Privacy Policy

Effective Date: 24 February 2026
Last Updated: 04 July 2026

  1. Introduction
  • Critical Science Academy is committed to protecting the privacy of users, trainees, and visitors, and to handling their personal data with confidentiality and responsibility, in accordance with the applicable laws and regulations in the Kingdom of Saudi Arabia.
  • This Privacy Policy explains how personal data is collected, used, processed, stored, shared, and protected when using the website, Learning Management System, registering for courses and training programs, making payments, attending training, receiving certificates, or using any of the Academy’s services.
  • By using the Academy’s website, platform, or services, or by providing any personal data to the Academy, you acknowledge that you have read and understood this Policy and agree to the processing of your personal data in accordance with its terms.
  1. Scope of This Policy
  • This Policy applies to all personal data collected or processed through the services of Critical Science Academy, whether provided through the website, learning platform, registration forms, online courses, in-person courses, practical programs, or official communication and support channels.
  • This Policy applies to users, visitors, trainees, participants, and representatives of organizations or companies who interact with the Academy or use its services.
  1. Information We May Collect
  • The Academy may collect and process the data necessary to provide its training services, operate its platform, and manage its courses, depending on the nature of the service or training program. This may include, but is not limited to:
    • Full name.
    • Mobile number.
    • Email address.
    • Account details and username.
    • Professional title, specialty, or employer, when needed.
    • Course and training program registration details.
    • Attendance and participation records.
    • Test and assessment results.
    • Learning progress and completion of educational activities within the platform.
    • Certificate-related information, such as course name, completion date, certificate number, and certificate status.
    • Identification data, such as national ID number or residency number, when needed for purposes related to registration, verification, certificate issuance, or program requirements.
    • Limited payment-related information, such as order number, payment status, transaction amount, payment method, transaction date, and refund-related information when applicable.
    • Communication, inquiry, and technical support request data.
    • Technical data, such as IP address, device type, browser type, operating system, login data, usage activity, and cookies.
    • Any other data voluntarily provided by the user through forms, correspondence, or official communication channels.
  • Payment data is processed through external payment service providers, and the Academy does not store credit card, Mada card, or digital wallet data on its platform.
  1. Purposes of Collecting and Using Data
  • Critical Science Academy uses personal data for purposes related to providing its services, operating its platform, and managing its training programs, including:
    • Creating and managing user accounts.
    • Registering trainees in courses and training programs.
    • Enabling access to the learning platform and training content.
    • Managing online, in-person, and practical courses.
    • Tracking attendance, participation, and learning progress.
    • Managing tests, assessments, and completion requirements.
    • Issuing, managing, and verifying certificates.
    • Verifying trainee information when needed.
    • Processing payments and confirming registrations.
    • Issuing invoices or receipts when needed.
    • Managing cancellation, refund, or rescheduling requests.
    • Providing technical support and customer service.
    • Sending notifications related to accounts, courses, payments, certificates, or service updates.
    • Improving the quality of the website, platform, training services, and user experience.
    • Protecting the platform from fraud, misuse, or unauthorized access.
    • Verifying compliance with the Academy’s policies and terms of use.
    • Maintaining necessary training and operational records.
    • Complying with applicable legal, regulatory, training, or accreditation requirements where applicable.
    • Protecting the rights of the Academy, users, and trainees.
    • Sending informational or promotional messages about training programs and services, in accordance with applicable regulations and with the option for users to stop receiving marketing messages where available.
  1. Legal Basis for Processing Data
  • Personal data is processed based on one or more of the following grounds, depending on the nature of the service and the purpose of processing:
    • User consent where required.
    • Providing a service requested by the user, such as course registration or certificate issuance.
    • Fulfilling obligations related to registration, payment, or training delivery.
    • Complying with applicable legal, regulatory, or training requirements.
    • The Academy’s legitimate interest in operating, protecting, and improving its services.
    • Protecting the security of the platform, the safety of users, and the integrity of training programs.
    • Preserving rights and managing claims or disputes when needed.
  1. Payments and Payment Service Providers
  • Payments may be processed through external payment gateways or payment service providers.
  • Credit card, Mada card, and digital wallet data are processed through approved payment service providers, and Critical Science Academy does not store such data on its platform.
  • Payment transactions are subject to the terms and conditions, privacy policies, and security standards of the payment service provider used.
  • The Academy may retain limited payment-related information, such as order number, payment status, amount, payment method, transaction date, and refund-related information when applicable, for purposes of registration, accounting, support, dispute resolution, compliance, and improving operational processes.
  1. Sharing Data with External Parties
  • Critical Science Academy does not sell or rent the personal data of users or trainees.
  • The Academy may share some personal data with external parties only when needed, for the purpose of providing services, operating the platform, processing payments, issuing certificates, or complying with related requirements.
  • The Academy ensures that any sharing of data is limited to the intended purpose and is handled in a manner that preserves the confidentiality and protection of the data.
  1. Cookies and Tracking Technologies
  • The Academy’s website and learning platform may use cookies and similar technologies for operational and improvement purposes, including:
    • Operating the website and platform properly.
    • Saving user preferences, such as language.
    • Managing sessions and login.
    • Improving user experience.
    • Analyzing website and platform performance.
    • Supporting security and preventing misuse.
  • Users can control cookies through their browser settings. However, disabling some cookies may affect certain functions of the website or platform.
