Trust Centre
Straight answers about your data.
Boards have privacy due-diligence obligations, and teachers deserve to know exactly what their employer can see. This page answers the questions schools ask us, in plain language.
What we collect, and why
Only what the course needs to run.
Your name and school email address
To create your account and to issue your certificate in your correct name.
Your course progress
Which sections you have completed, so you can pick up where you left off and your school can see completion.
Your assessment results
Scores and pass results, because your certificate depends on them.
Your certificate details
The unique reference and issue date, so the certificate can be independently verified.
Video playback quality data
Technical measurements from our video provider (Mux) that tell us when video is buffering or failing, so we can fix it.
What we do not collect
- No student data. Nothing about your students is entered into the platform.
- No tracking of your browsing outside the course.
- We do not sell personal information, and we do not use it for advertising.
Visibility
What your principal can and cannot see.
When a school enrols its staff, the school leader gets enough visibility to oversee completion, and no more. The course is a place to think honestly about professional boundaries, so the working detail stays yours.
Your principal can see
- Whether you have been invited, have started, or have completed the course
- Your progress at module level: which modules you have finished
- Your latest assessment score and whether you passed
- Your certificate and its verification reference
- Completion figures for the school as a whole
Your principal cannot see
- Your answers to individual assessment questions. There is no screen that shows them, and access is blocked at the database level
- What you type or select inside a lesson as you work through it. Reflection prompts are for your own thinking and are not reported to your school
- Anything at all, if you enrolled privately rather than through your school
Where your data lives
Our providers, named up front.
We use a small number of specialist providers to run the platform, and we list them here so your board does not have to ask. Hosting-region details for each provider are available on request.
Supabase
Database and sign-in. Holds your account, progress and results.
Vercel
Web hosting. The application runs in Vercel’s Singapore region.
Mux
Video streaming and playback quality analytics.
Resend
Transactional email: invitations, reminders and certificate notifications.
Retention and deletion
We keep enrolment and completion records for seven years after completion, then archive them. You can ask for a copy of the personal information we hold about you, ask for it to be corrected, or ask for it to be deleted, at any time. Contact our Privacy Officer, Bindy Tatham, at bindy@professionalinsight.co.nz.
If something goes wrong
We handle any suspected privacy breach under the Privacy Act 2020: we contain it, assess the harm, and where a breach is notifiable we report it to the Office of the Privacy Commissioner through its NotifyUs tool and tell the affected people and schools directly. As investigators, we hold ourselves to the standard we hold others to.
Security
How the platform is protected.
Multi-factor authentication
Every account can be protected with an authenticator app, in addition to a password.
Signed, expiring video links
Course videos only play with a signed token issued to a logged-in learner, and each token expires after an hour. Playback is watermarked with the viewer’s name.
Role-based access
Teachers, school leaders, auditors and administrators each see only what their role needs. A principal’s access is limited to their own school.
Row-level security
Access rules are enforced inside the database itself, on every table, not just in the application code.
Append-only audit log
Security-relevant events are recorded in an audit log that the database itself prevents from being edited or deleted.
Encryption in transit
All traffic between your browser and the platform is encrypted over HTTPS.
AI and your data
No AI touches learner data. By design.
No AI system processes learner data on this platform. There is no chatbot in the course. Your progress, your assessment answers and your reflections are never fed to an AI model.
Every module, scenario and assessment question is written and reviewed by our investigators, the people who examine professional-conduct cases for New Zealand regulators.
This is a deliberate stance, not a gap. Teachers work through sensitive professional territory in this course, and we think that deserves human judgement, and a platform that keeps what you write to yourself.
Need this in writing for your board?
A PDF copy of this page for board records is available on request.
Trust Centre
A question we have not answered?
Ask us directly. You will get an answer from the people who run the platform, not a form letter.