Privacy

This Privacy page explains how NCC Training Academy handles personal data submitted via this website, including contact enquiries and certificate verification look-ups.

We aim to collect only the minimum information necessary to provide training-related responses, maintain traceability of communications, and support certificate verification where applicable.

1. Who we are

NCC Training Academy (“we”, “us”, “our”) operates the website trainingacademy.eu. If you have questions about this Privacy page or your personal data, please contact us via the Contact page.

2. What data we collect

2.1 Contact enquiries

When you submit a contact enquiry, we may collect:

• Name
• Email address
• Company (if provided)
• Training context (method, level, sector, preferred delivery format)
• Your message content

2.2 Certificate verification

When you use the Certificate Verification function, we may process:

• Certificate identifier entered by the user
• Verification outcome returned by the system (e.g., found/not found, status, issue/expiry information)
• Basic technical logs (e.g., timestamp, request metadata) for security and integrity

2.3 Website usage data

Like most websites, we may process limited technical information (e.g., IP address, browser type, device identifiers) for security, troubleshooting, and performance monitoring.

3. Why we process personal data (purposes)

• Responding to enquiries about ISO 9712:2021 training levels, course scope, and candidate routes
• Supporting certificate verification requests and maintaining system integrity
• Improving the quality, clarity, and usability of our website content
• Preventing misuse, fraud, or unauthorised access
• Meeting legitimate record-keeping expectations associated with training and certification activities

4. Legal basis

Depending on the context, we process personal data based on one or more of the following:

• Consent (where you voluntarily submit a message or information)
• Legitimate interests (e.g., responding to enquiries, maintaining security, preventing abuse)
• Contract steps (where processing is required to take steps at your request before entering a contract)
• Legal obligations (where applicable)

5. Data retention

We retain personal data only for as long as necessary for the purposes described above, including:

• Maintaining a record of enquiry correspondence
• Supporting certification traceability and audit expectations where applicable
• Maintaining website security and technical logs for a reasonable period

6. Sharing and transfers

We do not sell personal data. We may share limited personal data with service providers that support our website operations (e.g., hosting, email delivery, security) strictly as necessary to provide services to us.

Where service providers are used, we expect appropriate safeguards to be in place consistent with applicable data protection requirements.

7. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. No internet transmission is completely secure; however, we continuously improve controls in line with risk.

8. Your rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, restriction, objection, and data portability. To exercise your rights, please contact us through the Contact page and include sufficient information for us to identify your request.

9. Changes to this Privacy page

We may update this page periodically to reflect changes in our processing, services, or legal requirements. The current version is indicated by the date below.

Last updated: October 10, 2026