Expats Alliance of Professional Standard

EXAPS Privacy Policy

Last updated: 12 February 2026

1. Who We Are

EXAPS (Expats Alliance of Professional Standard) (“EXAPS”, “we”, “us”, or “our”) is an international professional-membership alliance that helps expats and immigrants find trusted, reliable, and ethical service providers.
Website: https://www.exaps.org

This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our website, use our services, or interact with us in any way.

Contact details

Email: info@exaps.org
Correspondence address:
EXAPS (Expats Alliance of Professional Standard)
Europa House
Barcroft Street
Bury
BL9 5BT
United Kingdom

We are UK-based for data protection purposes and registered with the UK Information Commissioner’s Office (ICO).

ICO Registration Number: ZC046689

2. Scope

This Privacy Policy applies to: - Visitors to our website - Prospective and current EXAPS member organisations and their representatives - Individuals searching for or viewing EXAPS Trusted Providers - Individuals who contact us with questions, feedback, or complaints

This Privacy Policy does not apply to how EXAPS member organisations handle your data directly. Each member organisation is responsible for its own privacy practices.

3. Language and Prevailing Version

Our website and policies may be made available in multiple languages. Translations are provided for convenience only.

If there is any inconsistency, conflict, or ambiguity between the English version and any translated version, the English version will prevail.

4. What Data We Collect

4.1 Data you provide to us

We may collect the following information when you fill in forms, apply for membership, contact us, submit a complaint, or otherwise interact with us: - Contact details: name, email address, phone number, country of residence - Professional details (for member organisations): company name, role, professional qualifications, practice areas, office address, website, registration numbers, regulatory body - Account and membership information: login details, membership status, billing contact, communication preferences - Content you submit: enquiries, feedback, complaints, responses to surveys, and any supporting documents you choose to provide - Complaint-related information: details of your complaint, communications between you and the provider, and any evidence you submit

4.2 Data we collect automatically

When you use our website, we may automatically collect: - Technical data: IP address, browser type and version, device type, operating system - Usage data: pages visited, time and date of visit, time spent on pages, links clicked, referring/exit pages
We may use cookies and similar technologies to collect this information. See Cookies and Similar Technologies below.

5. How We Use Your Data

We use your personal data for the following purposes.

5.1 To provide and improve our services

• Operating and maintaining the EXAPS website and search platform
• Creating and managing member accounts and profiles
• Displaying trusted provider profiles to the public
• Processing membership applications and renewals
• Managing founding member or other promotional offers
• Improving our services, website functionality, and user experience

5.2 To communicate with you

• Responding to your enquiries and support requests
• Sending service-related messages (for example, account notices, membership updates, policy changes)
• Sending marketing communications where you have consented or where we are otherwise permitted by law (you can opt out at any time)

5.3 To manage complaints and reviews

• Receiving and reviewing complaints from expats and other users
• Contacting complainants and member organisations to verify facts
• Assessing whether members adhere to the EXAPS Code of Conduct
• Recording outcomes, including where a member is removed from EXAPS

5.4 To meet legal and regulatory obligations and protect our interests

• Complying with applicable laws and regulations
• Responding to lawful requests from public authorities
• Protecting our rights, property, and the safety of our users and the public

6. Legal Bases for Processing (UK GDPR)

As we are based in the United Kingdom, we process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Depending on the context, our legal bases include: - Contract: to perform a contract with you or take steps at your request before entering into a contract (for example, membership application, providing access to member services) - Legitimate interests: to operate and improve our services, manage our relationship with members, handle complaints, and promote EXAPS in a way that is proportionate and respects your rights - Consent: where required by law (for example, certain marketing activities or non-essential cookies). You can withdraw your consent at any time. - Legal obligation: to comply with applicable laws and regulations

7. How We Share Your Data

We may share your personal data with: - Service providers: third-party vendors who help us operate our website, process payments, send communications, provide analytics, or support our IT and security. They act on our instructions and are bound by confidentiality and data protection obligations. - Member organisations: where necessary to handle a complaint or enquiry that you have raised about a specific provider. - Professional advisers: such as lawyers, accountants, or auditors, where necessary for our legitimate business purposes. - Authorities or law enforcement: where required by law or to protect our rights, users, or the public. - Successors: in connection with any merger, acquisition, or restructuring of EXAPS, subject to appropriate safeguards.
We do not sell your personal data.

8. International Transfers

EXAPS aims to operate internationally. This may mean your personal data is transferred to and processed in countries outside the UK and your country of residence, including countries that may not provide the same level of data protection as the UK.
Where required by law, we will ensure that appropriate safeguards are in place for such transfers, such as: - Adequacy regulations made by the UK government - Standard contractual clauses or equivalent legal mechanisms

You can contact us at info@exaps.org for more information about these safeguards.

9. Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including: - For as long as you have an active account or membership with us - For a reasonable period after your membership ends, to maintain records, manage disputes, and comply with legal obligations - For complaint-related information, for as long as necessary to document our review and outcomes, and to protect our legitimate interests

When data is no longer needed, we will delete or anonymise it in a secure manner.

10. Your Rights (UK Data Protection Law)

Under UK data protection law, you have the following rights, subject to certain conditions: - Access: to obtain a copy of your personal data we hold - Correction: to request correction of inaccurate or incomplete data - Deletion: to request deletion of your data in certain circumstances - Restriction: to request that we limit the processing of your data in certain cases - Objection: to object to processing based on our legitimate interests, including profiling - Data portability: to receive your data in a structured, commonly used format and have it transferred to another controller where technically feasible - Withdraw consent: where we rely on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@exaps.org. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the UK Information Commissioner’s

Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk

11. Cookies and Similar Technologies

We may use cookies and similar technologies to: - Enable core website functionality - Remember your preferences - Analyse website traffic and usage patterns - Improve our services and user experience

Where required by law, we will ask for your consent before setting non-essential cookies. You can manage your cookie preferences through your browser settings and (where available) our cookie banner or preferences tool.

If we publish a separate Cookie Policy, it will provide more detailed information about the cookies we use.

12. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

13. Third-Party Links

Our website may contain links to third-party websites or services, including those of EXAPS member organisations. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

14. Children’s Privacy

Our services are not directed to children, and we do not knowingly collect personal data from children under the age of 16 (or other age as defined by local law) without appropriate parental consent.

If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page.

If we make material changes, we will take reasonable steps to inform you, such as by email (where appropriate) or by a notice on our website.

Your continued use of our website or services after any changes become effective will signify that you have read and understood the updated Privacy Policy.

16. How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us at:

EXAPS (Expats Alliance of Professional Standard)
Email: info@exaps.org
Correspondence address:
Europa House
Barcroft Street
Bury
BL9 5BT
United Kingdom
ICO Registration Number: ZC046689