Privacy Policy

1. Who We Are

The Institute of Fire Engineers (IFE), operating through the IFECASA STEAM platform, is the data controller for all personal data processed through this platform. Our registered address is #23 Ferrier Circular, Guayaguayare Village, Trinidad W.I. For data protection queries, contact our Data Protection Officer at community@IFECASA.org.

2. What Data We Collect

We collect data you provide directly:

• Name, email address, and professional details
• Payment information (processed by Stripe)
• Course progress, CPD records, and assessment submissions
• Employment history and certification records
• Portfolio evidence and competency records

We also collect data generated by your use of the platform:

• When you sign in
• Which course content you've viewed and completed, so we can track your progress and CPD
• Your platform settings, such as accessibility preferences

We do not use analytics or tracking tools, and we don't collect browsing data for advertising.

We do not sell your personal data to third parties.

3. How We Use Your Data

Your data is used to:

• Deliver the IFECASA STEAM platform services
• Process payments and generate invoices
• Send transactional emails (receipts, assessment results, CPD reports)
• Track professional development progress and competencies
• Issue certificates and maintain qualification records
• Provide customer support and improve the platform
• Send relevant product and CPD updates (you can opt out at any time by emailing community@IFECASA.org)

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contractual necessity — to deliver the services you have subscribed to
• Legitimate interests — platform security, fraud prevention, service improvement
• Legal obligation — tax records, regulatory compliance, qualification record-keeping
• Consent — marketing communications

5. Data Sharing

We share data with:

• Stripe — payment processing
• Your employer/ATC — where you are enrolled through an Accredited Training Centre, your progress and completion data is shared with your organisation
• Certification bodies — where required for qualification verification
• Service providers — hosting, email delivery and payment processing (under data processing agreements)

6. Data Retention

• Account data: retained for as long as your account is active and for 90 days after deletion
• CPD records and qualification certificates: retained for 7 years (regulatory requirement)
• Assessment submissions: retained for 5 years

7. Your Rights

Under applicable data protection law you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (subject to regulatory retention requirements)
• Port your data to another provider
• Restrict or object to processing
• Withdraw consent at any time

To exercise any of these rights, contact community@IFECASA.org.

8. International Transfers

Your data may be processed in countries outside your jurisdiction. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses.

9. Changes to This Policy

We will notify you of material changes to this policy via email and an in-platform notification. Continued use of the platform after notification constitutes acceptance of the updated policy.