Privacy and Data Protection Policy

1. General Provisions

This Privacy Policy defines the procedure for processing, storing, and protecting the personal data of Users of the Make Fortune Academy Platform. The Academy processes data in strict compliance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), Cabinet Resolution No. 32 of 2022, and the UAE’s legislation on anti-money laundering (AML/CFT).

2. Data Collected

We collect the following categories of personal data:

• Identification Data: Full name, photo, email address, phone number.
• Authorization Data: Information from Google / Facebook profiles if the User uses them for login.
• Financial Data: Payment details processed through the Stripe system.
• Technical Data: IP address, cookie data, browser type, location, and time of access.

3. Purposes of Processing

Personal data is processed exclusively for the following purposes:

• Providing access to the courses and materials on the Platform.
• Fulfilling contractual and legal obligations, including processing payments and refunds.
• Sending marketing communications, but only if the User has given explicit consent.

4. Storage and Protection

Personal data is stored on secure servers located in the UAE and/or the EU. The following measures are used to protect the data:

• Data encryption.
• Access control.
• Regular security audits.
• Payment data is processed by the Stripe system, which complies with the Payment Card Industry Data Security Standard (PCI DSS).

5. User Rights

In accordance with Federal Decree-Law No. 45 of 2021 (PDPL), the User has the following rights, which can be exercised by sending a request to [email protected]:

• Right to Access: Request confirmation of data processing and obtain a copy.
• Right to Rectification: Demand the correction of inaccurate or outdated data.
• Right to Erasure: Demand the deletion of data in cases provided by law if it is no longer needed for the stated purposes.
• Right to Restrict Processing: Suspend the use of data in legally defined situations.
• Right to Data Portability: Request the transfer of data to another controller in a machine-readable format.
• Right to Object: Prohibit the processing of data, including for marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent to the processing of personal data. However, the withdrawal of consent does not affect the legality of processing carried out before its withdrawal. This right does not apply in cases where data processing is mandatory under UAE law (e.g., for compliance with AML/KYC requirements, accounting, and tax records).

6. Cookies

The Platform uses cookies to improve website functionality, analytics, and personalization. The User can change their browser settings at any time to disable or restrict the use of cookies. Disabling cookies may affect the website’s functionality.