Data Protection & Privacy Policy (PDPL)
Al Falah Education & Consultancy LLC
Last Updated: January 2026
1. Purpose & Legal Basis
Al Falah Education & Consultancy LLC (“Al Falah”, “we”, “us”, “our”) is committed to protecting the privacy and personal data of all users, students, parents, employees, partners, and visitors.
This Policy is issued in compliance with the Personal Data Protection Law (PDPL) and its Implementing Regulations.
2. Scope of Application
This Policy applies to all personal data processed through:
Al Falah websites and subdomains
Online tutoring and education platforms
Job board & recruitment systems
AI-powered assessments and tools
Contact forms, registrations, newsletters
Payment, booking, and enquiry systems
Any digital or physical data collection activities
3. Definitions
Personal Data: Any data that directly or indirectly identifies an individual.
Sensitive Data: Includes health, biometric, genetic, religious, or criminal data.
Data Subject: The individual to whom the personal data relates.
Controller: Al Falah Education & Consultancy LLC.
Processor: Any third-party processing data on our behalf.
4. Categories of Personal Data We Collect
We may collect the following categories of data:
4.1 General Personal Data
Full name
Email address
Phone number
Nationality
Age / date of birth (where required)
Education history
Employment details (job board users)
Login credentials (encrypted)
4.2 Educational & Professional Data
Academic records
Course enrolments
Assessment results
Certificates and transcripts
CVs and portfolios
4.3 Technical & Usage Data
IP address
Browser type
Device information
Cookies and analytics data
4.4 Payment & Transaction Data
Billing details
Payment confirmation records
(Note: Payment data is processed via secure third-party gateways and not stored directly by Al Falah)
5. Purposes of Data Collection
Personal Data is collected and processed for the following lawful purposes:
Delivering educational, consultancy, and training services
Managing student enrolments and learning platforms
Operating job board and recruitment services
Providing AI-based assessments and analytics
Processing payments and bookings
Communicating service updates and support
Legal, regulatory, and contractual compliance
Improving website performance and user experience
6. Legal Grounds for Processing
We process Personal Data based on one or more of the following legal bases:
Explicit consent of the Data Subject
Contractual necessity
Legal obligation
Legitimate interest, provided it does not override Data Subject rights
Public interest or safety, where applicable
7. Consent & Withdrawal
Consent is obtained clearly, transparently, and for specific purposes.
Consent may be withdrawn at any time without affecting prior lawful processing.
Services are not conditional on unnecessary data collection.
8. Data Subject Rights
Data Subjects have the right to:
Be informed of data collection purposes
Access their personal data
Obtain a readable copy of their data
Request correction or updating
Request deletion or destruction of data
Withdraw consent
File a complaint with the competent authority
Requests can be submitted to:
📧 admin@alfalahgroup.ae
9. Data Disclosure & Sharing
Personal Data may only be disclosed to:
Authorized service providers (processors)
Payment gateways
Cloud hosting and IT providers
Regulatory or judicial authorities where legally required
All disclosures are limited to the minimum necessary and governed by contractual safeguards.
10. Cross-Border Data Transfers
Where data is transferred outside the Kingdom or region:
Adequate protection levels are ensured
Transfers are limited to necessity
No transfer compromises national or data subject interests
11. Data Retention & Destruction
Personal Data is retained only for as long as necessary
Data is securely destroyed once its purpose expires
Retention may continue where legally required
12. Data Security Measures
Al Falah implements comprehensive safeguards, including:
Encrypted data storage
Role-based access control
Secure hosting environments
Regular security audits
Staff confidentiality obligations
13. Data Breach Management
In the event of a data breach:
The Competent Authority will be notified promptly
Affected Data Subjects will be informed where harm may occur
Remedial actions will be taken immediately
14. Marketing & Communications
Marketing communications require prior consent
Opt-out mechanisms are always provided
No sensitive data is used for marketing
15. Children & Minors’ Data
Data of minors is processed with parental/guardian consent
Enhanced safeguards are applied
Data use is limited strictly to educational purposes
16. Record Keeping & Accountability
Al Falah maintains records of:
Processing activities
Data categories
Retention periods
Cross-border transfers
17. Policy Updates
This Policy may be updated periodically to reflect:
Legal changes
Service updates
Regulatory guidance
Continued use of our services constitutes acceptance of the updated Policy.
18. Contact Information
Data Controller:
Al Falah Education & Consultancy LLC
📍 United Arab Emirates
📧 pmward@alfalahgroup.ae
🌐 https://alfalahgroup.ae/
This privacy statement was last updated on April 1, 2026 and applies to citizens and legal permanent residents of Brazil.
