This policy explains what personal data we process when you use trident-academy.com, why, who receives it, how long we keep it and what rights you have. It is written to meet the requirements of Angola's Personal Data Protection Law (Lei n.º 22/11, de 17 de Junho) and the standards of the EU General Data Protection Regulation (GDPR) where that regulation applies.
Who we are (data controller)
1.1. The controller of your personal data is WISA PRODUCTS & SERVICES INTERNATIONAL - FZCO, trading as Trident Academy, a free zone company with trade licence no. 15116, issued by the Dubai Integrated Economic Zones Authority, with registered address at IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.
1.2. Contact for any privacy matter: info@trident-academy.com.
Personal data we process
| Category | Examples |
|---|---|
| Account data | Name, email address, password (stored only in hashed form), language preference |
| Learning data | Courses enrolled, progress, scores, quiz attempts, completion, time spent, activity events (login, course opened, module completed, quiz attempt) |
| Certificate data | Name, course, completion date, certificate verification code |
| Company membership data | Company, department, job title, courses assigned, due dates (when you are enrolled by a company) |
| Order and billing data | Products bought, amounts, order dates, billing name, billing address, email, telephone (if provided), payment status |
| Communication data | Emails you send us, notification and newsletter preferences |
| Newsletter data | Email address (and name, if provided) given in the newsletter form |
| Technical data | IP address, browser type, device data, cookies needed to run the Website and, if you accept, marketing cookies (Meta Pixel) (see the Cookies Policy) |
| Identification data | Nationality, identity document number (Bilhete de Identidade, national identity document or passport), date of birth and, when requested, a photo of the document |
| Fraud-prevention data | Random browser identifier (cookie tlms_dv), sign-up IP address stored only in encrypted (non-reversible) form, accounts sharing the same name or device |
| Gamification data | Points (XP), level, badges, study streak, league division and group, ranking position, awards and discount codes |
| Referral data | Personal referral code and the companies you referred |
| Invitation data | Email addresses of friends and family that a learner gives us so that they receive an invitation, and the link between the person who invited and the account created from the invitation |
2.1. Card data. Card payments are processed by our payment provider, WiPay. We do not receive or store your full card number or security code.
2.2. Sensitive data. We do not ask for sensitive data (for example, health, religion or ethnic origin). Please do not include it in messages to us.
2.3. Identity document. We ask for an identity document only to ensure one account per person and to issue certificates and awards in the right person's name. The number is stored securely: only authorised team members can view it, and every view is logged; to check whether the same number is already linked to another account we use an encrypted fingerprint (hash) of the number. The photo of the document is stored in a private area of the server with no public address, and only authorised team members can see it. The number and the photo never appear on certificates, rankings, emails or exports.
Where the data comes from
3.1. From you, when you register, buy, take courses, subscribe to the newsletter or contact us.
3.2. From your employer or organisation, if a company HR manager invites you and assigns courses (for example, your name, email, department and job title).
3.3. Automatically, when you use the Website (learning activity, technical data and cookies).
3.4. From our payment provider, which tells us whether a payment succeeded.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of the contract (Terms of Use) |
| Giving access to courses, recording progress and results, issuing certificates | Performance of the contract |
| Processing orders and payments, keeping invoices and accounting records | Performance of the contract; compliance with legal obligations |
| Providing company access: invitations, course assignment, the company dashboard | Performance of the contract with the company; our and the company's legitimate interest in organising and monitoring staff training |
| Public verification of certificates | Performance of the contract; legitimate interest in allowing third parties (e.g. employers) to confirm that a certificate is genuine |
| Service emails: account messages, order confirmations, course reminders, due dates, weekly progress summaries | Performance of the contract; legitimate interest in helping you complete your courses |
| Newsletter | Your consent, which you can withdraw at any time |
| Measuring how well our ads work (Meta Pixel) | Your consent, which you can withdraw at any time under "Cookie preferences" in the site footer |
| Security, fraud prevention, preventing abuse of the free course | Legitimate interest |
| Improving courses and the Website using aggregated learning statistics | Legitimate interest |
| Responding to requests and complaints; exercising or defending legal claims | Legitimate interest; legal obligation |
| Verifying identity: one account per person, name and date of birth matching the document, certificates and awards in the right person's name | Performance of the contract (Terms of Use); legitimate interest in preventing fraud and abuse |
| Detecting and blocking duplicate accounts | Legitimate interest in preventing fraud and abuse of the welcome offer, the leagues and the awards |
| Gamification: XP, leagues, public rankings (first name and initial of the surname), monthly awards with a verifiable public page | Performance of the contract; legitimate interest in motivating learning (you can hide yourself from the rankings and leagues in your account) |
| Phoning customers with unpaid orders | Performance of the contract; legitimate interest in completing orders that were started |
| Sending the invitation a learner asks us to send to a friend; awarding the invitation points (XP) | Legitimate interest (ours and the inviting learner's); the invitation is a single email and anyone can ask not to receive further emails |
