Privacy Policy
(Saudi Personal Data Protection Law – PDPL)
3.1 Data Collection
The Institution collects personal data solely for educational and administrative purposes in compliance with the Saudi PDPL, including:
- Identity data (name, National ID/Iqama, date of birth)
- Contact data (email, phone number, address)
- Academic records (enrollment, assessments, progress)
- Financial data (processed securely via regulated gateways)
3.2 Purpose of Processing
Personal data is processed to:
- Deliver educational services and certifications
- Meet Ministry of Education reporting obligations
- Process payments and prevent fraud
- Communicate academic and administrative updates
3.3 Data Disclosure and Transfer
Personal data is not sold. Data may be shared only with authorized service providers (such as LMS platforms or certification partners) under strict confidentiality obligations. Data may be disclosed to Saudi authorities when required by law. Any cross-border data transfers shall comply with PDPL requirements.
3.4 User Rights
Under the Saudi PDPL, you have the right to:
- Access your personal data
- Request correction of inaccurate information
- Request deletion of data when no longer required, subject to legal retention obligations
- Requests will be addressed within thirty (30) days, unless legally extended.
3.5 Data Security
The Institution applies industry-standard administrative, technical, and organizational security measures to protect personal data. While reasonable safeguards are implemented, no digital system can be guaranteed to be completely secure.
