ESELegal

Privacy Notice

Last updated: 8 August 2026

This Privacy Notice explains how Alhalaal Digital Innovations Ltd (“we”, “us”, “our”), the operator of the EduTech Services Ecosystem (“ESE”), collects, uses, stores, and protects your personal data when you use our Platform.

1. Data Controller

Alhalaal Digital Innovations Ltd is the data controller for personal data processed through ESE. If you have any questions about this notice or your data rights, please contact us at support@ese.alhalaal.tech.

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Identity and contact data: name, email address, profile photo, role, institution affiliation.
  • Account data: login credentials, user role, subscription status, and account preferences.
  • Usage data: learning progress, assessment responses, library searches, document projects, and feature usage.
  • Communications data: support messages, feedback, and survey responses.
  • Technical data: IP address, device type, browser, operating system, and cookies or similar identifiers.

3. How We Use Your Data

We process your personal data for the following purposes:

  • Creating and managing your account and providing the ESE service.
  • Personalising learning content, recommendations, and dashboards.
  • Processing assessments, certifications, and progress tracking.
  • Processing payments, subscriptions, and billing through Paddle.
  • Ensuring security, fraud prevention, and platform integrity.
  • Improving our products, analytics, and customer support.
  • Sending service-related notifications and, where permitted, marketing communications.

4. Legal Basis for Processing

We process personal data on the basis of contract performance, legitimate interests, consent (where required), and legal obligation. For example, account data is necessary to perform our contract with you, while analytics and product improvement rely on legitimate interests. Marketing communications are sent only with your consent, which you may withdraw at any time.

5. Data Sharing and Recipients

We share personal data only where necessary and with appropriate safeguards:

  • Service providers: hosting, analytics, email, customer support, and AI inference providers bound by confidentiality and data protection obligations.
  • Paddle: our Merchant of Record, which processes payments, subscription management, tax compliance, and invoicing on our behalf.
  • Professional advisers: legal, accounting, and audit services where required.
  • Authorities: where required by law or to protect our rights and users.

6. International Transfers

Some of our service providers operate outside your country of residence. When we transfer personal data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions recognised under applicable data protection law.

7. Data Retention

We retain personal data for as long as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymise it.

8. Your Data Rights

Depending on your location, you may have rights including access, rectification, erasure, restriction of processing, data portability, objection to processing, and withdrawal of consent. We aim to respond to requests within one month. To exercise your rights, contact us at support@ese.alhalaal.tech.

9. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

10. Cookies and Tracking

ESE uses essential cookies to operate the Platform and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings. Essential cookies cannot be disabled without affecting service functionality.

11. Children's Privacy

ESE is intended for users who are at least 13 years old, or the minimum age required by local law. We do not knowingly collect personal data from children below the applicable age without verifiable parental consent. If you believe we have collected such data, please contact us.

12. Changes to This Notice

We may update this Privacy Notice from time to time. We will notify you of material changes and update the “Last updated” date at the top of this page.

13. Contact Us

For privacy-related questions, please contact us at support@ese.alhalaal.tech.