4.1. Where we rely on consent, you can withdraw it at any time. This does not affect processing already carried out.
4.2. We do not use your data for automated decisions that have legal or similarly significant effects on you. Passing or failing an assessment is based on the score set for each course.
4.3. Reminder and overdue emails about courses assigned by a company are set up by that company, and learners cannot currently switch them off in their account. You can ask us to stop non-essential emails at any time by writing to info@trident-academy.com; we will continue to send essential account and order messages. HR managers can switch off the weekly summary email in the company dashboard.
Company accounts: what your HR manager can see
5.1. If you were invited by a company or organisation (usually your employer), the company's HR manager(s) can see on the company dashboard:
- your name, email, department and job title;
- the courses assigned to you and their due dates;
- your progress, scores, quiz attempts, completion status, time spent and activity dates;
- your certificates.
5.2. The company uses this information for its own purposes of training and staff development. In respect of this use, the company is responsible for informing you and for having a valid legal basis under the law that applies to it. Trident Academy acts as controller for your account on the platform and as processor (service provider) for the company in respect of the dashboard reporting, under a data processing agreement with each company.
5.3. HR managers see only the members of their own company. They do not see your card data or any courses you bought privately with a personal account, unless those courses are assigned or paid for through the company.
5.4. If you leave the company, the company may remove you from its membership. When you are removed, your access to the courses paid for or assigned by the company ends. Your account, your certificates and the courses you bought yourself remain yours. The records of the training you did through the company remain visible to its HR managers as history.
Who receives your data
We do not sell your personal data. We share it only with:
6.1. Hosting provider: Hostinger, which hosts the Website and its database.
6.2. Payment provider: WiPay, which processes card payments.
6.3. Email delivery: account, course and newsletter emails are sent through Brevo (Sendinblue SAS, France), our email delivery provider.
6.4. Your company, if you are enrolled through company access (see section 5).
6.5. Anyone with your certificate verification code, who can see your name, the course and the completion date on the verification page.
6.6. Professional advisers (for example, accountants or lawyers) bound by confidentiality, and public authorities or courts when required by law.
6.7. Service providers that process data for us are allowed to use it only on our instructions and must protect it.
6.8. Meta Platforms Ireland Limited, only if you accept marketing cookies, to measure how well our ads on Facebook and Instagram work (Meta Pixel). Meta may process this data as a controller under its own privacy policy (see the "Cookies" section).
6.9. Payment-follow-up assistant: a person we engage, who receives the name, phone number, email and order details of customers with unpaid orders, solely to phone them about that order.
6.10. AI support assistant: to reply faster, the messages and emails you send us may be read and answered with the help of an artificial-intelligence assistant (Claude, by Anthropic), which processes the data on our behalf and on our instructions. Questions about payments, complaints and companies are always handled by our team. We also check photos of identity documents with the help of that assistant, always under our team's responsibility.
6.11. The public, for what is published by its nature: in the rankings and leagues, your first name and the initial of your surname; on monthly award pages, the full name, award, month and points (XP) of the award winner.
International transfers
7.1. We are based in the United Arab Emirates and our service providers may process data in other countries (for example, where their servers are located). Your data may therefore be transferred outside Angola, the European Economic Area or your own country. In particular, the servers of our hosting provider, Hostinger, and of our payment provider, WiPay, may be located outside your country. If you accept marketing cookies, the data received by Meta Platforms Ireland Limited through the Meta Pixel may also be transferred outside Angola.
