Legal
Privacy Notice
Last updated 20 August 2026. This notice explains what personal data we collect when you use Iron Defence Academy, why we collect it, who we share it with, and the rights you have.
Who controls your data
Iron Defence Security Corporation, Ontario, Canada, is the data controller for personal data processed through this website and the StreetWise Women™ programs. Contact: foluwa.rewane@irondefencesecurity.ca or 647-781-5043.
Categories of personal data we collect
- Account data: name, email address, password hash, sign-in timestamps.
- Purchase data: order number, items, amount, currency, transaction and customer identifiers from our payment provider, payment and refund status. We never see or store your full card number.
- Delivery data (merchandise): shipping address, city, region, postal code, country, phone where provided.
- Learning data: module progress, playback positions, quiz and assessment results, notes and transcript highlights you save, certificates issued.
- Enquiry data: workshop and licensing enquiries, accessibility and accommodation requests you choose to submit, and the emergency contact details you add to your safety card.
- Technical data: IP address, device and browser information, and aggregated page and section interaction analytics.
Why we use it and our legal basis
To perform our contract with you (provide course access, workshop seats, certificates and merchandise), to comply with legal and tax obligations, and on the basis of our legitimate interests to secure the service, prevent fraud, and improve the program. Marketing emails are sent only with your consent and every message includes an unsubscribe link. Accommodation and accessibility information is used solely to arrange the adjustment you asked for.
Who we share data with
- Paddle.com Market Ltd — our Merchant of Record and payment processor. Paddle receives your name, email, billing address and purchase details in order to take payment, calculate tax, issue invoices and handle refunds, and acts as an independent controller for that processing.
- Supabase — hosting for our database, authentication and media storage.
- Printify and its print partners — name and shipping address for merchandise orders only.
- Email delivery provider — to send confirmations, receipts, reminders and certificates.
- Your organisation — if you take the course on a corporate or community licence, the licence administrator can see your enrolment status and completion progress, but not your notes or personal enquiries.
We do not sell personal data. Some providers are located outside Canada; transfers are covered by the providers' standard contractual clauses and equivalent safeguards.
Retention
Account and learning records are kept while your account is active and for 12 months after it closes, so certificates can be verified. Transaction records are kept for 7 years to meet tax and accounting obligations. Enquiry records are kept for 24 months.
Your rights
You can request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing based on legitimate interests. You can also withdraw consent to marketing at any time. Email foluwa.rewane@irondefencesecurity.ca and we will respond within 30 days. If you are in Canada you may complain to the Office of the Privacy Commissioner of Canada; in the UK or EU, to your local supervisory authority.
Cookies
We use strictly necessary cookies and local storage to keep you signed in, remember your learning progress, playback position and region, and to run checkout. We do not use advertising cookies.
Related policies
See our terms & conditions and refund policy.
