Legal
Privacy policy
What we collect when you sit the examination, why we hold it, how long we keep it, and what we deliberately do not collect.
What we collect
| Data | Why | How long |
|---|---|---|
| Name, email, telephone, country | To identify you and issue your result | Retained while the result remains verifiable |
| Your answers to each question | To mark the examination | Retained with the attempt |
| Your Speaking recordings | So an examiner can mark them | Deleted once the result is final |
| Band scores and outcome | To issue and verify your certificate | Retained while the result remains verifiable |
| IP address and browser | Security and malpractice investigation | Retained with the attempt |
| Invigilation events (text only) | To evidence examination integrity | Retained with the attempt |
What we do not collect
We do not record, transmit or store video of you. During the examination your camera is analysed in your own browser to check that a face is present and that you are working alone. That analysis produces short text notes — for example "left fullscreen" or "no face detected" — and those notes are all that reaches us.
No image of you leaves your device. We do not perform facial recognition, we do not identify you from your camera, and we do not infer anything about you from your appearance or behaviour.
Your speaking recordings
The Speaking section is different: your spoken answers are recorded and uploaded, because a human examiner has to listen to them in order to mark them. They are stored where the public cannot reach them and are accessible only to examining staff.
Who we share it with
We do not sell candidate data and we do not share it for marketing. An organisation verifying your certificate receives only your bands and the test date — never your contact details, your answers or your recordings.
We disclose data where we are legally required to, and where it is necessary to investigate malpractice.
Your rights
- Ask for a copy of the personal data we hold about you
- Ask us to correct anything inaccurate — though a name cannot be changed on an issued result without evidence
- Ask us to delete your data, where we are not required to keep it to maintain the integrity of an issued result
- Object to processing, or ask us to restrict it
- Complain to your data protection authority
To exercise any of these, write to candidates@celp.org. We respond within one month.
Security
The site is served over HTTPS. Administrative access requires a password and is limited to examining staff. Speaking recordings sit outside the publicly reachable part of the server and are served only through an authenticated request.
The data controller's registered name, address and data protection registration must be added here before publication.
Last updated 23 August 2026