eSAFepath Privacy Policy
Last Updated: 13/10/2024
At eSAFepath, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services (“Services”). eSAFepath is a joint platform operated by PPM Consulting LLC (based in Sharjah Media City Free Zone (SHAMS), Sharjah, UAE) and AISL Consulting FZCO (based in Dubai Silicon Oasis Free Zone, Dubai, UAE).
We are compliant with global data protection regulations, including the General Data Protection Regulation (GDPR) in Europe, MENA data protection laws, the California Consumer Privacy Act (CCPA), and other international privacy laws.
1. Who We Are
eSAFepath is an online e-learning platform specializing in SAFe certification and Agile training. For the purposes of data protection laws, the data controllers are:
- PPM Consulting LLC, located at Sharjah Media City Free Zone (SHAMS), Sharjah, UAE
- AISL Consulting FZCO, located at Dubai Silicon Oasis Free Zone, Dubai, UAE
Our shared contact email is hello@esafepath.ae.
This Privacy Policy applies to users globally, including those in Europe, MENA (Middle East and North Africa), North America, South America, Asia-Pacific, and other regions.
2. What Personal Data We Collect
We collect the following types of personal data when you interact with our Services:
- Personal Identification Data: Name, email address, phone number, and mailing address when you create an account or make a purchase.
- Payment Information: Credit/debit card details or other payment information required for transactions.
- Technical Data: IP address, browser type, device information, and operating system for optimizing the user experience and ensuring security.
- Usage Data: Data on how you use our platform, including your course progress, login information, and preferences.
- Cookies and Tracking Technologies: We use cookies to track your preferences and behavior on our website.
3. How We Use Your Data
We process your personal data for the following purposes:
- Service Delivery: To provide you access to our courses and materials, track your learning progress, and communicate with you regarding course updates.
- Payment Processing: To facilitate and process your payments securely.
- Personalization: To tailor the content and recommendations on the platform based on your learning preferences.
- Communication: To send you notifications regarding your account, including updates, support, and promotional messages (only if you have opted in).
- Legal Obligations: To comply with any legal obligations, resolve disputes, and enforce our agreements.
- Analytics and Improvement: To analyze trends and improve the performance and functionality of the platform.
4. Legal Basis for Processing Data
We ensure compliance with global privacy laws based on the legal grounds applicable in different regions:
For European Union (GDPR Compliance):
Under the General Data Protection Regulation (GDPR), we process personal data based on the following legal grounds:
- Consent: You have given clear consent for us to process your personal data for a specific purpose.
- Contractual Necessity: The processing is necessary for a contract you have with us, such as providing our e-learning services.
- Legal Obligation: We process data to comply with legal obligations.
- Legitimate Interest: Processing is necessary for our legitimate interests, provided it doesn’t override your rights.
For MENA Region:
We comply with local data protection laws in the MENA region, including:
- UAE (Federal Decree-Law No. 45 of 2021), DIFC Data Protection Law No. 5 of 2020, and ADGM Data Protection Regulations 2021.
- Saudi Arabia’s Personal Data Protection Law (PDPL).
- Qatar’s Data Protection Law No. 13 of 2016.
- Bahrain’s Personal Data Protection Law (PDPL) No. 30 of 2018.
- Egypt’s Law No. 151 of 2020.
- Morocco’s Law No. 09-08.
- Tunisia’s Law No. 2004-63.
- Oman’s Electronic Transactions Law.
For United States (CCPA Compliance):
We comply with the California Consumer Privacy Act (CCPA), which gives California residents the following rights:
- Right to Know: You have the right to know what personal information is being collected about you.
- Right to Delete: You can request the deletion of your personal data.
- Right to Opt-Out: You can request that your data is not sold to third parties.
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
For Canada (PIPEDA Compliance):
We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), which ensures that personal data is collected with consent and handled responsibly.
For Brazil (LGPD Compliance):
Under Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados, LGPD), we process data with transparency, consent, and user rights protections.
For Australia (Privacy Act 1988 Compliance):
We comply with Australia’s Privacy Act 1988 and its Australian Privacy Principles (APPs), ensuring that personal data is handled securely and with transparency.
For Other Countries:
- India: We comply with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, under the Information Technology Act, 2000.
- Japan: Compliance with Japan’s Act on the Protection of Personal Information (APPI).
- South Korea: Adherence to the Personal Information Protection Act (PIPA).
- Argentina: We comply with Law No. 25,326 (Data Protection Act) in Argentina.
5. How We Share Your Data
We do not sell your personal data to third parties. However, we may share your data with trusted third parties to provide our Services, including:
- Service Providers: Payment processors, email providers, and hosting services that help us deliver the platform.
- Legal Authorities: We may disclose your personal data if required by law or to protect our rights or the safety of others.
International Data Transfers:
If we transfer your personal data outside the European Economic Area (EEA), MENA region, or your country of residence, we will ensure that such transfers comply with applicable data protection laws. Where necessary, we will implement appropriate safeguards such as standard contractual clauses or rely on adequacy decisions issued by regulatory authorities.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. In some cases, we may anonymize your data for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
7. Your Data Protection Rights
Depending on your location, you have various rights under the applicable data protection laws:
For European Union (GDPR Compliance):
- Right of Access: Request access to the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure: Request the deletion of your personal data, subject to legal limitations.
- Right to Restriction of Processing: Request the restriction of processing under certain conditions.
- Right to Data Portability: Request that your data be transferred to another data controller in a commonly used format.
- Right to Object: Object to the processing of your data based on legitimate interests or direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time.
For MENA Region:
Depending on the local laws applicable in your country, you may have similar rights, such as access, correction, and deletion of personal data.
For United States (CCPA Compliance):
California residents can exercise their rights to know, delete, and opt-out of data sales under the CCPA.
For Brazil (LGPD Compliance):
You have the right to access, correct, delete, and transfer your data under the LGPD.
For Canada (PIPEDA Compliance):
You have the right to access and correct your personal data and make complaints if necessary.
To exercise any of these rights, please contact us at hello@esafepath.ae. We will respond to your request within one month under GDPR, and in line with local legal requirements for other jurisdictions.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience on eSAFepath. Cookies allow us to remember your preferences and understand how you use our platform. You can manage your cookie preferences through your browser settings or by using our cookie management tool.
9. Security of Your Data
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, or destruction. However, please note that no method of transmission over the internet or method of electronic storage is 100% secure.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will notify you by updating the “Last Updated” date at the top of this policy. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: hello@esafepath.ae
Address 1: PPM Consulting LLC, Sharjah Media City Free Zone (SHAMS), Sharjah, UAE
Address 2: AISL Consulting FZCO, Dubai Silicon Oasis Free Zone, Dubai, UAE
