Privacy Policy

1. Who we are and the scope of this policy

ICPAS is the professional accountancy organisation of Somaliland. This policy applies to members, students, candidates, applicants, practising certificate holders, staff, contractors, committee members, partners, event participants, website users and other people who interact with ICPAS.

It covers personal data collected through applications, examinations, membership and licensing, CPD and events, the ICPAS website and portals, helpdesk requests, correspondence and professional or regulatory activities.

2. Personal data we collect

Depending on your relationship with ICPAS, we may collect:

• identity and contact details, including names, identification information, addresses, email addresses, telephone numbers and photographs;
• academic qualifications, employment history, professional experience and references;
• applications, registration and membership details, examination entries and results, practical-experience records, CPD information and certification history;
• practising-certificate, firm, quality-assurance, complaint, disciplinary or professional-conduct information where relevant;
• payment, invoice and transaction records;
• correspondence, helpdesk requests, feedback and other communications; and
• technical information generated when you use our website or online services, such as device, browser, log and cookie information.

We normally collect data directly from you. We may also receive relevant information from employers, educational institutions, referees, examination or qualification partners, service providers, public authorities or other authorised sources.

3. How we use personal data

ICPAS uses personal data where necessary to:

• assess applications and administer qualifications, examinations, exemptions, results and certificates;
• manage student registration, membership, practising certificates, firm records and renewals;
• deliver CPD, training, events, publications, support and other professional services;
• maintain accurate professional, educational, financial and regulatory records;
• verify qualifications, registration, membership and professional standing;
• manage complaints, professional conduct, investigations, quality assurance and disciplinary processes;
• communicate service information, deadlines, regulatory notices and relevant opportunities;
• protect the security and integrity of ICPAS services and prevent misuse or fraud;
• improve our services, operations and stakeholder experience; and
• meet legal, audit, governance and public-interest responsibilities.

4. Basis for processing

Depending on the activity, ICPAS processes personal data:

• to carry out its statutory, professional and public-interest mandate;
• to provide a service or fulfil an agreement with you;
• to meet applicable legal, regulatory, audit or governance requirements;
• for legitimate professional and administrative purposes that do not unfairly override individual interests; or
• with consent where consent is appropriate or required.

5. Data sharing and disclosure

ICPAS does not sell or rent personal data. We may share relevant data only where necessary and appropriate with:

• examination bodies, qualification partners, educational institutions, training and event providers;
• technology, hosting, communications, payment, printing and other service providers supporting ICPAS operations;
• auditors, professional advisers, regulators, courts, law-enforcement bodies or public authorities where authorised or required;
• employers, institutions, clients or members of the public seeking authorised verification of professional standing; and
• parties involved in an investigation, complaint or disciplinary process where disclosure is necessary for a fair and proper process.

ICPAS limits disclosure to information relevant to the purpose. Some partners or service providers may process data outside Somaliland. Where this occurs, ICPAS takes reasonable steps to ensure that the information remains appropriately protected.

6. Public registers and professional verification

As a professional body, ICPAS may publish or confirm limited information needed to protect the public and verify professional standing. This may include a person's name, registration or membership number, qualification or membership status, practising-certificate or firm status, and any regulatory outcome that ICPAS is authorised or required to make public.

Information that is not required for professional verification—such as private contact details, identity documents, examination scripts or payment information—is not included in the public register.

7. Data security and retention

Security

ICPAS uses reasonable organisational, physical and technical safeguards appropriate to the information it holds. These include controlled access, confidentiality requirements and secure handling of physical and electronic records. Access is limited to authorised persons who need the information for their work.

Retention

We retain personal data only for as long as needed for the purpose for which it was collected and to meet professional, regulatory, audit, legal or governance requirements. Some qualification, membership, practising, verification and disciplinary records may need to be retained for longer periods because they form part of ICPAS's permanent or historical professional records.

8. Your choices and rights

Subject to applicable requirements, you may ask ICPAS to:

• confirm whether we hold personal data about you and provide access to it;
• correct information that is inaccurate or incomplete;
• explain how your information is being used or shared;
• consider a request to restrict, object to or delete particular information where appropriate; or
• withdraw consent for future processing where the processing depends on consent.

ICPAS may need to verify your identity before responding. Some requests may be limited where ICPAS must retain or use information to meet examination, certification, membership, regulatory, legal or public-interest responsibilities.

Communications

You may opt out of optional promotional communications using the method provided in the message or by contacting ICPAS. We may still send essential service, examination, membership, regulatory or security communications.

9. Website data, cookies and external links

The ICPAS website may use cookies and similar technologies needed for website operation, security, user preferences and service improvement. Where a cookie preference tool is available, you can use it to manage non-essential cookies.

Our website may link to services operated by other organisations. Their handling of personal data is governed by their own privacy information, and ICPAS is not responsible for the privacy practices of external websites.

10. Changes to this policy

ICPAS may update this policy to reflect changes in its services, technology, professional requirements or applicable law. The current version will be published on this page with its effective date.