Privacy Policy
Last updated: 20 May 2026
1. Information We Collect
We collect information you provide when registering and using OPAL SIP. This includes account and profile details (name, civil ID or passport number, nationality, date of birth, gender, email address, phone number, and postal address); organisation details (legal name, commercial registration number, membership number, and focal point); and service records (training enrolments, assessment results, certificates and licences, inspection and compliance records, vehicle and IVMS records, and payment and invoice records). We also collect technical data such as IP address, browser and device information, and usage logs.
2. How We Use Your Data
We use your information to: (a) deliver and administer OPAL services; (b) verify identity, eligibility, and compliance; (c) issue, validate, and renew certificates, licences, and inspection records; (d) process payments and issue invoices; (e) send service notices, reminders, and support communications; (f) produce aggregated sector reporting and analytics; and (g) meet legal, regulatory, and audit obligations.
4. Data Retention
We retain personal data for as long as necessary for the purposes described in this policy and for the period required by applicable regulation. Certification, inspection, and compliance records may be retained for longer periods so that their validity can be verified after issuance.
5. Data Security
We apply reasonable technical and organisational measures to protect your data, including encryption of data in transit, access controls, and role-based permissions that limit access to authorised personnel. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Your Rights
Subject to applicable law, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate data; (c) request deletion, where we are not required to retain the record; (d) object to or restrict certain processing; (e) withdraw consent where processing is based on consent; and (f) lodge a complaint with the competent authority. To exercise these rights, contact us at sip@opaloman.org.
7. Public Verification
OPAL SIP provides a public verification portal so that third parties can confirm the validity of a certificate, licence, or compliance record. Only the minimum details needed to confirm validity are displayed through this portal. Full personal records are never made public.
9. Third-Party Services
The Platform integrates with third-party services including payment processors, hosting providers, email and notification services, and embedded maps. These providers process data under their own privacy policies, and we recommend reviewing them.
10. Children's Privacy
OPAL SIP is intended for users aged 18 and over. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it.
11. Changes to Policy
We may update this policy from time to time. Material changes will be notified through the Platform or by email to the address registered on your account. The "last updated" date above indicates when this policy was last revised.
12. Contact
For privacy-related inquiries, contact the OPAL team at sip@opaloman.org.