Privacy Notice
Last updated: 14 June 2026 Website: whiedaacademy.com
This Privacy Notice explains how WHIEDA Academy collects and uses personal data in connection with enquiries, applications, payments, training access, assessments, certificates and learner support.
1. Who we are
WHIEDA Academy is operated by Bibó Erika Éva, a sole trader registered in Hungary.
Registered address: Győr, Hungary
Sole trader registration number: 62231389
Tax number: See your Invoice Email: hello@whiedaacademy.com
For data protection purposes, Bibó Erika Éva is the controller of the personal data described in this notice.
UK representative, where required: Not applicable
2. What this notice covers
This notice applies to:
- whiedaacademy.com;
- enquiry and application forms;
- email communications;
- payment and invoice administration;
- delivery of training materials;
- assessments and retakes;
- certificate administration; and
- learner support and complaints.
The service is currently administered manually using online forms, email, cloud storage, payment links and controlled document access. It does not currently include learner accounts, automatic website checkout or automatic certificate issue.
3. Personal data we collect
Depending on how you interact with us, we may collect:
- your name and email address;
- your professional role, business status, practitioner background, qualifications and declared scope of practice;
- information submitted in enquiry and application forms;
- business, clinic, company or sole trader billing details;
- billing contact details and invoice information;
- payment confirmation and transaction administration information;
- records showing when training access was provided;
- learner communications and support records;
- assessment submissions, retake records, review notes and outcomes;
- certificate issue and verification records;
- complaint and dispute records; and
- technical and security information, such as IP address, browser information and server logs, where collected by our website or service providers.
The payer or sponsoring organisation may be different from the named learner. Assessment records and any Certificate of Completion remain linked to the named learner.
4. Where we obtain personal data
We usually collect personal data directly from you. We may also receive limited information from:
- a clinic, employer, business or other organisation paying for or sponsoring your training;
- Stripe or another payment provider;
- our invoicing provider;
- our website, email, cloud-storage and document-delivery providers; or
- professional advisers where necessary for accounting, legal or compliance purposes.
Where another person or organisation provides your details, they are responsible for ensuring that they are permitted to do so and that the information is accurate.
5. Why we use personal data and our lawful bases
We use personal data for the following purposes:
| Purpose | Lawful basis |
|---|---|
| Responding to enquiries and reviewing applications | Taking steps at your request before entering into a contract |
| Confirming eligibility and professional or business status | Taking steps before entering into a contract; and our legitimate interests in offering the training only to suitable professional users |
| Accepting an application, providing access and administering the training | Performance of a contract |
| Administering assessments, retakes, results and certificate issue | Performance of a contract |
| Processing payments and issuing invoices | Performance of a contract and compliance with legal, tax and accounting obligations |
| Preventing fraud, protecting course materials, maintaining security and investigating misuse | Our legitimate interests in protecting our business, learners, systems and intellectual property |
| Handling complaints, disputes and legal claims | Our legitimate interests in resolving disputes and establishing, exercising or defending legal claims |
| Keeping records required by law | Compliance with a legal obligation |
| Sending optional marketing communications | Consent, where consent is required |
Where we rely on legitimate interests, we consider whether our interests are necessary and proportionate and whether your rights override those interests.
6. Information you must provide
We need certain personal and business information to assess an application, confirm eligibility, process payment, provide access, administer assessments and issue a certificate. If you do not provide information that is reasonably required, we may be unable to accept your application, enter into or perform the training contract, process payment, assess your work or issue a certificate.
Information marked as optional is not required for these purposes.
7. Sensitive information
Please do not send client-identifiable information, health records, insurance policy documents, identity documents, bank details, card details or other sensitive information through ordinary web forms or unsecured email unless we have specifically asked for it and provided an appropriate method.
If we receive sensitive information that we did not request and do not need, we may delete it without retaining a copy. Where sensitive information is genuinely required, we will explain what is needed, why it is needed, the lawful basis for using it, how to provide it securely and how long it will be kept.
8. Payments
Payment is completed on the secure payment page provided by Stripe or another approved payment provider. We do not ask you to send card details by email or through general enquiry forms.
The payment provider processes payment information under its own privacy notice. We normally receive transaction and payment-status information rather than your full card details.
9. Service providers and recipients
We may share personal data only where reasonably necessary with:
- our website and hosting provider: Hostinger.hu;
- our email, forms, cloud-storage and document-delivery providers: Hostinger.hu, Google.com;
- Stripe or another payment provider;
- our invoicing provider: Szamlazz.hu;
- accountants, legal advisers and other professional advisers;
- technical support and information-security providers; and
- public authorities where disclosure is required by law.
