Privacy policy

Fit2Trade Ltd (“Fit2Trade”, “we”, “us”) is based at 32 Fitzwilliam Street Upper, Dublin 2, Ireland. This Privacy Policy explains how we process personal data through our websites, sales and business activities, customer administration, support and the Fit2Trade platform.

For our own website, sales, account-management and business-administration activities, Fit2Trade generally acts as a data controller. Where a customer uses Fit2Trade to process personal data about its employees, contractors, learners or other users, Fit2Trade generally acts as a data processor on that customer’s documented instructions. The exact role depends on the processing activity and the applicable Customer Agreement.

Depending on how you interact with Fit2Trade, we may process:

• identity and contact information, such as name, work email address, telephone number, organisation and job role;
• website enquiry, demo-request and correspondence information;
• account information and authentication-related identifiers;
• customer-administration and commercial contact information;
• learning, compliance, operational, safety, licence, contractor or other service records where these are entered into the platform by or for a customer;
• support requests and communications with our team;
• technical, device, IP-address, security-log and service-usage information; and
• other information you or a customer choose to provide through the Services.

We collect personal data directly from you, from the organisation that provides your Fit2Trade access, from authorised customer administrators, from your use of the website or Services, and from our service providers where necessary to operate and secure the Services.

If your employer, client or another organisation controls your Fit2Trade account or the underlying records, that organisation is responsible for explaining its own purposes for processing your personal data.

Where Fit2Trade acts as controller, we process personal data only where we have a lawful basis. Depending on the activity, this may include:

Enquiries and demos

To respond to requests, arrange demonstrations and take steps towards a contract. We rely on steps requested before entering a contract and/or our legitimate interests in responding to business enquiries.

Customer and account administration

To set up services, manage customer contacts, administer accounts and deliver agreed services. We rely on contract and legitimate interests in operating our customer relationships.

Support and service communications

To answer support requests, communicate about service changes and provide operational notices. We rely on contract and legitimate interests in supporting and operating the Services.

Security and service integrity

To authenticate users, investigate incidents, prevent misuse, maintain logs and protect systems. We rely on legitimate interests in securing Fit2Trade and customer data and, where applicable, legal obligations.

Business marketing

To send relevant business-to-business information about Fit2Trade where permitted by law. We rely on consent where required and otherwise on legitimate interests, with an easy way to opt out.

Legal and governance

To comply with law, establish or defend legal claims, maintain records and protect our rights. We rely on legal obligations and legitimate interests.

Customers determine the purposes for which their workforce or operational data is entered into Fit2Trade. When we process that personal data on a customer’s behalf, we do so under the customer’s instructions and the applicable Customer Agreement and Data Processing Agreement.

If you are an end user and your question concerns data your employer or another Fit2Trade customer controls, you may need to contact that organisation first. We will assist customers with data-protection obligations as required by the applicable agreement and law.

We do not sell personal data. We may disclose personal data to:

• service providers and subprocessors that host, secure, deliver, monitor or support Fit2Trade;
• professional advisers and insurers where necessary;
• public authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law; and
• a purchaser or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

Our current service-provider categories and named subprocessors are published on the Subprocessors page. The specific providers used may depend on the service, module or configuration.

Some service providers may process personal data outside Ireland or the European Economic Area. Where a transfer is subject to GDPR international-transfer rules, Fit2Trade uses an appropriate lawful transfer mechanism as required, such as an adequacy decision or approved contractual safeguards.

Customers can request further transfer information through dpo@fit2trade.com as part of privacy or procurement review.

We retain personal data only for as long as necessary for the purpose for which it was collected, including to provide services, maintain appropriate business and security records, comply with legal obligations, resolve disputes and enforce agreements.

Retention periods vary by data type and context. Customer-controlled platform data is retained, returned or deleted in accordance with the applicable Customer Agreement, Data Processing Agreement and customer instructions. We periodically review whether personal data is still required.

Fit2Trade uses technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Security controls are described at a high level in our Trust Centre.

No online service can guarantee absolute security. Users must protect their credentials and report suspected account compromise promptly.

The redesigned marketing website does not intentionally deploy advertising or analytics cookies in its current source configuration. The pricing calculator can store a saved quote in your browser’s local storage when you choose “Save quote”.

See the Cookie & Browser Storage Policy for current details. If we add non-essential cookies or similar tracking that requires consent, we will update our notice and consent controls before using them.

You can ask us to stop sending direct marketing at any time by using the unsubscribe option in the message where provided or by contacting us. Opting out of marketing does not prevent us from sending service, security, contractual or administrative communications where these are necessary.

Depending on the circumstances and applicable law, you may have rights to request access to your personal data, correct inaccurate data, request erasure, restrict processing, receive certain data in a portable form, and object to certain processing. Where processing is based on consent, you may withdraw that consent without affecting earlier lawful processing.

To exercise a right concerning processing for which Fit2Trade is controller, contact dpo@fit2trade.com. We may need information to verify your identity and understand the request. Some rights are subject to legal conditions and exemptions.

You can contact our Data Protection Officer at dpo@fit2trade.com.

You also have the right to raise a concern with the Irish Data Protection Commission or another competent supervisory authority where applicable. Information about the Irish Data Protection Commission is available at dataprotection.ie.

We may update this Privacy Policy when our processing, services or legal obligations change. The current version will be published on this page with the date of the latest update. Material privacy information may also be communicated directly where appropriate.