HSEQ Global Academy is the controller of personal data processed through this website.
What we collect
- Account data: name, email, country, language, password hash.
- Learning data: enrolments, progress, quiz scores, certificates.
- Orders: items, amounts, billing name and tax ID, payment provider references. Card details are handled by the payment provider and never reach our servers.
- Requests you send us: organization, contact details, message.
- Technical logs: IP address and request data kept for security for up to 30 days.
Why (legal basis)
- To provide the services you sign up for (contract).
- To issue and verify certificates (contract; legitimate interest of employers and auditors in verifying them).
- Accounting and tax records (legal obligation).
- Answering requests (consent, given on the form).
- Security and fraud prevention (legitimate interest).
Public certificate check
Anyone with a certificate code can see the holder's name, course, issue and expiry dates. This is the purpose of the certificate.
Sharing
Payment providers (card or crypto processors), email delivery, translation and AI services used to translate course content (no learner data is sent to them), and your organization's administrator if your seat was assigned by your organization.
International transfers
Our servers and service providers may be located outside your country, including outside the European Economic Area, in countries without an adequacy decision. By using the services you acknowledge this transfer; we apply access control, encryption in transit and minimisation to protect your data.
Retention
Account data until you delete your account; certificate records for as long as the certificate can be verified; accounting records as required by law.
Your rights
You can download your data and delete your account from your dashboard, and contact us to access, correct, restrict or object to processing, or to complain to a supervisory authority.
Cookies
See the cookie notice.
HSEQ Global Academy