Privacy Policy

1. Introduction

[اسم الشركة / Company name] ("the Company") is committed to protecting the privacy of users of the online tuition-fee payment service. This policy explains what data we collect, how we use it, who we share it with and your rights. By using the service you acknowledge that you have read this policy.

Effective date of this version: [تاريخ السريان / Effective date].

2. Data We Collect

We collect the minimum data needed to carry out the payment, which, depending on the case, includes:

• Student identification data: name, national ID or university number, faculty, department and academic level.
• Transaction data: amount, order number, reference transaction number, payment status, date and time.
• Technical data: network (IP) address, the time terms and conditions were accepted, and operational logs needed for security and abuse detection.
• Contact details that the user provides when requesting support.

3. Payment Card Data

Payment card details are entered entirely on the secure payment page of QNB and the Mastercard Payment Gateway Services (MPGS) platform, not on our website.

We do not collect, store or log the full card number, the security code (CVV/CVC) or the PIN. We may keep only non-sensitive information that the payment gateway returns to us, such as the card brand, the last four digits, the identity-authentication (3-D Secure) status and the transaction result.

4. How We Use Data

We use data only for the following purposes:

• To carry out and confirm the payment and issue the receipt.
• To link the payment status to the university or educational body concerned.
• To prevent fraud, review suspicious transactions and protect users.
• To provide technical support and customer service and handle complaints.
• To comply with legal, regulatory and accounting obligations.

5. Sharing of Data

We may share only the data needed to complete the service with:

• The university or educational body to which the fees are paid.
• The payment provider (QNB and the MPGS platform) to execute and verify the transaction.
• Technical service providers acting on our behalf under appropriate confidentiality obligations.
• Official authorities where the law requires it.

We do not sell or rent your personal data to any third party for marketing purposes.

6. Data Retention

We keep transaction data and related records for as long as needed for accounting, audit, dispute resolution and legal compliance, currently: [مدة الاحتفاظ / Retention period]. After that period the data is deleted or anonymised unless the law requires otherwise.

7. Data Security

We apply appropriate technical and organisational measures to protect data, including encrypted connections (HTTPS), restricting access to authorised persons, audit logs, and verifying the result of every transaction directly with the payment gateway before it is accepted. No system is completely secure, and we undertake to handle any security incident promptly.

8. Your Rights

Subject to applicable law, you may ask to access the personal data we hold about you, to have it corrected, deleted or its processing restricted where this is possible and does not conflict with our legal and accounting obligations, and you may object to the processing of your data. To exercise these rights please contact us using the details below.

9. Cookies

We use only the cookies that are strictly necessary to run your session and protect the site. We do not use them for advertising or marketing tracking.

10. Changes to This Policy

We may update this policy from time to time. The updated version is published on this page with its effective date. Continuing to use the service after publication means you accept the updated version.

11. Contact Us

For any enquiry or complaint about privacy, or to exercise your rights:

• [اسم الشركة / Company name]
• Email: [البريد الإلكتروني / Contact email]
• Phone: [الهاتف / Contact phone]
• Address: [العنوان / Address]