Privacy Notice

Webclift Air Inc ("we", "us") trades as Alta Professional Accreditation and is the data controller for the personal data described in this notice. We decide why and how that data is processed. You can reach us about any privacy matter through the contact option in the site header.

Account and identity data: first name, last name, business email address, mobile number in international format, job role and the organisation you represent.

Application data: organisation details, country of registration or operation, registration or trading identifiers, training activity details, compliance policy answers, uploaded policy documents, course and module information, and the declaration you sign.

Account security and audit data: login credentials in hashed form, verification and recovery events, IP address, browser user agent, time zone and timestamps recorded with your submissions.

Service usage data: pages used, actions taken in the dashboard, support messages, and records of credit purchases and credit consumption.

To create and operate your account, assess applications, issue accreditation decisions and manage renewals — necessary for performance of our contract with you or to take steps at your request.

To verify the accuracy of information supplied, prevent fraud and misuse, and secure the service — our legitimate interests in running a trustworthy accreditation service, and compliance with legal obligations.

To provide customer support, maintain records, and improve the service — our legitimate interests in operating and improving what we offer.

To send optional service or marketing updates where you have asked for them — your consent, which you may withdraw at any time.

Service providers and subprocessors that host the platform, store documents, secure traffic and support us.

Stripe, our payment processor, for taking payment for credits and for fraud prevention. Stripe handles payment card details directly; we do not receive or store them.

Verification sources where relevant to an application, including fraud prevention agencies, government and regulatory bodies, and third parties named in your application.

Professional advisers such as legal and accounting firms, and authorities where required by law.

Our providers may process data outside your country. Where data leaves the UK or EEA we rely on an adequacy decision or on standard contractual clauses together with appropriate additional safeguards.

Account and accreditation records are kept for the life of the account and for up to seven years afterwards, to evidence decisions and meet legal, tax and audit obligations. Security and fraud logs are kept for up to two years. Data is deleted or anonymised once it is no longer needed.

Subject to local law, you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests or withdraw consent. We respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.

We apply appropriate technical and organisational measures, including encryption in transit, access controls, least-privilege permissions for staff, and audit logging of account activity.

We use strictly necessary cookies to keep you signed in and to protect the service. We do not use advertising cookies. Any analytics cookies are optional and can be managed through your browser settings.