Privacy Policy

Last updated: 2025 | Effective upon publication.

1. Introduction

Altahtheeb Educational Services Co. ("the School", "we", "us") is committed to protecting the privacy and personal data of students, parents, guardians, and website visitors. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2. Data Controller

3. Data We Collect

We collect the following categories of personal data through our website, online admission portal, and enrollment process:

3.1 Student Data

• Full name (Arabic and English), date of birth, gender, nationality
• National ID number / Iqama number
• Passport number (if applicable)
• Academic records: grade, previous school, performance history
• Health and medical information: chronic conditions, psychological conditions, allergies, special needs — collected as required by the enrollment contract and to ensure student safety
• Attendance records, report cards, and academic results
• Transportation requirements and route information

3.2 Guardian / Parent Data

• Full name (Arabic and English), National ID / Iqama
• Who is applying (father or other guardian) and relation to the student when applicable
• Mobile number, email address, home address
• Occupation and employer name
• Financial information related to fee payments
• Electronic signatures on contracts and acknowledgment forms

3.3 Website Usage Data

• IP address, browser type, pages visited, session duration
• Documents uploaded through the admission portal
• Form submission data

4. How We Use Your Data

Purpose	Legal Basis (PDPL)
Processing and evaluating admission applications	Contractual necessity / Consent
Enrollment, contract signing and record keeping	Contractual necessity
Providing education, monitoring attendance and performance	Contractual necessity / Legal obligation
Health and safety of the student (medical data)	Vital interests / Contractual necessity
Fee invoicing, payment collection and financial reporting (ZATCA)	Legal obligation / Contractual necessity
Ministry of Education reporting (Noor system)	Legal obligation
Communication regarding student progress, events, announcements	Legitimate interest / Consent
Transportation management	Contractual necessity
Improving our website and services	Legitimate interest

5. Medical and Health Data

Health and psychological information disclosed about the student is strictly confidential and used exclusively for student welfare and school operations. It is not shared externally except where required by law or for immediate medical care. Per the enrollment contract, failure to disclose chronic conditions may result in contract termination without refund.

6. Data Sharing

We do not sell personal data. We may share data with:

• Ministry of Education (Noor system) — as required by law
• Zakat, Tax and Customs Authority (ZATCA) — for VAT compliance and e-invoicing
• Mawhiba Foundation / gifted programs — for enrolled gifted students per partnership agreements
• Transportation service providers — route and student data necessary for service
• Authorized school IT systems — e-learning platforms, SMS providers, email services
• Courts or regulatory authorities — when legally compelled

7. Data Retention

Personal data is retained as follows:

• Student academic records: for the duration of enrollment plus a minimum of 10 years after leaving, as required by Ministry of Education regulations
• Financial records: minimum 10 years per Saudi accounting regulations
• Admission applications (rejected): 2 years
• Website logs: 12 months

8. Your Rights Under PDPL

Under the Saudi Personal Data Protection Law, you have the right to:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion where legally permissible
• Objection — object to certain processing activities
• Data portability — receive your data in a structured format
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact the school administration. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Our ERP system (Odoo) is hosted on secured infrastructure with access controls, encryption, and audit trails.

10. Cookies

Our website uses essential cookies required for functionality (session management, security). No advertising or tracking cookies are used without consent. You may disable cookies in your browser settings, but some features may not function correctly.

11. Children's Privacy

Our services are directed at enrolled students under parental/guardian supervision. All data relating to minors is collected from and managed by their parent or legal guardian, who provides consent on the child's behalf.

12. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be published on this page with a revised date. Continued use of our services after changes constitutes acceptance.

13. Contact Us

For privacy-related requests or complaints, contact the school administration: +966 920 013 655 |. You also have the right to file a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data rights have been violated.