7.2. When we transfer data internationally, we take the steps required by the applicable law, such as using providers that offer adequate protection, contractual safeguards, or relying on the transfer being necessary to perform the contract with you. Where Angolan law requires prior notification to or authorisation from the Angolan data protection authority (Agência de Protecção de Dados – APD), we will comply.
How long we keep data
| Data | Retention period |
|---|---|
| Account data | While the account is active; deleted or anonymised 24 months after the last login, after notice by email |
| Learning data (progress, scores, events) | While the account is active, then as for account data |
| Certificate records and verification codes | 10 years from issue, so certificates can still be verified |
| Order, billing and accounting records | 10 years |
| Company membership data | While the company access is active, plus 12 months |
| Newsletter subscription | Until you unsubscribe |
| Detailed activity logs (login and event logs) | 24 months, then aggregated or deleted |
| Messages and requests | 3 years from the last exchange |
| Identity document number and date of birth | While the account is active; then as for account data |
| Photo of the identity document | Until it is checked and then while the account is active, to resolve disputes and duplicate-account cases; deleted when the identification is removed from the account or the account is deleted |
| Fraud-prevention signals (browser identifier, encrypted IP) | While the account is active |
| Monthly awards and their public pages | For as long as Trident Academy operates the platform, so that awards can be verified |
| Email address of an invited friend | Deleted 30 days after the invitation; we keep only an encrypted fingerprint (hash) so that the same address is not invited again |
8.1. We may keep data longer when needed to exercise or defend legal claims.
Security
9.1. We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), password protection, restricted access to administration areas and payment processing by a specialised provider.
9.2. No system is fully secure. If a breach likely to put your rights at risk occurs, we will inform you and the competent authorities as required by law.
Your rights
10.1. Under the applicable law you may have the right to:
- access your personal data and obtain a copy;
- correct inaccurate or incomplete data;
- delete your data, when it is no longer needed or the processing is unlawful;
- object to processing based on legitimate interest, and to direct marketing at any time;
- restrict processing in certain cases;
- data portability, to receive data you gave us in a commonly used format;
- withdraw consent at any time, where processing is based on consent.
10.2. To exercise your rights, write to info@trident-academy.com. We may ask you to confirm your identity. We will reply within 30 days, or within any shorter period required by the applicable law.
10.3. If you were enrolled by a company, we may forward requests about the dashboard data to that company or handle them together.
10.4. You also have the right to complain to a data protection authority, in particular the Agência de Protecção de Dados (APD) in Angola or, if you are in the European Union, the authority in your country.
Children
The Website is intended for users aged 18 or over. Users aged 16 or 17 may use it only with the consent of a parent or guardian. We do not knowingly collect data about children under 16.
Cookies
We use cookies needed for the Website to work (to keep you logged in, to keep your cart, to remember your language and to serve cached pages) and, only with your permission, marketing cookies (Meta Pixel) to measure our ads. See the Cookies Policy for details.
Marketing cookies (Meta Pixel). With your permission, we use the Meta Pixel, a service of Meta Platforms Ireland Limited, to measure how well our ads on Facebook and Instagram work. The Meta Pixel is only loaded after you click "Accept" in the cookie bar; if you refuse, it is not loaded. When you accept, Meta receives technical data about your visit (for example pages and courses viewed, checkout started, completed purchases with the amount and course code, account creation and company information requests), your IP address and browser and cookie identifiers. We do not send your name, email or phone number. Meta may process this data as a controller under its own privacy policy, and it may be transferred outside Angola. The legal basis is your consent, which you can withdraw at any time under "Cookie preferences" in the site footer (your choice is stored for 12 months in the tlms_consent cookie). Withdrawing consent does not affect processing carried out before.
We also use two necessary cookies: tlms_dv, a random browser identifier used to detect duplicate accounts (2 years), and tlms_ref, which stores for 30 days the referral code of the person who invited you.
Changes to this policy
We may update this policy. The new version will be published on this page with a new date. For significant changes we will inform registered users by email or on the Website.
Contact
WISA PRODUCTS & SERVICES INTERNATIONAL - FZCO (Trident Academy)
IFZA Business Park, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: info@trident-academy.com
Trident Academy is operated by WISA Products & Services International – FZCO, Dubai, United Arab Emirates.