Privacy Policy

For authorised programme delivery, the relevant institution or programme operator may collect the following categories of information:

• Identity Information: Public applications collect a full name, gender, age group and, optionally, only the final four National ID digits. Additional verified identity information may be collected later for accepted enrolments where authorised.
• Contact Information: Home address, parish, phone number, and email address.
• Programme Information: Course enrolment, training centre, trainer assignment, employer details, attendance records, quiz scores, and certification status.
• Financial Information: Stipend eligibility, payment records, and bank account details (collected offline and referenced by record ID only).
• Technical Information: IP address, browser type, device identifier, GPS location (when you use the digital check-in feature), and access logs.
• Account Credentials: An account is not required to apply. Applicants who optionally use approved trainee OAuth may provide a verified email address and display name; staff OAuth is not permitted.
• Emergency Contact: Name and phone number of a designated emergency contact.

Information is used only for authorised programme delivery and platform operations, including:

• Registering and managing trainee enrolments and course placements
• Tracking and verifying daily attendance through digital check-in
• Calculating and processing stipend payments
• Managing job attachment placements with approved employer partners
• Issuing digital certificates and badges upon programme completion
• Sending notifications about your registration, attendance, stipends, or programme updates
• Enabling trainers and employers to fulfil their obligations under the programme
• Maintaining audit logs for authorised governance and compliance requirements
• Generating anonymised statistical reports on programme outcomes
• Authenticating trainee identities through approved methods and staff identities through official email and password

Trainee social sign-in: When a trainee chooses an approved social provider, SKILVANTA receives only the account details required for authentication, such as name and email. It does not request access to unrelated services. Staff accounts must use official institution email and password sign-in.

We do not sell your personal data. We share information only in the following limited circumstances:

• Assigned Institution Administrators & Trainers: To manage training, attendance and progress only within their institution and authorised assignments.
• Approved Employer Partners: To facilitate a placement; employers receive only the information needed for trainees assigned to them.
• Ministry of Training and Tertiary Education: To receive aggregate programme oversight by default, without routine trainee-level personal information.
• Authorised Technology Operators: To operate and maintain SKILVANTA under documented confidentiality and data-processing obligations.
• Base44 (Cloud Infrastructure): The platform is hosted on Base44's cloud infrastructure. Data is processed in accordance with their data processing agreement.
• Law Enforcement or Legal Authority: Where required by law, court order, or to protect the rights and safety of individuals.

We implement industry-standard security measures to protect your personal information:

• All data is transmitted over encrypted HTTPS connections (TLS 1.2+)
• Passwords are hashed and never stored in plain text
• Role-based and institution-level tenant rules restrict personal data to authorised users
• All administrative actions are recorded in a tamper-evident audit log
• GPS location data captured at check-in is used solely for attendance verification and is not shared externally
• We conduct regular security reviews of our platform and access controls

While we take every reasonable precaution, no system can guarantee absolute security. If you suspect unauthorised access to your account, please contact us immediately.

As a data subject under applicable Barbados data protection principles and international best practices, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your data where it is no longer necessary for the purposes for which it was collected (subject to legal retention requirements).
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

Submit privacy requests to the responsible participating institution or its designated privacy contact using the verified contact published inside your institution dashboard.

We retain your personal data for as long as is necessary to fulfil the purposes described in this policy, or as required by law:

• Programme records are retained according to the responsible institution's approved retention schedule and applicable law.
• Attendance and financial records follow documented operational and statutory retention requirements.
• Account records are deactivated or deleted through an authorised request, subject to valid retention holds.
• Audit records are retained according to the platform governance schedule.

The SKILVANTA platform uses minimal cookies strictly necessary for platform operation:

• Session Cookies: Used to maintain your authenticated login session. These expire when you close your browser or sign out.
• Preference Cookies: Used to remember interface preferences such as theme or language.

We do not use advertising cookies, cross-site tracking, or analytics that identify you individually across other websites.

The SKILVANTA platform is intended for users aged 16 and above. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If you believe a minor has submitted personal information without appropriate consent, please contact us immediately.

We may update this Privacy Policy from time to time. Material changes will be communicated to registered users via email or an in-platform notification at least 14 days before they take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.