  1. Data Protection and Information Security
  • Critical Science Academy takes appropriate technical and organizational measures to protect personal data from loss, unauthorized access, misuse, alteration, or unauthorized disclosure.
  • These measures may include secure connections, access control, protection of administrative accounts, security tools, system and plugin updates, backups, and monitoring of login attempts or unusual activity.
  • However, transmission of data over the internet or electronic storage cannot be guaranteed to be completely secure. Therefore, users are responsible for maintaining the confidentiality of their login credentials and not sharing them with others.
  1. Data Retention
  • Critical Science Academy retains personal data for the period necessary to fulfill the purposes for which it was collected, or for the period required or permitted under applicable legal, regulatory, accounting, operational, or training requirements.
  • This may include account data, registration data, attendance records, certificates, payments, technical support records, and records related to the provision of training services.
  • When the data is no longer needed, the Academy takes appropriate measures to delete it, anonymize it, or archive it securely, in accordance with applicable requirements.
  1. Certificates and Training Records
  • The Academy may retain certificate data and training records for an appropriate period for the purposes of issuing certificates, verifying their validity, preventing tampering or fraud, maintaining training records, and complying with related requirements.
  • Certificate verification data may include the trainee’s name, course name, certificate number, completion date, and certificate status.
  • Certificate data and training records are used only for purposes related to documentation, verification, recordkeeping, and the operation of training programs.
  1. User Rights
  • In accordance with applicable laws and regulations, users may have certain rights regarding their personal data, including:
    • The right to know how their personal data is collected and used.
    • The right to request access to their personal data.
    • The right to request correction or updating of inaccurate or incomplete data.
    • The right to request deletion of personal data where legally possible.
    • The right to object to the use of data for marketing purposes.
    • The right to withdraw consent where processing is based on consent, without affecting any processing carried out before withdrawal.
    • The right to submit a privacy-related request or inquiry through the Academy’s official channels.
  • The Academy may request verification of the requester’s identity before processing any request related to personal data, in order to protect the user’s privacy and prevent unauthorized access to their data.
  • The Academy may not be able to fulfill some deletion or modification requests where retaining or processing the data is required or justified for legal, regulatory, accounting, training, rights protection, registration proof, attendance proof, or certificate issuance purposes.
  1. Messages and Notifications
  • The Academy may use contact details to send necessary or operational service-related messages, such as registration confirmation, payment confirmation, platform access instructions, course schedules, attendance instructions, course updates, certificate notifications, technical support messages, or policy and service updates.
  • The Academy may also send informational or promotional messages about courses, programs, or services in accordance with applicable regulations, with the option for users to stop receiving marketing messages where available.
  • Stopping marketing messages does not include necessary messages related to the account, registration, payment, certificates, or service delivery.
  1. In-Person Training and Documentation
  • When participating in in-person, practical, or simulation-based courses, data necessary for organizing the training may be collected, such as attendance records, safety requirements, practical participation, or practical assessment results.
  • The Academy may document some programs or events through photos or videos for educational, documentation, or media purposes. If photos or videos clearly showing the trainee are used for marketing or public publication, the Academy seeks to obtain appropriate consent where required.
  • Trainees may inform the Academy if they do not wish to appear in photos or media materials, and the Academy will seek to accommodate this as much as possible according to the nature of the event and operational arrangements.
  1. External Links and Third-Party Services
  • The Academy’s website or platform may contain links to external websites, services, or tools, such as payment gateways, video platforms, technical support tools, or educational resources.
  • Critical Science Academy is not responsible for the content, availability, privacy policies, or security practices of any external party.
  • Users are encouraged to review the privacy policies and terms of any external service before using it.
  1. Data Processing Through Service Providers
  • Critical Science Academy may use technical or operational service providers to assist with operating the website and learning platform, processing payments, sending messages, providing technical support, and improving services.
  • The Academy is committed to working with trusted service providers that adhere to confidentiality and data protection requirements, in accordance with the applicable laws and regulations in the Kingdom of Saudi Arabia.
  • Data sharing with service providers is limited to what is necessary to provide or operate the service, or to fulfill related requirements.
  1. Data Security Incidents
  • In the event of a security incident or suspected personal data breach, the Academy will take appropriate measures according to the nature of the incident. These may include investigating the incident, reducing its impact, addressing the cause, protecting affected systems and data, and notifying users or competent authorities where required.
  1. Updates to This Privacy Policy
  • Critical Science Academy reserves the right to amend or update this Privacy Policy at any time.
  • Any amendments become effective upon publication on the website, unless otherwise stated.
  • Users are encouraged to review this Policy periodically. Continued use of the website, platform, or services after updates are published constitutes acceptance of the updated Privacy Policy.
  1. Language
  • This Privacy Policy may be made available in Arabic and English.
  • In the event of any inconsistency or conflict between the Arabic and English versions, the Arabic version shall prevail, unless otherwise required by applicable law.
  1. Relationship with Other Policies
  • This Privacy Policy should be read together with the Terms and Conditions, Refund and Cancellation Policy, and any other policies or instructions published on the Academy’s website or related to courses and training programs.
  1. Contact Information
  • For privacy-related inquiries, requests, or to exercise rights related to personal data, users may contact Critical Science Academy through the official communication channels available on the website.
Enrollment Summary
Scroll to Top