Privacy Policy
This policy explains what personal data WFDF Academy collects, why, who can see it (including your Member National Federation and event organizers checking accreditations), how long it's kept and how to use your rights.
Who We Are
WFDF Academy is run by the World Flying Disc Federation ("WFDF," "we" or "us"), 3630 Sinton Road, Suite 103, Colorado Springs, CO 80907, USA. We decide how your personal data is used, which makes us its "controller" under data protection law.
Questions: privacy@wfdf.sport
What We Collect
|
Type |
Examples |
Required? |
|---|---|---|
|
Account Details |
Name, email, username, password (stored encrypted), country of residence, country of nationality |
Yes |
|
Optional Profile Details |
City, time zone, description, picture, date of birth |
No |
|
Sensitive Optional Details |
Impairment, gender identity |
No. Only with your explicit consent. |
|
Learning Records |
Enrollments, progress, grades, quiz attempts, submissions, forum posts, feedback, certificates and badges |
Created as you use courses |
|
Course-Specific Details |
For facilitated or in-person courses: emergency contact and any health information you choose to share |
Only where the course asks |
|
Payment Records |
Amount, date, course, transaction ID. Card details are handled by PayPal. We never see them. |
For paid courses |
|
Technical Data |
IP address, browser, site activity logs, cookies (see Cookie Policy) |
Automatic |
|
Google Sign-In |
Name, email and picture from your Google account, if you choose to log in with Google |
Optional |
Why We Use It and Our Legal Basis
|
Purpose |
Legal Basis (GDPR) |
|---|---|
|
Running your account and courses, assessing work, issuing certificates, sending course notifications |
Contract (Art. 6(1)(b)) |
|
Verifying certificates and Rules Accreditation status, and using your nationality to check eligibility under WFDF rules and report on participation (section 4) |
Legitimate interests: fair and safe WFDF competitions and trustworthy qualifications (Art. 6(1)(f)). Being listed in the public Certificate Registry is based on your consent (Art. 6(1)(a)). |
|
Sharing records with your Member National Federation |
Legitimate interests: developing coaching and participation in your country (Art. 6(1)(f)) |
|
Safeguarding and handling breaches of the Site Policy |
Legitimate interests and, where it applies, legal obligation (Art. 6(1)(f) and (c)) |
|
De-identified statistics for WFDF planning and reports to funders and partners (for example, course completions by country or gender) |
Legitimate interests (Art. 6(1)(f)). No individual is identifiable in these reports. |
|
Impairment, gender identity and health information |
Your explicit consent (Art. 9(2)(a)), which you can withdraw by deleting the information from your profile or emailing us |
|
Marketing emails |
Your consent (Marketing Consent policy) |
|
Analytics cookies |
Your consent (Cookie Policy) |
|
Payment and tax records |
Legal obligation (Art. 6(1)(c)) |
|
Site security and fraud prevention |
Legitimate interests (Art. 6(1)(f)) |
Where we rely on legitimate interests, we've checked that our interest isn't outweighed by your rights, and you can object.
Photos and Recordings: We may take photos at in-person courses and record live online sessions. Recordings are available to participants on that course. We may also use photos and short clips in WFDF news, social media and education materials, because showing real courses helps us grow Flying Disc Sports (legitimate interests, Art. 6(1)(f)). We won't use them in paid advertising or give them to sponsors for their own use. You can opt out at any time: tell the facilitator, turn off your camera in live sessions, or email privacy@wfdf.sport, and we'll stop using your image in anything new. We don't use photos or recordings of users under 18 in WFDF communications without a parent or guardian's permission.
Certificates, Rules Accreditation and the Certificate Registry
Certificate Verification: Anyone with a certificate's unique code can see: your name, the certificate title, issue date, expiry date (if any) and whether it is valid, expired or revoked.
