Trust Centre
How we look after your data
School boards need to check how a provider handles personal information, and teachers should know exactly what their school can see. This page answers the questions schools ask about the Professional Boundaries course.
What we collect, and why
We collect only the information the course needs to run.
Your name and school email address
To create your account and to issue your certificate in your correct name.
Your course progress
Which sections you have completed, so you can pick up where you left off and your school can see completion.
Your assessment results
Scores and pass results, because your certificate depends on them.
Your certificate details
The unique reference and issue date, so the certificate can be independently verified.
What we do not collect
- Nothing about your students is entered into the platform.
- We do not track your browsing outside the course.
- We do not sell personal information or use it for advertising.
What your principal can and cannot see
When a school enrols its staff, the principal can see enough to oversee completion. The course asks teachers to think honestly about their own practice, so the detail of what each teacher writes and answers stays private to them.
Your principal can see
- Whether you have been invited, have started, or have completed the course
- Your progress through the course, module by module
- Your latest assessment score and whether you passed
- Your certificate and its verification reference
- Completion figures for the school as a whole
Your principal cannot see
- Your answers to individual assessment questions. No screen shows them, and the database itself blocks access to them.
- What you type or choose in a lesson as you work through it. Reflection prompts are for your own thinking and are not reported to your school.
- Anything at all, if you enrolled yourself rather than through your school.
Where your data is held
We use a small number of specialist providers to run the platform, and we list them here so your board does not have to ask. Hosting-region details for each provider are available on request.
Supabase
Database and sign-in. Holds your account, progress and results.
Vercel
Web hosting. The application runs in Vercel’s Singapore region.
Resend
Transactional email: invitations, reminders and certificate notifications.
Retention and deletion
We keep enrolment and completion records for seven years after completion, then archive them. You can ask for a copy of the personal information we hold about you, ask for it to be corrected, or ask for it to be deleted, at any time. Contact our Privacy Officer, Bindy Tatham, at bindy@professionalinsight.co.nz.
If something goes wrong
We handle any suspected privacy breach under the Privacy Act 2020. We contain it and assess the harm, and where a breach is notifiable we report it to the Office of the Privacy Commissioner through its NotifyUs tool and tell the affected people and schools directly.
How the platform is protected
Strong passwords
Passwords must be at least 12 characters, and are checked against passwords exposed in known data breaches. We plan to offer two-step sign-in with an authenticator app as well.
Role-based access
Teachers, school leaders, auditors and administrators each see only what their role needs. A principal’s access is limited to their own school.
Row-level security
Access rules are enforced inside the database itself, on every table, as well as in the application.
Append-only audit log
Security-relevant events are recorded in an audit log that the database itself prevents from being edited or deleted.
Encryption in transit
All traffic between your browser and the platform is encrypted over HTTPS.
AI and your data
No AI system processes learner data on this platform, and there is no chatbot in the course. Your progress, your assessment answers and your reflections are never given to an AI model.
Every module, scenario and assessment question is written and reviewed by our investigators, who carry out professional conduct investigations for New Zealand regulators.
We have chosen to keep it that way. Teachers work through sensitive professional matters in this course, and we think that calls for human judgement and for a platform that keeps what each teacher writes private.
A copy for your board
A PDF copy of this page for board records is available on request.
Questions about privacy or security
If something is not covered here, get in touch and we will answer it directly.