SGEP Fitness Assessments · Your data
Who handles your data.
The companies behind our assessments — who they are, where they are, and what they do.
When you buy or take one of our assessments, a small number of specialist companies help us deliver it. This page names each one, in plain language. It's the public version of the internal register we keep of every provider's legal terms and data-protection safeguards, which we review at least annually. For the journey at a glance, see How we treat your data; for what we collect and why, see our privacy policy and its assessment addendum.
Who we are: Orderly Disruption Ltd (trading as Adaptive Fitness), a company registered in England, is the data controller. Questions about anything on this page: info@orderlydisruption.com.
The companies that process data on our behalf
These four work under our instructions, each bound by a data processing agreement (the contract UK data-protection law requires). Where they hold data outside the UK, a recognised international-transfer safeguard applies.
ClassMarker
ClassMarker Pty Ltd AustraliaRuns the assessments — delivers the questions, records your answers' outcome.
Where your data sits, and the UK safeguard: processed in the USA; covered by the UK Addendum / International Data Transfer Agreement to the EU Standard Contractual Clauses, written into our agreement with them.
Sertifier
Sertifier Inc. USA (Delaware)Issues and hosts your badge/certificate and its public verification page.
Where your data sits, and the UK safeguard: recipient data is hosted in the EU by default (Google Cloud, Belgium); any transfer to the USA is covered by the EU Standard Contractual Clauses plus the UK Addendum.
Resend
USASends our transactional email — access codes, results, sign-in links.
UK safeguard: certified under the EU–US Data Privacy Framework including its UK Extension.
Cloudflare
Cloudflare, Inc. USAHosts our delivery system and its records.
UK safeguard: certified under the EU–US Data Privacy Framework including its UK Extension, with EU Standard Contractual Clauses + UK Addendum as fallback.
The companies that handle your payment
We never see or hold your card details. Checkout is handled by a Merchant of Record — the company you actually buy from, which is responsible for the payment, taxes, and payment data under its own privacy policy, and passes us only what we need to deliver your purchase (your name, email, and order reference).
FastSpring
Bright Market, LLC USAMerchant of Record.
Paddle
Paddle Payments Ltd (Ireland); Paddle.com Inc. (US) for US buyers — part of the Paddle group Ireland / USAMerchant of Record.
Lemon Squeezy
Lemon Squeezy, LLC — a Stripe company USAMerchant of Record.
Which one you buy through depends on the checkout button you choose. Each is an independent controller of your payment data; the fulfilment details they pass to us are then covered by our privacy policy and its assessment addendum.
For Paddle, which entity you contract with depends on where you are: Paddle Payments Ltd (Ireland) for most of the world, or Paddle.com Inc. (US) for US buyers. Data flowing between us and the Ireland entity moves between the UK and the EEA, which each recognise the other's data-protection regime; data on the US leg is covered by the EU Standard Contractual Clauses plus the UK Approved Addendum, built into Paddle's Data Sharing Addendum.
The storefront
Shopify (Shopify International Ltd, Ireland, part of Shopify Inc., Canada) hosts the ace.works store pages you browse before purchase. Canada's data-protection regime holds a UK adequacy finding — data may flow there without additional safeguards.
Signing in to view your credential
Sertifier's credential portal offers sign-in via a social or enterprise account — Google, Apple, LinkedIn, or Microsoft. If you choose one of these, that identity provider processes your basic sign-in details (such as your name and email address) under its own privacy policy to authenticate you. This happens between you and the provider; we never receive your password or account credentials, and using a social sign-in is your choice.
When this page changes
If we add or replace a provider, we update this page. Our internal register of each provider's legal terms is re-verified at least annually and whenever a provider announces changes to its terms.
Questions, or want to exercise your data rights?
Rights and the full detail of what we collect are described in the privacy policy and its assessment addendum. For anything on this page — or to access, correct, or erase your data — one email is enough.
Email info@orderlydisruption.comOrderly Disruption Ltd (t/a Adaptive Fitness) · UK data controller · How we treat your data
Version 3.0 · Effective on publication