Privacy
How information is handled
What this service publishes, what it keeps private, and how the two are kept apart.
What is published
The public directory shows only information the Authority has approved for publication: organisation name, registration number, type, status, locality, objective, thematic areas and published contact details. Draft edits and pending changes are never shown.
Board of director identifiers
Citizenship Identity Document numbers of board members are held in the register but are published only where the Authority has explicitly enabled publication for that organisation. Where it is not enabled, the directory shows that the identifier is not published rather than the number.
What is held but not published
Application documents, annual submissions, payment records, penalty breakdowns, internal remarks, user accounts and audit history are operational records. They are visible to the organisation they belong to and to authorised Authority users, and are not part of any public output.
Sign-in records
Sign-in attempts are recorded to detect misuse. Email addresses and network addresses in that log are stored as one-way hashes, so the log can be analysed without exposing the underlying identifiers.
Retention
Regulatory records are retained for as long as the Authority's records policy requires. Audit history is append-only: entries are added, never edited or deleted, so a decision can always be traced to the account that made it.
Questions and corrections
To ask what is held about an organisation, or to correct a published record, write to admin@csoa.gov.bt quoting the registration number.