On this page (11 sections)
This policy explains what personal data Amad Academy collects, why, and how it is protected. It is written in plain English. If anything is unclear, please ask us.
Who we are
Amad Academy is the chemistry teaching of Mr. Amad Badel. It is run by Mr. Amad Badel in his own name: there is no separate registered company, so he is the person responsible for your personal data. We are based at First Step Building, Mayi Street, Duhok, Kurdistan Region, Iraq. For anything about your data, email info@amadacademy.org or message us on WhatsApp at +964 750 843 4930.
What we collect
About everyone who visits this website: like every website, our hosting provider and our security and delivery network record technical details of each visit (IP address, browser and device type, the pages requested, and the date and time) so that the site stays secure and working. We do not use this to show advertising or to build a profile of you, and the site has no analytics.
About enrolled students, when Mr. Amad Badel creates an account:
- the account email address and password (the password is stored only in a protected, scrambled form that nobody can read);
- name and phone number, and optionally a contact email, school and year group;
- the devices used to sign in: browser and system name, IP address, approximate country and dates;
- quiz answers, scores and timings, class-test marks entered by Mr. Amad Badel, and his comments;
- which lessons, videos and files were opened, and security records such as sign-in attempts;
- reward points.
About visitors who contact us: name, email address and/or phone number, the message, the IP address it came from, and the browser and system name. If you message or call us on WhatsApp, or message us on Instagram, we also see your name or username, your phone number and what you send; those services handle your messages under their own privacy policies.
We do not collect dates of birth, national ID numbers, home addresses, photos of students, payment details, device fingerprints or advertising identifiers.
Why we use it
- To teach and assess students, and to show each student their own results.
- To control access: sign-in, the device limit and the access period of each account.
- To keep the website and platform secure and to stop misuse.
- To answer enquiries.
We never use personal data for advertising, never sell it, and never build marketing profiles.
Videos and live lessons
The recorded video courses on the learning platform show only Mr. Amad Badel teaching. Students do not appear in any video, so no student's voice or image is recorded or stored in them. Students can watch the videos until their own access period ends. While you watch, your name is shown as a moving watermark, and we record which videos you open, to discourage sharing.
Live online lessons take place on tools such as Zoom, Google Meet, Microsoft Teams or WhatsApp video. Those services process data such as your name, voice and video under their own privacy policies.
Children
Many of our students are under 18. Mr. Amad Badel creates accounts only for students enrolled with their family's or school's knowledge. When setting up an account, a student confirms that they are 18 or older, or that a parent or guardian has agreed to them using Amad Academy. There are no public profiles and no messaging between students. If a security incident ever affects a child's data, we also inform their parent or guardian.
Who we share data with
We share personal data only with a small number of trusted service providers. They host and secure our website, deliver lesson videos and files, and send account emails and one-time codes on our behalf. Each may use the data only to do that job for us, under written terms, and we never sell personal data.
Our hosting and databases are in the European Union. Some providers, such as the network that protects the website and the messaging services, may process data in other countries too, outside Iraq. Our contact form also uses a bot check, which processes the visitor's IP address and browser details to tell people from automated programs. Technical tools that detect faults receive error information, never the content of your messages, quiz answers or results.
You can ask us for the current list of our service providers at any time: use the contact form, email us, or message us on WhatsApp.
How long we keep it
- Website visit records: for a short time, as set by our hosting provider and our security and delivery network.
- Account data: while the account is active. Afterwards it is deleted or anonymised, so that results can no longer be linked to a person.
- Contact messages: 24 months (spam: 30 days).
- Records of opened lessons, videos and files: 12 months.
- Security records: 24 months.
- Records of one-time codes (never the codes themselves): 90 days.
How we protect it
All connections are encrypted (HTTPS). Passwords and codes are stored only in scrambled form. Access to personal data is limited to the people who need it, backups are encrypted, and the platform is monitored for misuse.
Cookies
We use only strictly necessary cookies, with no analytics or advertising cookies. See the Cookie Notice.
Your rights
You can ask for a copy of your data, ask us to correct it, ask us to delete it, or ask us to stop contacting you (account security emails continue while the account exists). Send your request through the contact form or on WhatsApp. We check that the request really comes from you, for example using the email address or phone number on the account, and we aim to answer within 30 days.
Changes to this policy
Each version of this policy has a version number, shown at the top. If we make an important change, students are asked to accept the new version the next time they sign in.