Legal

Privacy Policy

Effective Date: May 2026

CX Standard Institute is committed to protecting the privacy, integrity, and security of the information entrusted to us by organizations, certified professionals, applicants, auditors, evaluators, and website visitors. This Privacy Policy explains how information is collected, used, stored, disclosed, and protected in connection with cxstandard.org, certification processes, registry verification services, communications with the Institute, and professional and organizational certification activities.

By using this website or interacting with CX Standard Institute, you agree to the practices described in this policy.

1. Information We Collect

1.1 Personal Information

Including but not limited to: full name, professional title, organization name, email address, telephone number, country or region, certification status, certification identification numbers, and application and audit-related records.

1.2 Organizational Information

Including: business name, operational locations, certification level, audit status, public certification records, and evidence submitted during certification processes.

1.3 Technical Information

When accessing the website, we may collect: IP address, browser type, device information, operating system, access timestamps, cookies, and analytics data.

2. Purpose of Data Processing

Information may be used for: administering certification programs, conducting evaluations and audits, verifying certification validity, maintaining the official certification registry, responding to inquiries, improving the website and Institute operations, preventing fraud or unauthorized representation, maintaining the integrity of the CX Standard ecosystem, and complying with applicable legal obligations.

3. Public Registry and Verification

CX Standard Institute maintains a public verification system for certified organizations and professionals. Certified individuals and organizations may have selected information publicly displayed for validation purposes, including: name, certification designation, certification level, certification status, certification validity dates, and certification ID or registry reference. The purpose of the registry is to preserve transparency, prevent fraudulent claims, and allow independent verification of certification status.

4. Confidentiality of Audit and Evaluation Data

Audit findings, operational observations, evidence packages, internal reports, and certification assessments are treated as confidential unless disclosure is required by law, explicit written authorization is granted, or publication is required for certification integrity or enforcement purposes. CX Standard Institute does not publicly disclose detailed operational audit findings without authorization.

5. Data Retention

Information is retained only for the period necessary to maintain certification records, preserve audit traceability, comply with legal or regulatory obligations, support certification integrity processes, or resolve disputes or appeals. Historical certification status may be preserved for verification and integrity purposes even after expiration or revocation.

6. Cookies and Analytics

The website may use cookies and analytics technologies to improve performance, understand website usage, enhance security, and maintain session functionality. Users may disable cookies through their browser settings, although some website functionality may be affected.

7. Data Security

CX Standard Institute applies reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, misuse, alteration, or destruction. No system can guarantee absolute security. Users transmit information at their own risk.

8. Third-Party Services

The Institute may use third-party providers for hosting, analytics, communication tools, certification management systems, and payment processing. These providers may process information solely for authorized operational purposes.

9. International Operations

Because CX Standard Institute operates internationally, information may be processed across jurisdictions where certification activities, auditors, or operational systems are located. Users acknowledge that privacy protections may differ between jurisdictions.

10. Intellectual Property and Submitted Materials

Documents, frameworks, evidence packages, reports, submissions, and certification materials provided to the Institute remain subject to applicable confidentiality and intellectual property protections. Submission of materials for evaluation purposes does not transfer ownership rights to the Institute.

11. User Rights

Subject to applicable law, individuals may request access to their information, correction of inaccurate information, deletion where legally permissible, restriction of processing, or withdrawal of consent where applicable. Requests may be submitted through the official contact channels listed on cxstandard.org.

12. Changes to This Policy

CX Standard Institute may update this Privacy Policy periodically to reflect operational changes, regulatory requirements, certification system developments, or technological changes. Updated versions become effective upon publication on cxstandard.org.

13. Contact

For privacy-related inquiries, requests, or concerns, please contact the Institute through the official contact form available on the website at cxstandard.org/contact.