Privacy Policy

Doing Business with the WIOCC Group Training and Learning Management System (LMS) Privacy Policy

This doing business with the WIOCC Group LMS (the “Portal”) is operated by the WIOCC Group (“WIOCC”, “we”, “us”). We determine why and how your personal information is processed for the purposes described in this privacy policy (policy).

WIOCC Group is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using the Portal, then you can be assured that it will only be used in accordance with this policy.

Who this policy applies to

This policy applies to individuals who create an account or use the Portal on behalf of a vendor/supplier/partner organisation, including training and certification.

What information we collect

A. Information you provide directly

When you register and complete training, we may collect:

• Account information: name, email address, company name, username (if used)
• Authentication data: password (stored in hashed form and not in plain text)
• Training and compliance data: training enrollment, module completion, assessment results/scores (if applicable), certificate status/ID, completion date/time
• Attestation and signature: your declaration/attestation of completion and compliance acknowledgement (if applicable)
• Support communications: if you contact us, the content of the message and associated metadata

b. Information you provide directly

We may collect technical/log data to operate and secure Portal, such as: IP address, device/browser type, login time, and audit logs relating to account access and certification.

Why we collect it (purposes)

Why we collect it (purposes)

• Create and manage your Portal account (registration, login, password reset)
• Deliver training (provide access to modules, track progress)
• Assess completion (record completion and test results where applicable)
• Issue evidence of completion (generate certificates and keep an auditable record of completion and attestation/signature)
• Meet compliance and governance objectives (third party integrity and anti corruption programme governance, audit readiness)
• Maintain security and integrity of the Portal (fraud prevention, troubleshooting, access control, logs)
• Handle queries and support

Lawful basis for processing (and comparable grounds)

We rely on one or more of the following lawful grounds:

• Legitimate interests - running an effective third party compliance programme, preventing bribery risks, maintaining audit trails and system security
• Legal obligation - where recordkeeping or compliance obligations apply
• Consent - only where required for a specific activity; you can withdraw consent at any time where consent is the basis

 Is providing information mandatory?

Some information is mandatory to create an account and issue a certificate (name, email, password, company name, company ID and completion record). If you do not provide mandatory information, you may be unable to:

• Access the Portal
• Complete training
• Receive a certificate

Who we share information with (recipients)

We may share your information with:

• Training platform provider(s) hosting the Portal and delivering modules (acting as our processors/operators under contract)
• WIOCC Group companies where it is determined you are providing services through those companies or have a relationship with them
• Lawyers, auditors and other professional advisors
• Regulators/law enforcement where required by law or to protect rights, safety and security

How long we keep your information (retention)

We keep personal information only as long as necessary for the purposes above, including maintaining a defensible compliance record. Usually, it shall be kept for the period of the commercial relationship between us and the entity you represent. Thereafter, it shall be archived for the legally required period or in accordance with relevant industry standards.

Security measures

We are committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

Your rights (how you can control your information)

Depending on your location and applicable law, you may have rights such as:

• Access to your personal information
• Correction/rectification of inaccurate information
• Deletion/erasure in certain circumstances
• Restriction of processing in certain circumstances
• Data portability where applicable
• Withdraw consent where consent is the basis for processing
• Lodge a complaint with a competent supervisory authority/regulator

How to exercise your rights:

You may exercise your rights by emailing us at dpo@wiocc.net . We will take all reasonable steps to confirm your identity before we fulfil your request to exercise your rights. We will respond to your requests as soon as possible and in any case within one month of receipt. However, this may be extended to two months in consideration of the complexity or number of requests.
You may also lodge a complaint with the relevant supervisory authority within your country of jurisdiction.

Children

The Portal is intended for business users acting on behalf of vendors/suppliers and is not directed at children. If you believe a child has provided personal information, contact us at dpo@wiocc.net to address it.

Changes to this notice

WIOCC Group may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This policy is effective from May 2026.