Website Privacy Notice

1. Who we are

The data controller is Beyond AI Academy, Commercial Registration No. 7054037143, registered in Riyadh, Kingdom of Saudi Arabia. You can contact us about privacy at contact@beyondaiacademy.com.

2. Who this notice applies to

This notice applies to website visitors, parents and guardians, adult learners, educators, school representatives, government and corporate representatives, prospective partners, suppliers, trainers and other people who contact Beyond AI through the public website.

3. Personal data we may collect

Required fields are identified in the enquiry form. Organisation details are optional. Please do not send sensitive personal data, learner records, identification documents, health information or confidential material through the general enquiry form unless we have specifically requested it through an authorised secure process.

• Identity and enquiry information, such as your name, enquiry type, organisation, role and the content of your message.
• Contact information, such as your email address and any telephone number you choose to include in your message.
• Partnership or programme information, such as organisational requirements, proposed audiences, objectives and related correspondence.
• Technical and security information generated when the website is accessed, such as IP address, device and browser type, timestamps, security events, diagnostic information and approximate region.
• Records of messages, attachments and our responses when you communicate with us by email.

4. How we collect personal data

The current website enquiry form prepares a message in your own email application. The website does not itself submit or store the form contents. If you choose to send the email, the message is then processed through your email provider and ours.

• Directly from you when you contact us or prepare and send an enquiry by email.
• Automatically through essential hosting, security and diagnostic technologies when you access the website.
• From an organisation or authorised representative who legitimately contacts us on your behalf.
• From service providers that support website hosting, email, security and technical operations.

5. Why we use personal data

Depending on the activity, processing is based on consent, steps requested before entering into a contract, compliance with a legal obligation, or legitimate interests where permitted under the Saudi Personal Data Protection Law and assessed against your rights. We do not currently use the public website for optional analytics or behavioural advertising.

• To operate, maintain and secure the website, prevent misuse, diagnose faults and preserve availability.
• To receive, route and answer enquiries from individuals, schools, government entities, companies and prospective partners.
• To arrange meetings, prepare proposals and take steps you request before entering into a contract.
• To manage legitimate business relationships and maintain appropriate records.
• To comply with legal obligations, lawful requests, regulatory duties and the establishment or defence of legal claims.

6. Marketing communications

We do not currently offer a marketing subscription through the public website. If we introduce one, it will use a separate, optional and unselected consent. You may withdraw marketing consent at any time without affecting the lawfulness of earlier processing. Direct replies, service messages and security communications are not marketing.

7. Children’s personal data

Beyond AI serves young learners, but public enquiry and partnership forms are intended for adults, authorised organisation representatives, or minors acting with the involvement of a parent or legal guardian. We do not knowingly use children’s website data for behavioural advertising or unrelated commercial purposes.

If we learn that a minor submitted personal data without appropriate involvement, we may contact the parent or guardian, restrict processing, or securely delete the information where appropriate. Learner participation is governed by the platform and programme privacy and consent documents.

8. Cookies and similar technologies

The website does not currently deploy optional analytics, functional or marketing cookies. Essential hosting and security technologies may be used to deliver and protect the website. Please read our Cookie Policy for the current position and any future changes.

9. Who may receive personal data

We do not sell personal data.

• Authorised Beyond AI personnel and contractors who need the information to handle the request.
• Website hosting, email, cybersecurity and technical-support providers acting under appropriate contractual and confidentiality obligations.
• Professional advisers, auditors and insurers where necessary.
• A school, government entity, company or partner organisation where the enquiry concerns that organisation and disclosure is authorised or otherwise lawful.
• Courts, regulators, law-enforcement bodies or public authorities where disclosure is required or permitted by law.
• A lawful successor or transaction adviser in connection with a restructuring, merger or transfer, subject to appropriate safeguards.

10. Processing outside Saudi Arabia

Some hosting, email or technical providers may process personal data outside the Kingdom of Saudi Arabia. Where this occurs, we will limit transfers to what is necessary and apply the requirements and appropriate safeguards prescribed by the Saudi Personal Data Protection Law and its implementing regulations, including transfer assessments or recognised contractual safeguards where required.

11. How long we keep personal data

At the end of the applicable period, information is securely deleted, irreversibly anonymised or otherwise destroyed, subject to lawful backup and record-preservation requirements.

• General enquiries: up to 24 months after closure, unless they become part of a contract, dispute or legal record.
• Partnership and commercial enquiries: up to 3 years after the last substantive contact, or longer while an agreement or legal obligation remains active.
• Security and access logs: normally up to 12 months, unless needed for an incident, investigation or legal obligation.
• Privacy requests, complaints and related evidence: up to 5 years after closure.
• Consent or opt-out records, if introduced: for as long as reasonably necessary to demonstrate and honour the choice, normally up to 5 years after withdrawal or expiry.

12. Security

We use proportionate administrative, technical and organisational safeguards designed to protect personal data. These may include encrypted connections, access controls, least-privilege administration, secure hosting, logging, backups, incident response and confidentiality obligations. No internet service is completely risk-free, so please avoid sending sensitive or confidential information through general email enquiries.

13. Your rights

These rights are subject to the conditions and limitations in the Saudi Personal Data Protection Law and its implementing regulations.

• To be informed about the legal basis and purpose of processing.
• To access the personal data we hold about you.
• To request a readable and clear copy of your personal data.
• To request correction, completion or updating of inaccurate or incomplete information.
• To request destruction of personal data where the legal conditions are met.
• To withdraw consent at any time where consent is the legal basis.
• To complain to the competent authority and seek compensation where available under applicable law.

14. Exercising your rights

Send your request to contact@beyondaiacademy.com. We may ask for reasonable information to verify your identity or authority. We will respond without undue delay and within 30 days. Where implementation requires disproportionate effort or we receive multiple requests from you, this period may be extended by up to a further 30 days, and we will notify you in advance with the reason.

A parent or legal guardian may exercise rights for a person who lacks full or partial legal capacity, subject to appropriate verification.

15. Complaints

Please contact us first at contact@beyondaiacademy.com so we can investigate your concern. If you are not satisfied, you may complain to the Saudi Data and AI Authority through the National Data Governance Platform at dgp.sdaia.gov.sa, subject to its current procedures.

16. Personal-data breaches

We maintain procedures to assess, contain and investigate personal-data breaches. Where required by applicable law, we will notify the competent authority and affected individuals in the required manner and timeframe.

17. External links

The website may link to the separate Beyond AI platform or third-party websites. Their own terms and privacy notices apply when they independently collect personal data. Please review those notices before submitting information.

18. Changes to this notice

We may update this notice to reflect legal, technical or operational changes. The latest revision date will remain visible on this page. We will provide appropriate notice if a material change affects how personal data is processed.

19. Contact

Privacy requests and questions may be sent to contact@beyondaiacademy.com.