Home / Privacy Policy

Data protection

Privacy Policy

How ENLT Council collects, processes, protects and retains candidate and institutional data across the assessment lifecycle.

1. Scope

This Privacy Policy governs the processing of personal data by ENLT Council in connection with candidate registration, examination delivery, score reporting, certificate issuance and verification, and institutional recognition services.

2. Data we collect

  • Identity data: name, date of birth, nationality, and passport or national ID details required to establish candidate identity.
  • Contact data: email address, mobile number, country and city of residence.
  • Assessment data: test responses, scores, CEFR levels, examiner evaluations and certificate records.
  • Verification data: records of certificate verification requests submitted by institutions and third parties.

3. Purpose of processing

Personal data is processed to administer examinations, verify candidate identity, issue and verify certificates, maintain the integrity of the assessment framework, and provide institutional recognition and verification services.

4. Identity verification

To protect the integrity of ENLT certificates, identity documents and candidate photographs are processed under the ENLT Secure Assessment Framework and retained for the validity period of the associated certificate.

5. Certificate verification

Certificate verification requires an exact match of the certificate number, candidate last name and date of birth. Verification requests are logged with a timestamp and, where applicable, an institution verification reference number for audit purposes.

6. Data retention

Certificate and score records are retained for the certificate validity period and any additional period required by Council policy or applicable law. Candidates may request access, correction or erasure of their data subject to statutory and integrity obligations.

7. Data security

ENLT Council applies administrative, technical and organizational safeguards, including access controls, audit logging, and cryptographic security markers on issued certificates.

8. Contact

Data protection enquiries may be submitted through the official Contact Support channel at enlt.org/contact.