In this privacy statement, we explain what we do with the data we obtain about you via https://alfalahgroup.ae. We recommend you carefully read this statement. In our processing we comply with the requirements of privacy legislation. That means, among other things, that:
- we clearly state the purposes for which we process personal data. We do this by means of this privacy statement;
- we aim to limit our collection of personal data to only the personal data required for legitimate purposes;
- we first request your explicit consent to process your personal data in cases requiring your consent;
- we take appropriate security measures to protect your personal data and also require this from parties that process personal data on our behalf;
- we respect your right to access your personal data or have it corrected or deleted, at your request.
If you have any questions, or want to know exactly what data we keep of you, please contact us.
1. Purpose, data and retention period
We may collect or receive personal information for a number of purposes connected with our business operations which may include the following: (click to expand)1.1 Contact - Through phone, mail, email and/or webforms
1.1 Contact - Through phone, mail, email and/or webforms
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- IP Address
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.2 Payments
1.2 Payments
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- A telephone number
- IP Address
- A home or other physical address, including street name and name of a city or town
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.3 Registering an account
1.3 Registering an account
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- A telephone number
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.4 Newsletters
1.4 Newsletters
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- Date of birth
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.5 To support services or products that a customer wants to buy or has purchased
1.5 To support services or products that a customer wants to buy or has purchased
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- A telephone number
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.6 To be able to comply with legal obligations
1.6 To be able to comply with legal obligations
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
- A telephone number
- Geolocation data
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.7 Compiling and analyzing statistics for website improvement.
1.7 Compiling and analyzing statistics for website improvement.
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.8 To be able to offer personalized products and services
1.8 To be able to offer personalized products and services
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
1.9 To sell or share data with a third party
1.9 To sell or share data with a third party
For this purpose we use the following data:
- A first and last name
- Account name or alias
- An email address
The basis on which we may process these data is:
Retention period
We retain this data until the service is terminated.
2. What if you don't provide us with your personal information?
If you don't provide us with your personal information, we may not be able to provide you with the information, products or assistance that you are seeking.
3. Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
4. Disclosure practices
We disclose personal information if we are required by law or by a court order, in response to a law enforcement agency, to the extent permitted under other provisions of law, to provide information, or for an investigation on a matter related to public safety.
If our website or organisation is taken over, sold, or involved in a merger or acquisition, your details may be disclosed to our advisers and any prospective purchasers and will be passed on to the new owners.
5. Security
We are committed to the security of personal data. We take appropriate security measures to limit abuse of and unauthorised access to personal data. This ensures that only the necessary persons have access to your data, that access to the data is protected, and that our security measures are regularly reviewed.
6. Third-party websites
This privacy statement does not apply to third-party websites connected by links on our website. We cannot guarantee that these third parties handle your personal data in a reliable or secure manner. We recommend you read the privacy statements of these websites prior to making use of these websites.
7. Amendments to this privacy statement
We reserve the right to make amendments to this privacy statement. It is recommended that you consult this privacy statement regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.
8. Accessing and modifying your data
If you have any questions or want to know which personal data we have about you, please contact us. You can contact us by using the information below. Your rights with respect to personal data:
- confirmation of the existence of processing;
- access to data;
- correction of incomplete, inaccurate, or outdated data;
- anonymization, blocking, or deletion of unnecessary, excessive, or processed data in disagreement with the provisions of the General Law for the Protection of Personal Data (LGPD);
- portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;
- deletion of personal data processed with the consent of the holder, except in the cases provided for in art. 16 of the General Law for the Protection of Personal Data (LGPD);
- information on public and private entities with which the controller shared data;
- information on the possibility of not providing consent and on the consequences of denial.
To exercise these rights, please contact us. Please refer to the contact details at the bottom of this Privacy Statement.
Please make sure to always clearly state who you are, so that we can be certain that we do not modify or delete any data of the wrong person.
9. Submitting a complaint
If you are not satisfied with the way in which we handle (a complaint about) the processing of your personal data, you have the right to submit a complaint to the National Data Protection Authority (ANPD):
Autoridade Nacional de Proteção de Dados
Esplanada dos Ministérios,
Bloco C,
2º andar,
CEP 70297-400 - Brasília – DF.
Website
10. Children
Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.
11. Contact details
Al Falah Education and Consultancy LLC
Shams Business Center, Sharjah Media City free Zone,
Al Messaned, Sharjah, UAE.
United Arab Emirates
Website: https://alfalahgroup.ae
Email: pmward@ex.comalfalahgroup.ae
Phone number: +9710585036501
12. Data Requests
For the most frequently submitted requests, we also offer you the possibility to use our data request form
