Privacy Policy

Last updated: 5 March 2026

1. Who We Are

LiftCert operates the website liftcert.ie and provides online Manual Handling awareness training and certification services. For data protection purposes, LiftCert is the data controller. Contact: info@liftcert.ie.

2. Data We Collect

  • Account data: full name, email address, password (hashed, managed by Clerk).
  • Payment data: processed by Stripe. We receive only a payment confirmation and session ID — we never see or store card numbers.
  • Training data: course progress, exam answers, exam score, exam attempts, exam pass/fail status.
  • Certificate data: certificate number, issue date, expiry date, PDF file stored in Azure Blob Storage.
  • Employment opt-in data: if you choose to join the job board, your opt-in status and selection status.
  • Technical data: IP address (server logs, short-term retention), browser type (analytics only if you consent).

3. How We Use Your Data

  • To provide the training course and generate your certificate.
  • To process your payment and send receipts.
  • To send your certificate and, if requested, an employer letter.
  • To enable certificate verification by employers (via QR code/link).
  • If you opt into the job board: to share your certificate details with vetted partner employers.

4. Legal Basis (GDPR)

  • Contract performance: processing your order and delivering the course/certificate.
  • Legitimate interests: fraud prevention, platform security.
  • Consent: job board opt-in, optional marketing communications.

5. Data Sharing

We share data only with the following processors:

  • Clerk — authentication and identity management.
  • Stripe — payment processing.
  • Microsoft Azure — database (Cosmos DB) and file storage (Blob Storage).
  • Resend — transactional email delivery.
  • Partner employers — only if you opt into the job board and only your name and certificate information.

We do not sell your data to any third party.

6. Data Retention

  • Account and certificate data: retained for the lifetime of your certificate (3 years) plus 1 year.
  • Exam attempt data: retained for 3 years.
  • Payment records: retained for 7 years (Irish Revenue requirement).

7. Your Rights

Under GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Erasure ("right to be forgotten") — subject to legal retention obligations.
  • Restrict or object to processing.
  • Data portability.
  • Lodge a complaint with the Data Protection Commission (dataprotection.ie).

To exercise any right, email info@liftcert.ie.

8. Cookies

We use essential cookies for authentication and session management. See our Cookie Policy for details.

9. Changes to This Policy

We may update this policy. Material changes will be notified by email or a notice on the site. Continued use after changes constitutes acceptance.