GDPR
Your data, and what you can make us do with it.
This page sets out your rights under the UK GDPR and the EU GDPR, and how to use them. The privacy notice covers what we collect in the first place.
Last updated 5 August 2026
Controller
Verity AI Ltd is the data controller for credentialpress.com and for the Credential Press imprint. Reach us through the contact page.
What we hold, and why
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your message and email address, if you contact us | To answer you and keep a record of the exchange | Legitimate interests | Two years, then deleted |
| First-reader email address, and the exam you are sitting if you gave it | To send the free review copy and tell you about the next title | Consent | Until you ask to come off |
| Server request logs held by our host | Security and keeping the site up | Legitimate interests | Per the host's own retention |
| Aggregate page counts, cookieless | To see which pages help | Legitimate interests | Held in aggregate, not tied to a person |
| Google Analytics cookies and page views | To see which pages help, in more detail | Consent, asked before anything loads | Per Google Analytics retention, and only from the point you accept |
| Author application, if you send one | To assess it and reply | Legitimate interests | Two years, then deleted |
Your rights
- Access. Ask what we hold about you and get a copy.
- Rectification. Have anything wrong corrected.
- Erasure. Have it deleted. For the reader list this is immediate and unconditional.
- Restriction. Tell us to hold it but stop using it while something is in dispute.
- Portability. Get what you gave us in a machine-readable form.
- Objection. Object to processing we base on legitimate interests.
- Withdraw consent. Where consent is the basis, take it back at any time. For analytics that is the cookie choices link in the footer of every page, and it takes one click. It does not affect anything done before you did.
Making a request
Send it through the contact page and say what you want done. We answer within one month, which is the statutory limit. There is no charge. We may ask a question to confirm the request comes from you, which protects your data rather than delays it.
Automated decisions and profiling
There are none. We do not profile readers, score them, or make any automated decision about anyone.
Transfers outside the UK and EU
Our hosting provider operates a global network, so requests may be served from, and logs held in, servers outside the UK and the EU under that provider's own transfer safeguards. If you accept analytics, Google processes that data under its own transfer safeguards. Author applications are held by GitHub. We do not transfer reader data anywhere else.
Children
Credential Press publishes for adults preparing for professional exams. The site is not aimed at children and we do not knowingly collect data from them. If you think we have, tell us and it will be deleted.
Complaints
If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office at ico.org.uk, or to your own supervisory authority if you are in the EU.