Privacy Policy
Last updated: July 2026
1. Introduction
The Wind Academy ("we", "us", "our") operates the Wind Academy OS platform and mobile application (the "Service"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and share your personal data when you use our Service.
2. Data We Collect
We collect the following types of personal data:
- Identity & Contact: Name, email address, phone number, date of birth, nationality
- Address: First line, second line, town/city, postcode, country
- Professional: Qualifications, certifications, employment history, skills, day rates, visa status
- Medical: Medical declarations and fitness-to-work information (for training compliance)
- Documents: Identity documents, certificates, insurance documents, CVs uploaded to the platform
- Usage Data: IP address, device information, app usage patterns, login timestamps
- Financial: Billing details, invoice history, membership subscription data (processed via Stripe)
3. How We Use Your Data
We use your personal data to:
- Provide and manage training bookings, scheduling, and course delivery
- Issue and verify certificates and digital competence passports
- Match workers with businesses and employment agencies for job bookings
- Process membership subscriptions and invoice payments
- Comply with health & safety, accreditation, and regulatory obligations (GWO, IOSH, etc.)
- Communicate with you about training, bookings, and platform updates
- Maintain audit trails for safeguarding and compliance purposes
4. Legal Basis for Processing
We process your personal data under the following legal bases (UK GDPR): performance of a contract (booking management, certification), legal obligation (accreditation compliance), legitimate interests (platform operations, safeguarding), and consent (marketing communications). You may withdraw consent at any time.
5. Data Sharing
We may share your data with:
- Training providers and employers you have booked or applied to work with
- Employment agencies facilitating job placements
- Accreditation bodies requiring verification of training records
- Stripe (payment processing), Microsoft 365 (email/calendar integration), Brevo (email campaigns)
- Regulatory authorities where legally required
We never sell your personal data to third parties.
6. Data Retention
We retain personal data for the duration of your active membership and for a period thereafter as required by accreditation bodies (typically 5–7 years for training records). Documents and certificates are retained until their expiry date plus a reasonable archival period.
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate or incomplete data
- Request erasure of your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights, contact us at the details below. You may also complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), role-based access controls, audit logging, and secure cloud infrastructure. Document uploads for verification are access-controlled and time-limited.
9. Children's Privacy
Our Service is intended for professionals aged 18 and over. We do not knowingly collect data from children under 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, please contact:
The Wind Academy
Data Protection Officer
Email: privacy@windacademy.com