We do not sell personal data. We do not routinely provide learner information to insurers, employers, clinics, device manufacturers or professional bodies for approval purposes.
Where a business sponsors a learner, we will not disclose assessment details or other learner information to the sponsor unless this is necessary for the agreed administration, the learner has been appropriately informed, or disclosure is otherwise permitted by law.
10. International transfers
We operate from Hungary. Personal data relating to UK learners is therefore processed in Hungary and may also be processed elsewhere in the European Economic Area.
Some service providers may process personal data in the United Kingdom, the United States or other countries. Where a transfer requires a legal safeguard, we use an applicable adequacy decision or regulation, approved contractual clauses, an approved data privacy framework or another lawful transfer mechanism.
You may contact us for further information about the safeguard used for a particular transfer.
11. How long we keep personal data
We keep personal data only for as long as necessary for the relevant purpose and for applicable legal, accounting, tax, certificate-verification, complaint and legal-claims requirements.
Our standard retention periods are:
- unsuccessful enquiries and rejected applications: six months after the enquiry or application is closed;
- learner administration records: two years after completion, withdrawal or expiry of access to the Course;
- assessment submissions and assessment-review records: two years after the final assessment decision;
- certificate and certificate-verification records: six years after the certificate is issued;
- payment, invoice and accounting records: for at least eight years, or for any longer period required by Hungarian law;
- ordinary support correspondence: until the matter is resolved and for no longer than six months afterwards, unless it becomes part of another record category;
- complaint and dispute records: six years after the matter is closed, unless a longer period is reasonably required because legal proceedings are ongoing or anticipated;
- legal-claim records: until the relevant limitation period has expired and any related proceedings have been finally concluded.
At the end of the relevant retention period, we will securely delete or anonymise the personal data, unless we are legally required or otherwise entitled to retain it for longer.
Data may be retained for longer where required by law, a regulatory request or the establishment, exercise or defence of legal claims. Data that is no longer required is deleted, anonymised or securely disposed of in accordance with our retention procedures and backup cycles.
12. Automated decision-making
Applications, assessments and certificate decisions are reviewed manually. We do not currently make decisions that produce legal or similarly significant effects solely by automated means, and we do not currently use profiling for those decisions.
13. Your data protection rights
Depending on the circumstances and applicable law, you may have the right to:
- access your personal data;
- correct inaccurate or incomplete data;
- request deletion;
- request restriction of processing;
- receive certain data in a structured, commonly used and machine-readable format;
- request transfer of certain data;
- withdraw consent where processing is based on consent; and
- complain to a competent data protection authority.
You also have the right to object to processing based on our legitimate interests.
These rights are not absolute. We may need to keep certain records where required by law or for legal claims.
To exercise a right, email hello@whiedaacademy.com. We may need to verify your identity before responding.
You may also complain to:
- the Hungarian National Authority for Data Protection and Freedom of Information (NAIH); and
- the UK Information Commissioner’s Office (ICO), where the UK GDPR applies.
14. Marketing
We do not add applicants or learners to a general marketing list without an appropriate lawful basis. Emails needed to administer enquiries, applications, payments, access, assessments, certificates or support are service communications, not general marketing.
You may unsubscribe from marketing communications at any time using the unsubscribe method provided or by contacting us.
15. Security
We use reasonable technical and organisational measures to protect personal data. However, no email, online form or digital system can be guaranteed to be completely secure. Please do not send sensitive or confidential information unless we have provided an appropriate method.
16. Cookies and website technology
Our website is hosted and operated using Hostinger.hu services.
The website may use essential cookies and similar technologies that are necessary for the website to function properly, maintain security and remember your cookie preferences.
With your consent, the website may also use analytics cookies to collect aggregated information about website visits, such as pages viewed, general traffic patterns, browser or device type and approximate location. We use this information to understand how the website is used and to improve its content and performance.
Our hosting provider may also automatically create server logs when you visit the website. These logs may include your IP address, browser type, device information, the date and time of access, the page requested and technical security information. Server logs are used for website operation, security, troubleshooting and fraud prevention.
Non-essential analytics or tracking technologies are not used unless you provide consent through the cookie banner. You may accept or reject them when you first visit the website. You can also delete cookies through your browser settings.
The website contains links to external services, including Google Forms. When you follow an external link, the relevant third party may use its own cookies or similar technologies in accordance with its own privacy information.
17. Changes to this notice
We may update this Privacy Notice when our services, tools or legal obligations change. The current version will be published on whiedaacademy.com with the date of the latest update.
For privacy questions or data-rights requests, contact hello@whiedaacademy.com.