Back

Data Protection & Privacy Policy (PDPL)

Al Falah Education & Consultancy LLC

Last Updated: January 2026


1. Purpose & Legal Basis

Al Falah Education & Consultancy LLC (“Al Falah”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of all users, students, parents, employees, partners, and visitors.

This Policy is issued in compliance with the Personal Data Protection Law (PDPL) and its Implementing Regulations.


2. Scope of Application

This Policy applies to all personal data processed through:

  • Al Falah websites and subdomains

  • Online tutoring and education platforms

  • Job board & recruitment systems

  • AI-powered assessments and tools

  • Contact forms, registrations, newsletters

  • Payment, booking, and enquiry systems

  • Any digital or physical data collection activities


3. Definitions

  • Personal Data: Any data that directly or indirectly identifies an individual.

  • Sensitive Data: Includes health, biometric, genetic, religious, or criminal data.

  • Data Subject: The individual to whom the personal data relates.

  • Controller: Al Falah Education & Consultancy LLC.

  • Processor: Any third-party processing data on our behalf.


4. Categories of Personal Data We Collect

We may collect the following categories of data:

4.1 General Personal Data

  • Full name

  • Email address

  • Phone number

  • Nationality

  • Age / date of birth (where required)

  • Education history

  • Employment details (job board users)

  • Login credentials (encrypted)

4.2 Educational & Professional Data

  • Academic records

  • Course enrolments

  • Assessment results

  • Certificates and transcripts

  • CVs and portfolios

4.3 Technical & Usage Data

  • IP address

  • Browser type

  • Device information

  • Cookies and analytics data

4.4 Payment & Transaction Data

  • Billing details

  • Payment confirmation records
    (Note: Payment data is processed via secure third-party gateways and not stored directly by Al Falah)


5. Purposes of Data Collection

Personal Data is collected and processed for the following lawful purposes:

  • Delivering educational, consultancy, and training services

  • Managing student enrolments and learning platforms

  • Operating job board and recruitment services

  • Providing AI-based assessments and analytics

  • Processing payments and bookings

  • Communicating service updates and support

  • Legal, regulatory, and contractual compliance

  • Improving website performance and user experience


6. Legal Grounds for Processing

We process Personal Data based on one or more of the following legal bases:

  • Explicit consent of the Data Subject

  • Contractual necessity

  • Legal obligation

  • Legitimate interest, provided it does not override Data Subject rights

  • Public interest or safety, where applicable


7. Consent & Withdrawal

  • Consent is obtained clearly, transparently, and for specific purposes.

  • Consent may be withdrawn at any time without affecting prior lawful processing.

  • Services are not conditional on unnecessary data collection.


8. Data Subject Rights

Data Subjects have the right to:

  1. Be informed of data collection purposes

  2. Access their personal data

  3. Obtain a readable copy of their data

  4. Request correction or updating

  5. Request deletion or destruction of data

  6. Withdraw consent

  7. File a complaint with the competent authority

Requests can be submitted to:
📧 admin@alfalahgroup.ae


9. Data Disclosure & Sharing

Personal Data may only be disclosed to:

  • Authorized service providers (processors)

  • Payment gateways

  • Cloud hosting and IT providers

  • Regulatory or judicial authorities where legally required

All disclosures are limited to the minimum necessary and governed by contractual safeguards.


10. Cross-Border Data Transfers

Where data is transferred outside the Kingdom or region:

  • Adequate protection levels are ensured

  • Transfers are limited to necessity

  • No transfer compromises national or data subject interests


11. Data Retention & Destruction

  • Personal Data is retained only for as long as necessary

  • Data is securely destroyed once its purpose expires

  • Retention may continue where legally required


12. Data Security Measures

Al Falah implements comprehensive safeguards, including:

  • Encrypted data storage

  • Role-based access control

  • Secure hosting environments

  • Regular security audits

  • Staff confidentiality obligations


13. Data Breach Management

In the event of a data breach:

  • The Competent Authority will be notified promptly

  • Affected Data Subjects will be informed where harm may occur

  • Remedial actions will be taken immediately


14. Marketing & Communications

  • Marketing communications require prior consent

  • Opt-out mechanisms are always provided

  • No sensitive data is used for marketing


15. Children & Minors’ Data

  • Data of minors is processed with parental/guardian consent

  • Enhanced safeguards are applied

  • Data use is limited strictly to educational purposes


16. Record Keeping & Accountability

Al Falah maintains records of:

  • Processing activities

  • Data categories

  • Retention periods

  • Cross-border transfers


17. Policy Updates

This Policy may be updated periodically to reflect:

  • Legal changes

  • Service updates

  • Regulatory guidance

Continued use of our services constitutes acceptance of the updated Policy.


18. Contact Information

Data Controller:
Al Falah Education & Consultancy LLC
📍 United Arab Emirates
📧 pmward@alfalahgroup.ae
🌐 https://alfalahgroup.ae/

This privacy statement was last updated on April 1, 2026 and applies to citizens and legal permanent residents of Brazil.

In this privacy statement, we explain what we do with the data we obtain about you via https://alfalahgroup.ae. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:

  • we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
  • we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
  • we first request your explicit consent to process your personal data in cases requiring your consent;
  • we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
  • we respect your right to access your personal data or have it corrected or deleted, at your request.

If you have any questions, or want to know exactly what data we keep of you, please contact us.

1. Purpose, data and retention period

We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)

2. What if you don't provide us with your personal information?

If you don't provide us with your personal information, we may not be able to provide you with the information, products or assistance that you are seeking.

3. Cookies

Our website uses cookies. For more information about cookies, please refer to our Cookie Policy

4. Disclosure practices

We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.

If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.

5. Security

We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.

6. Third-party websites

This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.

7. Amendments to this privacy statement

We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.

8. Accessing and modifying your data

If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. Your rights with respect to personal data:

  • confirmation of the existence of processing;
  • access to data;
  • correction of incomplete, inaccurate, or outdated data;
  • anonymization, blocking, or deletion of unnecessary, excessive, or processed data in disagreement with the provisions of the General Law for the Protection of Personal Data (LGPD);
  • portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;
  • deletion of personal data processed with the consent of the holder, except in the cases provided for in art. 16 of the General Law for the Protection of Personal Data (LGPD);
  • information on public and private entities with which the controller shared data;
  • information on the possibility of not providing consent and on the consequences of denial.

To exercise these rights, please contact us. Please refer to the contact details at the bottom of this Privacy Statement.

Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.

9. Submitting a complaint

If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the National Data Protection Authority (ANPD):


Autoridade Nacional de Proteção de Dados

Esplanada dos Ministérios,
Bloco C,
2º andar,
CEP 70297-400 - Brasília – DF.
Website

10. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

11. Contact details

Al Falah Education and Consultancy LLC
Shams Business Center, Sharjah Media City free Zone,
Al Messaned, Sharjah, UAE.
United Arab Emirates
Website: https://alfalahgroup.ae
Email: pmward@ex.comalfalahgroup.ae
Phone number: +9710585036501

12. Data Requests

For the most frequently submitted requests, we also offer you the possibility to use our data request form

×