Privacy policy
What CIFPO collects, why, who can see it, and how long it is kept. Effective September 20, 2026.
What CIFPO collects
- Application data: legal name, contact details, city and state, pathway and eligibility evidence, optional employer and other credentials, any accommodation request and its supporting documentation, and payment records.
- Examination data: scheduling records, proctoring session records including video and audio kept by the proctoring provider under its own agreement with CIFPO, responses and scores.
- Registry data: for holders, the legal name, credential identifier, status, issue and expiry dates, and any disciplinary outcome.
- Reports and correspondence: anything sent to CIFPO, including reports of misuse, which may be made anonymously.
- Website data: this site sets no tracking cookies and uses no advertising. Server logs record IP addresses and pages requested for security and are deleted after 90 days.
Why
To decide eligibility, administer and score the examination, issue and maintain the credential, run the public registry, enforce the code of ethics, and comply with law. CIFPO does not sell personal data and does not share it with DutyPath LLC or any preparation provider.
Who can see it
- The public: only the registry fields above, and only for holders.
- Service providers: the proctoring provider, the payment processor and the email provider, each under a written agreement limiting use to CIFPO's purposes.
- The standards panel: the minimum needed to decide an appeal or a disciplinary matter, with identifying details removed where the decision does not depend on them.
- Authorities: when required by law or legal process, and CIFPO tells the person unless prohibited.
How long
- Application and examination records: seven years after the last examination or the end of certification, whichever is later.
- Accommodation documentation: twelve months after the last examination it supported.
- Registry entries: permanently, so that a revoked or expired credential cannot be presented as current. Expired entries older than ten years are shown as "Expired" without dates.
- Reports of misuse: seven years.
Your choices
You may ask what CIFPO holds about you, ask for corrections, and ask for deletion of anything CIFPO is not required to keep. Registry entries for holders are not deleted on request, because the registry exists to be relied on; a holder may surrender the credential, after which the entry shows "Surrendered". Write to board@cifpo.org. CIFPO answers within thirty days.
Changes
Changes to this policy are announced in a bulletin before they take effect.