Rules Accreditation Status Checks: Our staff, organizers of WFDF-sanctioned events and Member National Federations can check whether a player holds a valid Rules Accreditation. They see: name, country, accreditation level, valid-until date and status. Checks may be done on WFDF Academy or through a secure connection (API) from an event registration system. Each organization using the API must have its own access key and may use the results only to confirm eligibility for its events.
Certificate Registry: If you're 18 or over, you can choose to be listed in our public Certificate Registry by ticking "Show me in the Certificate Registry" in your profile. The registry shows your name, country, Member National Federation, and each certificate you hold with its valid-until date. You can untick it at any time. Either way, your certificates can still be checked by code.
No email address, date of birth, grades or other profile details are shown through any of these tools.
Your Member National Federation
Only staff or volunteers the Member National Federation for your country of residence has named to us, and who are covered by a signed data sharing agreement with us, get access.
What They Can See: Your name, country, course enrollments, completion status and dates, certificates, Rules Accreditation status, and expiry dates.
What They Can't See: Grades, quiz answers, submissions, forum posts, impairment, gender identity, health information or payment details.
What They May Use it For: Planning coach and player development, recognizing or licensing coaches under their own programs, confirming eligibility for their events, and, if you've shared your contact details, contacting you about education opportunities. They may not sell your data, pass it on, or use it for unrelated marketing.
Courses Run by Your Member National Federation: If you enroll in a course a Member National Federation delivers on WFDF Academy, that Member National Federation and WFDF share responsibility for your data in that course (both are "joint controllers"). Its facilitators see what they need to run it, including grades and submissions. The course page names the organization responsible.
Objecting: You can object to Member National Federation access by emailing privacy@wfdf.sport. We'll stop it, except for courses that Member National Federation runs and that you're enrolled in.
Who Else Sees Your Data
- Facilitators and assessors on your courses, and any partner organization named on a course page, for that course only.
- Other users can see your name and picture in courses and forums you join. Only our administrators can see your other profile details, unless you choose to show them.
- Companies that provide services to us and follow our instructions: Digital Ocean (hosting), Google (sign-in, and analytics if you accept cookies), Google Gmail (email), PayPal (payments), Google Meet (live sessions).
- Authorities, where the law requires it, or where needed to protect someone's safety under the WFDF Safeguarding Policy.
We don't sell personal data.
Security
Access to personal data is limited to people who need it for their role. Passwords are encrypted, the site uses HTTPS, and administrator accounts use strong authentication.
International Transfers
We're based in the United States. Your data may also be accessed by Member National Federations and course partners in other countries. Where data leaves the EU, EEA or UK, we rely on the EU-U.S. Data Privacy Framework (where the provider is certified) or Standard Contractual Clauses, including in our data sharing agreements with Member National Federations.
How Long We Keep It
|
Data |
Retention |
|---|---|
|
Account and learning records |
While your account is active. If you don't log in for 5 years, we email you; if you still don't log in within 90 days, the account is deleted |
|
Certificate records (name, title, dates, code, status) |
For 10 years after your account is deleted, so the certificate can still be verified, unless you ask us to delete it sooner |
|
Health and emergency contact information for a course |
Deleted 30 days after the course ends |
|
Payment records |
7 years, for tax and audit |
|
Site activity logs |
12 months |
|
Revoked certificates and safeguarding records |
As set out in the WFDF Safeguarding Policy |
|
Marketing consent |
Until you withdraw it |
Your Rights
You can ask to access, correct, delete or download your data, restrict or object to how we use it, and withdraw any consent. Use Profile > Data requests on WFDF Academy, or email privacy@wfdf.sport. We'll reply within 10 business days.
If an automatically graded assessment, such as the Rules Accreditation, affects your eligibility for an event, you can ask for a person to review the result.
You can also complain to the data protection authority where you live. We'd appreciate the chance to resolve it with you first.
Children
Users under 16 (or the age of digital consent in their country, if higher) need a parent or guardian's consent to create an account.
Changes
Material changes are published as a new version that you'll be asked to accept at your next login.