Provisional version. This policy is being finalised with legal counsel for Hong Kong, Korea and mainland China. It describes what the Site actually collects today. A Korean-language version will follow.
Effective 29 September 2026
IJCA Limited ("IJCA", "we") is responsible for the personal data described here.
| Where | Data | Why |
|---|---|---|
| Account | Name, email address, password (stored only as a one-way hash) | To let you sign in and use "My certificates" |
| Sign-in records | IP address, time of last sign-in, failed sign-in attempts | Security — to detect and block abuse |
| Certificates (entered by an accredited test center, approved by IJCA) | Holder's name (Latin and local script), date of birth, gender, nationality, photo (optional), level and tier, test results (skills, routine, speed), test date, test center, certificate number and status | To issue, verify and administer certificates |
| Certificate lookups | IP address, as short-term counters | To limit automated or bulk lookups |
| Center enquiries | Your name, phone number and/or email address, your child's age, the level you are interested in and your message, sent from a center page without an account | To pass your enquiry to the center you chose so it can contact you |
| Center applications | Center name, address and contact details, the grade applied for, the lead coach's certificate number and name (or the teacher in charge), facility photos, a video link or preferred video call times, and business registration or school documents | To review your application to become an IJCA center and, if approved, to set up the center and its manager account |
| Your browser | A sign-in token and your language preference, kept in your browser's local storage | To keep you signed in and show the right language. We do not use advertising cookies. |
We do not sell personal data.
Anyone who has a certificate's number and the holder's full name, or its QR code, can see the holder's name (and local-script name), level and tier, issue date, test center, and whether the certificate is valid or revoked. The holder's photo is shown only on the QR-code page, not on number-and-name lookups. Date of birth, gender, contact details and test results are never shown publicly.
Coaches on center pages. A center can ask to list you as a coach. Only if you accept in your account is your name, level and a link to verify your certificate shown on that center's page. You can withdraw at any time, and the listing also disappears if the certificate is revoked or unlinked from your account.
Most certificate holders are children. Certificate data for children is entered by the accredited test center with the consent of a parent or guardian, which the center is responsible for obtaining. A parent or guardian may exercise the rights in section 6 on the child's behalf.
Data is stored on servers in Seoul, South Korea, with encrypted backups kept in South Korea.
You may ask to access, correct or delete your personal data, or to withdraw consent, by writing to [email protected]. Some certificate data may need to be kept so the certificate can still be verified or to meet legal obligations; we will tell you if so. We respond within 30 days.
Passwords are hashed, the Site is served over HTTPS only, administrative access is restricted by role, and lookups are rate-limited.
We will post changes on this page. IJCA Limited · Hong Kong SAR · [email protected]