Privacy & Data Protection Policy

eduGuardian operates under and complies with the following data protection laws and regulations:

We are committed to maintaining a high standard of privacy protection consistent with both jurisdictions.

eduGuardian FZE LLC is the Data Controller under UK GDPR and UAE PDPL. We determine:

• What data is collected
• How it is used
• Why it is processed
• How long it is retained
• With whom it is shared

We ensure all processing activities comply with applicable legal obligations in both jurisdictions.

We adhere to core data protection principles under UK GDPR and UAE PDPL:

• Lawfulness, fairness, and transparency
• Purpose limitation — data used only for stated purposes
• Data minimisation — only necessary data collected
• Accuracy and data quality
• Storage limitation — not retained longer than required
• Integrity and confidentiality — security protection
• Accountability and governance compliance

We may collect the following categories of personal data:

• Identity Information: Passport, Emirates ID, national ID
• Contact Information: Name, email, phone number, address
• Academic Records: Qualifications, transcripts, certificates
• Financial Data: Payment details, transaction records
• Professional Information: Employment history, CVs (where applicable)
• Immigration Data: Visa-related documentation and records

Personal data may be shared only when necessary with:

• Universities and educational institutions
• Immigration and visa authorities
• Government or regulatory bodies
• Approved partner organisations and employers

We ensure that:

• Data sharing is limited to required purposes only
• Confidentiality agreements are in place where applicable
• No personal data is sold or commercially traded

As eduGuardian operates globally, personal data may be transferred outside the UAE and UK. We ensure that:

• Transfers comply with UK GDPR Chapter V requirements
• UAE PDPL cross-border transfer rules are followed
• Adequate safeguards are implemented (e.g., Standard Contractual Clauses or equivalent legal mechanisms)
• Data is protected at the same level as required by law

Personal data is retained only for as long as necessary:

• During active service engagement
• Up to 5 years after service completion, unless legal obligations require longer retention

After the retention period, data is securely deleted, anonymised, or archived in compliance with legal standards.

Under UK GDPR and UAE PDPL, individuals have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion (where legally applicable)
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability

We implement appropriate technical and organisational safeguards including:

• Secure IT systems and encrypted storage
• Access control and authentication mechanisms
• Staff confidentiality agreements and training
• Monitoring and audit controls
• Data minimisation and restricted access policies

We regularly review security measures to ensure ongoing compliance and protection.

Individuals may escalate concerns to:

• eduGuardian Compliance & Data Protection Team
• UK Information Commissioner's Office (ICO)
• UAE Data Protection Authority or relevant regulatory body

We aim to resolve all complaints promptly, fairly, and transparently.

We may update this policy from time to time to reflect changes in our practices, technology, or legal requirements. Any updates will be posted on this page. Continued use of our services after such updates constitutes acceptance of the revised policy.