Privacy Policy

MMEC is committed to protecting personal data in accordance with *UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data* (“UAE PDPL”) and applicable international best practices.

1. Data Collected
   1. We may collect and process the following categories of personal data:
      1. Identification details (full name, contact information, relationship to child).
      2. Child-related information (name, age, enrolment details).
      3. Account data (username, password, login history).
      4. Event-related data (registrations, attendance, payments).
      5. Technical information (IP address, browser type, cookies).
2. Purpose of Processing
   1. Personal data is processed strictly for legitimate purposes, including:
      1. Provision of educational and related services.
      2. Management of parent accounts and secure login access.
      3. Event registration, administration, and communication.
      4. Compliance with legal and regulatory requirements.
3. Data Sharing and Disclosure
   1. We may disclose personal data to:
      1. Authorized third-party service providers engaged in payment processing, IT support, event management, or similar functions, solely for the purpose of fulfilling contractual or service obligations.
      2. Governmental, regulatory, or law enforcement authorities where disclosure is required by law.
      3. We do not sell, lease, or trade personal data to third parties.
4. International Data Transfers
   1. Where services require the transfer of personal data outside the UAE, such transfers will be conducted in compliance with applicable UAE PDPL requirements, ensuring an adequate level of data protection.
5. Data Retention
   1. Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
6. Data Subject Rights
   1. Under UAE PDPL, you may exercise the following rights:
      1. Right of access to your personal data.
      2. Right to rectification of inaccurate data.
      3. Right to erasure of personal data, subject to legal retention requirements.
      4. Right to withdraw consent for processing.

Requests to exercise these rights should be submitted in writing to the contact details provided in Section 6.