Privacy Policy

This Privacy Policy governs the manner in which the School collects, uses, maintains and discloses information collected from users (each, a “Student”) of the School. This Privacy Policy applies to the School and all Courses offered by the School.

Personal identification information

We may collect personal identification information from Students in a variety of ways, including, but not limited to, when Students enroll in the School or a Course within the School, subscribe to a newsletter, and in connection with other activities, services, features, or resources we make available in our School. Students may visit the School anonymously. We will collect personal identification information from Students only if they voluntarily submit such information to us. Students can refuse to supply personal identification information but doing so may prevent them from engaging in certain School related activities.

How we use collected information

The School may collect and use Students’ personal identification information for the following purposes:

  • To improve customer service
    Information you provide helps us respond to your customer service requests and support needs more efficiently.
  • To personalize user experience
    We may use information in the aggregate to understand how our Students as a group use the services and resources provided in our School.
  • To send periodic emails
    We may use Student email addresses to send Students information and updates pertaining to their order. Student email addresses may also be used to respond to Student inquiries, questions, or other requests.

Sharing your personal information

We do not sell, trade, or rent Student personal identification information to others.

Third party websites

Student may find advertising or other content in our School that link to the websites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these websites and are not responsible for the practices employed by websites linked to or from our School. In addition, these websites or services, including their content and links, may be constantly changing. These websites and services may have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our Student, is subject to that website's own terms and policies.

Changes to this Privacy Policy

The School has the discretion to update this Privacy Policy at any time. We encourage Students to frequently check this page for any changes. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications.

Your acceptance of these terms

By enrolling in the School, you signify your acceptance of this Privacy Policy. If you do not agree to this Privacy Policy, please do not enroll in the School. Your continued enrollment in the School following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes.


Confidentiality and Disclosure of Candidate Information

GRC Mastery is committed to safeguarding the confidentiality of all information provided by Students (Candidates), including but not limited to course participation records, assessment submissions, and TPECS examination results.

All Student data is treated as confidential and handled in accordance with this Privacy Policy and Exemplar Global’s TPECS Certification Requirements.
Student results and personal information will not be disclosed to any third party—including employers, recruitment agencies, or other organisations—without the express written consent of the Student concerned, except where disclosure is required by law or Exemplar Global for auditing or certification purposes.

From time to time, GRC Mastery may receive external requests (for example, from an employer) to confirm whether a particular person has completed a course or achieved certification.
In such cases:

  1. GRC Mastery will not confirm or deny any Student’s enrolment or completion status without written authorisation from the individual concerned.
  2. Where authorisation is granted, only the minimum information necessary to verify completion will be shared (e.g., course name, date of completion, certificate reference number).
  3. All such requests and approvals are logged and retained securely for compliance purposes.

GRC Mastery’s staff and contractors are required to maintain strict confidentiality regarding all Candidate information and assessment results, and must adhere to these principles as a condition of their engagement.