Privacy Policy

1. Scope and controller

This policy applies to public pages, public forms, newsletter requests, enrollment inquiries, standards comments, claim reports, and CHSPS website account/workspace interactions operated by Commission for Health, Safety & Professional Standards, Inc. (CHSPS). It does not replace an executed applicant agreement or a program-specific privacy notice where one applies.

2. Information you provide

Depending on the form or workflow, CHSPS may collect your name, email address, organization, role, selected topic, message, standards comments, claim-report details, application/workspace information and other information you choose to submit. Public forms transmit information directly to CHSPS same-origin API endpoints; they do not merely open an email client.

3. Technical and audit information

CHSPS may process ordinary server and security information needed to operate the site, prevent abuse and maintain auditable records. The current application uses audit records that may include a cryptographic hash derived from an IP address rather than storing the raw address in the audit entry. Hosting or network providers may separately maintain customary server logs under their own retention controls.

4. Browser storage

The website uses browser localStorage for functional preferences and workflows such as education-cart contents, selected self-assessment/workspace progress and dismissal of certain interface notices. This storage remains in the visitor's browser until cleared or replaced and is not an advertising tracker.

5. How information is used

CHSPS uses submitted information to respond to inquiries, administer accreditation and education workflows, manage public comment and standards-development records, investigate reported claims, provide requested communications, maintain security and auditability, and improve website operations. CHSPS does not sell personal information for advertising.

6. Service providers and external resources

CHSPS may use hosting, email-delivery, security and infrastructure providers that process information only as needed to provide their services. Public web typography uses the Public Sans and Source Serif 4 font families delivered through Google Fonts. When those font resources are requested, the visitor's browser connects to Google-hosted font services and may transmit ordinary network request information such as the visitor's IP address and browser information. Links to third-party sites are governed by those sites' privacy practices.

7. Public comment and publication

Standards comments may be retained as controlled standards-development records. Where the applicable procedure calls for a public disposition, CHSPS may publish the substance of a comment and its disposition while applying the publication and confidentiality rules stated in the public-comment procedure.

8. Retention

CHSPS retains records for the period reasonably required by the applicable controlled-record schedule, legal or contractual requirements, security needs and the purpose for which the information was collected. Different records have different retention periods; CHSPS-ACC-104 governs accreditation records within its scope.

9. Security

CHSPS uses administrative and technical safeguards appropriate to the website and applicant workflow, including access controls, password hashing, CSRF protection, rate limiting, file-type validation and audit logging. No internet service can guarantee absolute security. Do not send payment-card data, protected health information, secure examination content or other unnecessary sensitive information through ordinary public forms.

10. Privacy choices and rights

You may request access to, correction of, or deletion of personal information that CHSPS maintains about you, subject to identity verification and records that CHSPS must retain for legal, security, accreditation or standards-development purposes. Additional rights may apply depending on your jurisdiction, including rights concerning access, correction, deletion, restriction, objection, portability, or certain disclosures. CHSPS will evaluate requests under the law that applies to the requester and the processing activity.

11. International and U.S. state visitors

The website may be used by visitors outside Georgia and outside the United States. CHSPS does not assume that every privacy law applies to every interaction; where an applicable law creates additional notice or individual-rights obligations, CHSPS will address those obligations for the relevant processing. CHSPS does not use this policy to waive mandatory rights.

Where the California Consumer Privacy Act, as amended, applies to a CHSPS processing activity, a California resident may have rights to know or access covered personal information, request correction or deletion, and exercise other rights provided by that law. CHSPS does not sell personal information and this website does not share personal information for cross-context behavioral advertising. CHSPS will not discriminate against a person for exercising an applicable privacy right.

California privacy rights where applicable

Where the GDPR, UK GDPR or a comparable European privacy law applies to a CHSPS processing activity, an individual may have rights that include access, rectification, erasure, restriction, portability, objection and the right to complain to the applicable supervisory authority. The availability and scope of each right depend on the lawful basis, the processing activity and applicable exemptions.

European privacy rights where applicable

12. Children

The public website and accreditation services are directed to organizations and adults acting in professional capacities. CHSPS does not knowingly design public forms to solicit personal information from children.

13. Changes

Material changes to this policy are dated and published on this page. Changes do not retroactively alter contractual confidentiality duties governing previously submitted accreditation evidence.

14. Contact and privacy requests

Privacy questions or requests may be submitted through Contact CredHub. CHSPS will verify the request as appropriate before releasing or changing personal information.