1. What Personal Data We Collect

We collect only the information needed to operate our services effectively. This may include:

• Identity Information: Name, date of birth, nationality

• Contact Information: Email, phone number, address

• Academic Information: School background, program interest, application details

• Technical Data: IP address, browser type, device information, log data

• Usage Data: Pages visited, time spent, click activity

• Marketing Preferences: Event registrations, newsletter choices

2. How We Collect Your Data

We collect personal data through: 

• Website forms, event signups, and contact requests 

• Communications via email, phone, or messaging platforms 

• Applications or enrolment documents 

• Website analytics tools such as cookies 

• Referrals from partners, institutions, or advertising campaigns

2.1 Website Visitors & Browsing Data

We collect certain information automatically when individuals visit or browse our website, even if they do not submit an enquiry, register for an event, or become a client.

This information may include:

• IP address

• Browser type and version

• Device type and operating system

• Pages viewed and navigation paths

• Date, time, and duration of visits

• Referring URLs

This data is collected through server logs, cookies, and similar technologies and is used to:

• Operate, maintain, and secure our website

• Monitor performance and detect technical issues

• Analyse website usage trends

• Improve content, structure, and user experience

Where possible, this data is aggregated or anonymised and is not used to directly identify individual website visitors.

3. How We Use Your Personal Data

We use your data to: 

• Provide mentoring, events, and educational services 

• Respond to enquiries and support requests 

• Improve website performance and user experience 

• Deliver marketing updates

• Enhance and personalize our services 

• Ensure safety, compliance, and fraud prevention

4. Legal Basis for Processing (PDPL Compliance)

Under the UAE Personal Data Protection Law (PDPL), we rely on one or more of the following lawful bases when processing personal data:

• Consent – for example, when you submit a form, subscribe to communications, or accept non-essential cookies

• Performance of a contract – where processing is necessary to deliver educational services or programmes you have requested

• Legitimate interests – including website operation, security monitoring, analytics, service improvement, and internal administrative purposes, provided such interests do not override your rights

• Legal obligations – where processing is required to comply with applicable laws or regulatory requirements

• For website visitors who do not become clients, personal data is processed primarily on the basis of legitimate interests and, where applicable, consent obtained through cookie preferences.

5. Cookies & Tracking Technologies

We use cookies to support functionality, analyze traffic, customize content, and improve our services.

Website visitors may manage or withdraw their consent for non-essential cookies at any time through our cookie preference tools or browser settings. Essential cookies required for the operation and security of the website cannot be disabled.

5.1 Marketing Communications

You may receive marketing communications, we may send updates about programmes, events, or services.

You may opt out of marketing communications at any time by using the unsubscribe link provided or by contacting us directly.

6. Sharing of Information

We do not sell or rent your data. We may share your data with:

• Trusted service providers (hosting, analytics, communication tools) 

• Event partners or institutions when required for participation 

• Government or regulatory bodies when legally required 

• Third-party processors under strict confidentiality obligations

  
  

6.1 Use of Service Providers and Educational Partners

The Company may share personal data with affiliated entities, tutors, instructors, consultants, or third-party partner companies (including those located outside the UAE) strictly for the purposes of delivering the Services.

Such parties act as data processors on behalf of the Company and are contractually required to process personal data only in accordance with the Company’s instructions, applicable data protection laws, and confidentiality obligations.

7. International Data Transfers

• The Company operates from the United Arab Emirates and may transfer, store, or process personal data in other countries where its service providers, partners, or systems are located, including the United Kingdom.

• Where personal data is transferred outside the UAE, the Company ensures that appropriate safeguards are implemented in accordance with the UAE PDPL, including contractual protections and security measures.

• By using the website or Services, you acknowledge and consent to the transfer of your personal data outside your country of residence, including to jurisdictions that may have different data protection standards.

7.1 International Website Visitors

Our website is operated from the United Arab Emirates but may be accessed by individuals located in other countries.

Where we process personal data of website visitors located outside the UAE, we take reasonable steps to ensure appropriate safeguards are in place and that personal data is handled in accordance with applicable data protection principles.

Where required by applicable law, including where personal data relates to individuals located in the United Kingdom or European Economic Area, the Company applies internationally recognised data protection principles consistent with the UK GDPR and EU GDPR.

8. Data Security

We apply technical, administrative, and organizational security measures including:

• Encryption

• Access controls

• Secure storage

• Data minimization and confidentiality practices

In the event of a personal data breach that poses a risk to individuals’ rights and freedoms, the Company will take appropriate steps in accordance with applicable law, including notification to relevant authorities and affected individuals where required.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and operational requirements.

• Website analytics and technical log data is generally retained for a limited period and then deleted or anonymised

• Enquiry and contact data is retained for follow-up and business purposes unless deletion is requested

• Client and student records are retained in accordance with contractual obligations and legal requirements

When personal data is no longer required, it is securely deleted or anonymised.

10. Your Data Protection Rights

• Subject to applicable law, you may have the right to:

• Access personal data held about you

• Request correction of inaccurate or incomplete data

• Request deletion of personal data

• Withdraw consent where processing is based on consent

• Object to or restrict certain processing activities

• Request portability of personal data where applicable

• Object to automated decision-making, where such processing is used

• Requests may be subject to identity verification and legal or contractual limitations.

  
  

10.1 Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the relevant UAE data protection authority or other competent supervisory authority, where applicable.

10.2 Automated Decision-Making

The Company does not engage in automated decision-making or profiling that produces legal or similarly significant effects on individuals.

11. Children’s Data

• The Company provides educational services that may involve minors. Where personal data relates to a child under the age of 18, the Company collects and processes such data only with the consent of a parent or legal guardian or as otherwise permitted under applicable law.

• The Company takes additional measures to protect children’s data and limits processing strictly to educational, safeguarding, and administrative purposes.

12. Links to Third‑Party Websites

Our website may contain links to external sites. We are not responsible for third‑party privacy practices or content of third-party websites.

13. Withdrawing Consent

You may withdraw consent at any time by contacting us. Withdrawal will not affect the lawfulness of processing already carried out. 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page

with a revised “Last Updated” date.

15. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy:

MEDEFINE EDUCATION INTERNATIONAL L.L.C‑FZ

Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, UAE

Email: info@medefine.org