Privacy Policy

ACOSTS — ASEAN Council for Offshore Safety and Training Standards — is committed to protecting personal data and maintaining the confidentiality, security, integrity and lawful use of information entrusted to us. This Privacy Policy explains how ACOSTS collects, uses, stores, discloses, transfers and protects personal data in connection with its website, digital platforms, learner records, certificate validation systems, centre approval processes, standards administration, audit activities, training and assessment quality assurance, stakeholder engagement, recruitment, supplier management, office visits and other related services.

Personal data means any information relating to an identified or identifiable living individual. This may include name, contact details, identity details, learner records, certificate details, employment information, training records, assessment results, online identifiers, images, documents, correspondence and any other information that can directly or indirectly identify a person. Certain categories of personal data may require additional protection, such as medical information, biometric information, criminal background information, passport or government identity documents, religious or ethnic information, health and safety records, disciplinary records or other sensitive information. ACOSTS processes such information only where necessary and lawful.

In this Privacy Policy, "ACOSTS", "we", "us" or "our" refers to ASEAN Council for Offshore Safety and Training Standards, including its authorised operating entities, regional offices, representatives, digital platforms and administrative functions.

This Privacy Policy applies to personal data relating to:

• –Learners, trainees, delegates and certificate holders.
• –Approved centres and applicant centres.
• –Instructors, assessors, invigilators, auditors and technical experts.
• –Employers, operators, contractors and industry stakeholders.
• –Business contacts and professional contacts.
• –Individuals using ACOSTS applications, portals or certificate verification tools.
• –Individuals who contact us with questions, complaints, appeals, feedback or reports.
• –Recruitment applicants, consultants and prospective staff.
• –Suppliers, vendors, subcontractors and service providers.
• –Visitors to ACOSTS or regional offices.
• –Visitors to the ACOSTS website.

ACOSTS processes personal data only where it has a lawful basis to do so. Depending on the circumstances and applicable law, we may rely on one or more of the following:

Consent

Where an individual has given clear permission for a specific purpose.

Contractual necessity

Where processing is necessary to enter into or perform a contract.

Legal obligation

Where processing is necessary to comply with applicable law, regulation, reporting duties, audit obligations or statutory requirements.

Legitimate interests

Where processing is necessary for legitimate business, safety, certification, verification, quality assurance, fraud prevention, stakeholder management, website security or governance purposes.

Public interest

Where processing supports offshore safety, workforce competence assurance, emergency response training, safety-critical certification or the integrity of training standards.

Vital interests

Where processing is necessary to protect life, health or safety in an emergency.

The personal data collected by ACOSTS may include information across the following categories:

ACOSTS uses cookies and similar technologies to operate the website, improve user experience, understand website usage, secure systems and provide relevant functionality.

Strictly necessary

Required for website operation, forms, login areas, certificate validation and security.

Performance & analytics

Used to understand website traffic and improve performance.

Functionality

Used to remember user preferences.

Security

Used to detect spam, misuse, unauthorised access or cyber threats.

Third-party

Used where the website includes embedded tools, maps, videos, forms, analytics or external integrations.

Users can manage cookies through browser settings. Disabling cookies may affect website functionality. Further details are provided in the ACOSTS Cookie Policy.

ACOSTS takes the security of personal data seriously. We use reasonable technical, organisational, administrative and physical safeguards to protect personal data. Security measures may include:

• –Access controls and role-based permissions.
• –Password protection and authentication measures.
• –Secure hosting and system monitoring.
• –Data backup and recovery measures.
• –Confidentiality obligations for personnel and contractors.
• –Security reviews and risk assessments.
• –Restricted access to learner and certificate records.
• –Audit trails for certificate and centre approval systems.
• –Incident response and breach management procedures.

Depending on applicable law and the nature of processing, individuals may have certain rights in relation to their personal data:

• –Right of access.
• –Right to rectification.
• –Right to erasure.
• –Right to restrict processing.
• –Right to data portability.
• –Right to object.
• –Right to withdraw consent.
• –Right to avoid or challenge certain automated decision-making.
• –Right to raise a complaint or grievance.

To exercise any rights, please contact privacy@acosts.org or call +91-7087011176.

ACOSTS retains personal data only for as long as necessary for the purpose for which it was collected, including legal, regulatory, contractual, audit, certification, verification, safety and dispute-resolution purposes.

ACOSTS does not sell personal data to third parties. ACOSTS does not release personal data to third parties for the purpose of allowing them to market their products or services unless the individual has given specific consent or the sharing is otherwise lawful and clearly explained.

ACOSTS may update this Privacy Policy from time to time to reflect changes in law, technology, website functionality, services or data protection practices. The latest version will be published on the ACOSTS website with the updated date. Users are encouraged to review this Privacy Policy periodically.

For privacy questions, data rights requests, correction requests, complaints or general enquiries about this Privacy Policy, please contact: