Privacy Policy

Last updated: October 28, 2026

1. Who Is Responsible for Your Information?

MR Audit Group determines the purposes and means of processing personal information for certain activities, including its own customer communications and service administration. When acting solely on the instructions of an examination provider or certifying institution, that organization may be the controller responsible for the relevant examination data.

2. Information We May Collect

Depending on the service used, the categories of information may include:

• Identity: name, photographs, and identity documents where verification is required.
• Contact: email address, telephone number, and affiliated institution.
• Examination records: Class ID, scheduled time, examination provider, session activity, and incident reports.
• Audio and video: webcam images, microphone audio, screen recordings, and proctoring recordings where enabled.
• Technical information: IP address, browser, operating system, device, connection, and security logs.
• Administrative information: service requests, billing records, and payment references.

Not all categories are collected for every service or candidate.

3. Why We Process Information

• To schedule, administer, and supervise examinations.
• To verify candidate identity where required.
• To support examination integrity and document potential rule violations.
• To provide technical support and respond to inquiries.
• To administer payments, cancellations, and refunds.
• To maintain security and audit records.
• To comply with applicable legal and contractual obligations.

Where consent or another particular legal basis is required, we will seek it or identify the applicable lawful basis before processing.

4. Online Proctoring and Recording

Candidates should be informed before the examination begins about the monitoring and recording features applicable to their session.

5. Identity Verification and Biometric Information

Some services may use identification documents, photographs, or facial comparison technologies for identity verification. Where sensitive biometric information is processed, the required notices, consent, and safeguards will be provided in accordance with applicable law, unless another valid legal exception applies.

Capturing a photograph does not necessarily mean that a biometric template is created or stored.

6. Data Retention

As a general retention period communicated for examination proctoring services, examination recordings are retained for three months. Different periods may apply where required by law, legitimate preservation needs, a dispute, or valid instructions from the responsible examination institution.

Other information is retained only as long as necessary for the stated purposes and applicable legal requirements, and then deleted, anonymized, or otherwise handled as required by law.

7. Information Sharing

Relevant examination information may be shared with authorized certifying institutions, examination providers, and customers when needed to administer examinations, verify results, or investigate incidents. Technology and support providers may process information under appropriate contractual and security obligations.

MR Audit Group does not sell personal information for commercial marketing purposes. Disclosures and transfers requiring consent will be handled in accordance with applicable law.

8. International Data Transfers

Our services may involve processing information in countries other than the candidate’s country of residence. Applicable legal, contractual, and organizational safeguards will be used where required.

9. Information Security

MR Audit Group will apply administrative, technical, and physical safeguards appropriate to the processing risks. Depending on the systems used, these may include access controls, authentication, permissions management, and incident response procedures. No internet-connected system can guarantee absolute security.

10. Your Privacy Rights

Depending on applicable law, individuals may request access to, correction or deletion of, or objection to the processing of their personal information. Other rights, including withdrawal of consent, may also apply.

Send requests to support@mrauditgroup.com with sufficient information to identify the requester and describe the request. Identity verification will be proportionate to the request. We will respond within applicable legal deadlines. Where an institution is the responsible controller, we may refer the request to that institution.

11. Cookies and Similar Technologies

Our website may use essential cookies and, where enabled, analytics or third-party technologies. Where consent is required for non-essential cookies, they will be used according to the visitor’s preferences. Browser settings or available website controls may be used to manage cookies.

12. Children and Minors

Where services involve minors, applicable safeguards and parental or guardian authorization requirements will be followed.

13. Third-Party Websites

Links to certifying institutions, examination providers, or other websites may lead to independent privacy practices. Please review their notices before providing personal information.

14. Security Incidents

If a security incident affects personal information, MR Audit Group will assess the impact, take appropriate containment measures, and provide notifications required by applicable law.

15. Policy Changes

We may revise this policy to reflect changes in our services, technologies, or legal requirements. Material updates will be communicated through this website and by additional means where required.

16. Contact Us