Privacy policy - CPD approval and RCPCH endorsement applications

Protecting the privacy and personal data of people who apply for the RCPCH endorsement and CPD (continuing professional development) approval service is highly important to us. The following explains how the RCPCH uses any information you give to us and the way we protect your privacy. This statement only covers the use of data provided when applying for the CPD Approval and RCPCH Endorsement services.

Who we are

We are the Royal College of Paediatrics and Child Health (RCPCH), 5-11 Theobalds Road, London, WC1X 8SH (telephone: +44 (0)20 7092 6000).

The contact details for the Data Protection Officer are the same as above or via email to information.governance@rcpch.ac.uk.

What information do we collect from you?

We collect this information in order to assess your application and contact you about your application. This includes your name, contact details, job title and workplace. 

Under GDPR, we are required to have a legal basis for processing your personal data. Our legal basis is: 

"Contractual Obligation"  Where we need to process your personal data to provide you with CPD approval or College endorsement.

What do we do with your information?

Applications are held securely and are only accessed by the Education and Professional Development team, although may be shared with College stakeholders as part of the application process: 

  • Face to Face CPD applications are shared with regional leads
  • Endorsement applications (Face to Face and online learning) are shared with CSACs or, in some cases, a more appropriate reviewer 
  • Online learning applications are shared with College Officers related to EPD or regional leads. 

With your consent, programme and organiser details are published on the RCPCH website and other relevant webpages for the purposes of marketing the programme. 

Successful applications are held for two years after the end of endorsement in line with our retention schedules and securely destroyed. Unsuccessful applications are not retained.

Your information will never be transferred outside of the EEA.

Understanding GDPR and your data rights 

To help you understand more about this information, please see our page Understanding GDPR and your data rights. This explains common words and phrases used in our privacy notices, describes our use of artificial intelligence (AI) and details the rights you have in relation to the processing of your personal data under UK General Data Protection Regulation (UK GDPR) and how to make a request.

How to make a complaint

If you are unhappy with how we are using your personal data or how we have dealt with a rights request, you should contact us in the first instance so that we can understand and try to resolve your concern. If you would like to make a complaint, please follow our data protection complaints process. If you remain dissatisfied, you can complain to the Information Commission. 

Changes to this privacy notice

We keep our privacy notice under review, and we will place any updates on this web page.

Last updated on 18 May 2026