Privacy Policy

Aalam Tibyan ("we", "our", or "us"), based in Jeddah, Saudi Arabia, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you visit aalamtibyan.com (the "Platform"). It is written in compliance with the Saudi Personal Data Protection Law (PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data Controller

2. What Data We Collect

We collect only the data you voluntarily provide through our contact form:

• Full name
• Email address
• Subject and message content

We do not collect payment information, government identification numbers, or sensitive personal data. We do not use cookies for tracking or analytics.

3. How We Use Your Data

We use the information you submit solely to:

• Respond to your inquiry or request.
• Provide information about our courses and educational programmes.
• Improve the quality of our services based on feedback.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (PDPL Art. 5 / GDPR Art. 6(1)(a)): You provide your data voluntarily when submitting the contact form.
• Legitimate interests (PDPL Art. 6 / GDPR Art. 6(1)(f)): Responding to enquiries and improving our educational services.

5. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We may share data with trusted service providers (such as hosting and email infrastructure providers) strictly for the purpose of operating the Platform. All such providers are contractually required to protect your data and may not use it for their own purposes.

6. International Data Transfers

Aalam Tibyan is based in Saudi Arabia. If you access the Platform from outside Saudi Arabia, your data may be transferred to and processed in Saudi Arabia. Where data is transferred to or from the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

7. Data Retention

We retain contact form submissions for no longer than 12 months from the date of receipt, unless a longer retention period is required by law or necessary to resolve an ongoing matter. After this period, data is securely deleted.

8. Your Rights

Under the PDPL and, where applicable, the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no legitimate reason for us to continue processing it.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability (GDPR): Receive your data in a structured, machine-readable format.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us via the contact form on our website. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted to the Platform is encrypted using TLS (HTTPS).

10. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

11. Cookies and Tracking

The Platform does not currently use cookies for tracking, analytics, or advertising. If this changes in the future, we will update this policy and obtain your consent where required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, please contact us first. If you are not satisfied with our response:

• Saudi residents may file a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).
• EU/EEA residents may lodge a complaint with their local data protection supervisory authority.

14. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, please reach us at: