Privacy Policy

Data We Collect

The data required varies depending on the type of service provided. Data necessary to complete registration in educational or training programs, verify identity, issue certificates, or process payments is mandatory, and failure to provide it may prevent the Academy from delivering the service or completing the registration process.

Other data that is not necessary for providing the service is optional, and choosing not to provide it will not affect your ability to use the core services offered by the Academy.

The personal data collected by the Academy may include, but is not limited to:

• Full name
• National ID or Iqama (residency) number (where required)
• Mobile phone number
• Email address
• Date of birth (where required)
• Academic qualification details
• Registration details for educational or training programs
• Payment and billing details (when electronic payment services are used)
• Device and browser information, IP address, and usage logs
• Cookies and similar tracking technologies

Purpose of Data Collection

Personal data is used for the following purposes:

• Providing educational and training services
• Processing registration and admission applications
• Creating and managing online accounts
• Issuing certificates and academic records
• Communicating with beneficiaries regarding programs and services
• Providing technical support and customer service
• Processing payments and issuing invoices
• Sending notifications and messages related to the services
• Improving user experience and developing the website and services
• Conducting internal analytics and statistics
• Sending marketing messages and offers

Data Sharing

The Academy is keen to ensure that personal data is not sold or rented

Data may be shared with the following parties where necessary:

• Government or regulatory authorities, where required by law
• Technical service providers offering system operation, hosting, technical support, or digital marketing services
• Electronic payment service providers, for processing financial transactions
• Relevant educational or professional bodies, when delivering services requested by the beneficiary

Such sharing is carried out in accordance with the applicable legal requirements and only to the extent necessary to fulfill the intended purpose

Data Protection

The Academy applies appropriate organizational, administrative, and technical measures to protect personal data against:

• Unauthorized access
• Unlawful use or alteration
• Unauthorized disclosure
• Loss, damage, or destruction

Access to data is granted in accordance with the principle of least privilege and in proportion to the nature of the relevant job duties

Data Retention

Personal data is retained for as long as necessary to fulfill the purpose for which it was collected, or for the periods prescribed by the laws and regulations applicable in the Kingdom of Saudi Arabia. Upon expiry of that period, the data is deleted, destroyed, or anonymized by secure means, where feasible

Cookies

The website may use cookies to improve the user experience, analyze website usage, and personalize content and services

Users can control cookie settings through their browser settings, noting that disabling cookies may affect some website functions

External Links

The website may contain links to other websites. The Academy bears no responsibility for the privacy policies or content of those websites, and users are advised to review the privacy policies of such websites when visiting them

Data Subject Rights

In accordance with the provisions of the Personal Data Protection Law of the Kingdom of Saudi Arabia and its relevant Implementing Regulations, the personal data subject enjoys — to the extent permitted by law — the following rights:

• The right to be informed of how their personal data is collected, and of the legal basis and purpose of its processing
• The right to access their personal data
• The right to obtain a copy of their personal data in a clear and readable format, in accordance with the applicable regulatory controls and procedures
• The right to request correction of their personal data if it is inaccurate, incomplete, or not up to date
• The right to request that their personal data be updated where needed
• The right to request deletion or destruction of their personal data in the cases permitted by law
• The right to withdraw consent to the processing of their personal data where consent is the basis of processing, without prejudice to the lawfulness of any processing carried out prior to such withdrawal
• The right to lodge a complaint with the competent authority if they believe their personal data protection rights have been violated, in accordance with the applicable legal procedures

Where the data subject fully or partially lacks legal capacity, these rights are exercised by their legal guardian or legal representative in accordance with the laws and regulations applicable in the Kingdom of Saudi Arabia

If you have any inquiry regarding your personal data, or wish to submit a request relating to it or to any of the rights set out in this Policy, you may contact the Academy of Learning through the official communication channels shown on this page. Your request will be handled in accordance with the approved legal procedures and controls

Information Security

The Academy is committed to following security best practices to protect its systems and data, with continuous review and updating of its security procedures in line with technical risks and regulatory developments

Amendments to the Privacy Policy

The Academy reserves the right to amend this Policy at any time in line with regulatory requirements or operational developments. The updated version will be published on this page, and the last updated date will be revised accordingly

Transfer of Data Outside the Kingdom

Some technical services used by the Academy may require certain personal data to be processed or stored by cloud or technology service providers operating inside or outside the Kingdom of Saudi Arabia

In all cases, the Academy is committed to not transferring or processing personal data outside the Kingdom except where a legal justification exists, and in accordance with the provisions of the Personal Data Protection Law and its Implementing Regulations, while taking the necessary contractual, technical, and organizational measures to ensure an appropriate level of protection for personal data

Service Providers

The Academy relies on a number of technical service providers to support and operate its electronic services. Their access to personal data may be limited to the minimum necessary to provide the service, and they are bound by confidentiality and information security requirements

Examples of these services include:

• Hosting and operation of systems and electronic platforms
• Email and enterprise collaboration services
• Marketing campaign management and electronic communication services
• Electronic payment and financial transaction processing services
• Technical analytics and website performance monitoring services
• Backup and business continuity services
• SMS and electronic notification services

No service provider is permitted to use personal data for any purpose other than providing the agreed service, and all service providers are bound by the contractual and regulatory requirements relating to personal data protection and information security

Legal Basis for Processing Personal Data

The Academy processes personal data on the basis of one or more of the legal bases permitted under the Personal Data Protection Law, including:

• Performance of contractual obligations or provision of a service requested by the data subject
• Compliance with the laws and instructions issued by the competent authorities
• Pursuit of a legitimate interest of the Academy, provided it does not conflict with the rights of data subjects
• The data subject’s consent, in cases where the law requires it

Contact Regarding Personal Data

If you have any inquiry or request concerning your personal data, or wish to exercise any of your rights under the Personal Data Protection Law, you may contact the Academy of Learning Co. through:

Requests will be handled in accordance with the approved legal procedures and controls