Last updated: 1 September 2026. This policy explains what personal data Derry Training ([Derry Training legal entity name], Illinois, United States, "we", "us") collects, why, who we share it with, and your rights.
Draft for legal review. This is a comprehensive starting point, not legal advice. Confirm the bracketed details and the jurisdiction-specific rights below with a qualified lawyer before relying on it.
1. Who we are
Derry Training is a technology-career training provider. For any privacy question, contact admin@derrytraining.com. Our registered details are [Derry Training legal entity name], Illinois, United States.
2. What we collect
- Enquiry & admissions data: your name, email, phone, and the answers you give in the career quiz, application and 10-minute call.
- Payment data: processed by our payment provider (Stripe). We receive confirmation and billing details but do not store your card number.
- Learning data (students): course progress, quiz and assessment results, spaced-repetition activity, practice-lab and capstone submissions, your Portfolio items, and "I'm confused here" flags.
- Questions you send us via the FAQ "ask a question" form (your name, email and message).
- Access-discount eligibility data if you apply for one — which may reveal sensitive information (for example veteran, disability, employment or refugee status). We collect this only to assess your eligibility, and treat it with extra care.
- Testimonials, reviews, photos and portfolio content you choose to provide or make public.
- Technical & usage data: device/browser information, pages viewed, and — inside the learning app — a per-account watermark/forensic identifier used to deter and trace leaks of paid content.
- Skills Passport & sharing choices: which fields (skills, capability band, evidence counts, credential) you choose to share, with which named employer, and for how long — plus a simple access log (how many times each share link was viewed) so you can see who looked.
- Approximate location (job matching only): if you use the Job-Readiness tool and allow it, your device's approximate location is sent once to find nearby roles. It is used only for that search and is not stored.
3. Why we use it (legal bases)
- To advise you, process your application, and deliver the programme (performance of a contract / taking steps at your request).
- To take payment and manage your account (contract).
- To support your learning, mentoring and job placement (contract).
- To improve our courses and website, and to keep the platform secure (our legitimate interests).
- To send you marketing about Derry Training, where you have consented or where permitted — you can opt out at any time.
- To meet legal, tax and regulatory obligations.
Where we rely on consent (for example marketing, or processing sensitive access-discount data), you can withdraw it at any time.
4. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run Derry Training, each under a data-processing agreement:
- Hosting (our web host) — to run the website and store data.
- Stripe — to take and manage payments.
- Email / SMTP provider — to send transactional and (with consent) marketing email.
- SMS provider (if enabled) — to send call and lesson reminders.
- Google Workspace — calendar invites, documents and email.
- Automation / analytics tools (if enabled, e.g. a webhook to Zapier/Make) — to route leads and measure the funnel.
- Hiring partners — only with your knowledge, to make introductions for placement.
We may also disclose data where required by law, or to protect our rights and safety.
4a. Skills Passport, capability insights & job matching (all opt-in)
Several features let you prove or improve your capability. They are off by default and controlled entirely by you:
- Credential verification (public): anyone with your credential code can confirm it is authentic — your first name, last initial and track, and whether you graduated. This confirms authenticity only; it reveals no capability data, scores or evidence.
- Skills Passport (your consent, per employer): to share anything beyond authenticity, you issue a scoped, time-limited, revocable link to a named employer, choosing exactly which fields they may see (skills, a coarse capability band, evidence counts, credential). The link expires on the date you set, you can revoke it at any time, and we log only how often it was viewed. Legal basis: your consent.
- Organisational capability insights (anonymised, aggregate): if you opt in, your progress may be included in the capability summary your employer or sponsor sees — but only aggregated and anonymised, and only where the group is large enough (at least five people) that no individual can be identified. You can turn this off at any time. Legal basis: your consent.
- Talent matching: employers only ever see candidates who have opted into sharing, and see a role-fit summary and skill gap — not a data dump. Matching is explainable (it shows which competencies are met and missing) and never auto-rejects anyone.
- Job-Readiness matching: uses your demonstrated learning (or a short self-check) and, with your permission, your approximate location to rank live openings. Live roles come from a licensed jobs provider; we do not scrape job sites.
You can withdraw any of these consents at any time in the app (Skills Passport screen) or by emailing us; withdrawal stops future sharing and we honour it promptly.
5. Sensitive data & access discounts
If you apply for an access discount, the category you select may be sensitive. We use it solely to check eligibility, restrict who can see it, keep it only as long as needed to administer the discount, and never use it for marketing. You can ask us to delete it once your eligibility is decided.
6. Under-18s
We admit applicants aged 16 and over. For applicants under 18 we require parent/guardian involvement and consent, and we apply additional safeguarding measures. If you believe a child has given us data without appropriate consent, contact us and we will address it.
7. How long we keep it
We keep enquiry data for as long as needed to follow up, and student records for the duration of your programme plus the period required for our legal, tax and guarantee obligations. We then delete or anonymise it. You can ask us to delete your data sooner (see rights below), subject to any records we must retain by law.
8. Your rights
Depending on where you live, you may have the right to: access the data we hold about you; correct it; delete it; port it to another provider; object to or restrict certain processing; and withdraw consent. Students can download or request deletion of their data directly from the learning app (Settings → Your data & privacy). Otherwise, email admin@derrytraining.com and we will respond within the time your law requires.
US residents: where state privacy laws apply (for example California), you have rights to know, delete, correct and opt out of "sale/sharing" — we do not sell your data. UK/EU residents: where the UK GDPR/GDPR applies, you have the rights above and the right to complain to your data-protection authority.
9. International transfers
We are based in the United States, and some providers process data in the US and elsewhere. Where we transfer data internationally we use appropriate safeguards (such as standard contractual clauses) as required.
10. Security
We protect your data with encryption in transit, access controls, optional two-factor authentication for staff, login protection, and regular backups. No system is perfectly secure, but we take reasonable steps and will notify you and the relevant authority of a breach where the law requires.
11. Cookies & similar technologies
We use a small number of cookies and local storage: strictly-necessary ones to run the site and keep you signed in; a preference cookie to remember your light/dark mode; and, if enabled, analytics to understand how the site is used. You can control cookies through your browser settings; blocking strictly-necessary cookies may stop parts of the site working.
12. Changes
We may update this policy; we will change the "last updated" date and, for significant changes, tell you directly.
13. Contact
Questions or requests: admin@derrytraining.com. A person will reply.
