a complaint with the relevant data protection authority.

These rights are not absolute and may be subject to the conditions and limitations established by applicable law.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn and may be subject to applicable legal or contractual restrictions.

You may also lodge a complaint with the competent data protection supervisory authority where the GDPR applies or raise a concern with Singapore’s Personal Data Protection Commission where the PDPA applies.

Data Protection Policy

PECB maintains a Data Protection Policy that establishes the principles, responsibilities, and controls governing the lawful, fair, transparent, and secure processing of Personal Data. The policy applies to relevant employees, customers, contractors, systems, and service providers and is reviewed periodically to ensure compliance with this Privacy Statement and applicable data protection laws. For more information, please refer to our Data Protection Policy.

Privacy Questions and Complaints

Routine requests to correct or modify private data may be submitted to support@pecb.com or using a PECB’s Help Center desk by Submitting a Ticket.

If you have any questions, suggestions, or complaints regarding this Privacy Statement or how we handle your Personal Data, please contact our Data Protection Officer at dpo@pecb.com.

In accordance with Article 27 of the GDPR, PECB has appointed a representative in the European Union, located in Lisbon, Portugal. The representative may be contacted at gdpr.representative@pecb.com.

International Data Transfer

PECB is headquartered in Singapore and operates through branches in other countries. Our websites, platforms, and services are primarily hosted on cloud servers located in the United States.

To provide our products and services, your Personal Data may be transferred to, stored in, or processed in Singapore, the United States, and other countries where PECB operates, including countries outside the European Economic Area (“EEA”). These countries may have data protection laws that differ from, or provide a lower level of protection than, those in your country of residence.

PECB is committed to protecting Personal Data transferred internationally. Where required by applicable law, we implement appropriate safeguards, including contractual protections, Standard Contractual Clauses, applicable adequacy decisions—such as the EU–U.S. Data Privacy Framework, where applicable—and other legally recognized mechanisms.

Further information about international transfers and applicable safeguards is available in the PECB Third-Party Data Processors Register.

Website and External Links

The content of the PECB website is protected by intellectual property laws. Website materials may be viewed, downloaded, or copied solely for personal, non-commercial use and may not be modified, reproduced, distributed, published, or otherwise used without PECB’s prior written consent. For further information, please refer to our Terms and Conditions.

Our websites may contain links to third-party websites. PECB does not control and is not responsible for the content, privacy practices, security, or outcomes associated with those websites. We recommend reviewing the privacy policy of each third-party website you visit.

Marketing and Informational Communications

With your consent, PECB may use your contact details to send information about training courses, certifications, newsletters, webinars, events, promotions, and related services. You may withdraw your consent or unsubscribe at any time by using the link provided in our communications or by contacting us.

PECB may use contact details obtained through an existing client relationship to send targeted relevant communications, including communications with a promotional element, about PECB’s own services that are similar or closely related to that relationship and reasonably considered relevant or important. Such communications may be sent based on PECB’s legitimate interests or an applicable existing-customer exception, and recipients may object or unsubscribe at any time.

PECB may also send automated service-related communications necessary to manage your account, certifications, training, examinations, payments, or use of PECB services, including important legal, regulatory, security, policy, and service updates. Because these communications are necessary for providing or managing the relevant services, you generally cannot opt out of them while the applicable account, certification, registration, contract, or service remains active.

Where you register for or purchase PECB services through an independent PECB partner, that partner may process your Personal Data and send communications under its own privacy statement. You are responsible for reviewing the partner’s privacy practices and managing your marketing consent directly with the partner. PECB is not responsible for a partner’s independent marketing activities, except where PECB is legally responsible for the relevant processing.

PECB Policy Regarding Economic Sanctions

To be compliant with International Economic Sanctions, PECB cannot directly or indirectly conduct financial transactions, nor get involved in providing services to individuals and entities restricted by International Economic Sanctions.

When you create a PECB account and consent to the processing of the above-mentioned data, PECB’s systems will automatically screen and monitor your information against applicable sanctions lists. Every potential match is reviewed by an authorized person before an account or service is rejected, suspended or otherwise adversely affected.

Learn more about Countries that International Economic Sanctions impact by clicking here.

Children’s Privacy

Our websites and services are not directed to children (under age of 16). We do not knowingly collect or process Personal Data from children. We will take appropriate steps to delete any Personal Data of children that has been processed through this website without verified parental consent upon learning of the existence of such Personal Data.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time to reflect changes to our practices, services, or legal obligations. The current version, together with its “Last updated” date, will be available on our website.

Unless required by applicable law, we may not notify you individually, including by email, of changes to this Privacy Statement. Where appropriate or legally required, we may provide additional notice through our websites, by email, or through other suitable means.

[1] Note: Not all categories listed above are collected from every user. PECB collects only the Personal Data necessary for the relevant services and processing purposes.