العربية Create account

Privacy policy

What we collect about you, why, who we share it with, and how you stay in control. In line with Saudi Arabia's Personal Data Protection Law.

Last updated: October 3, 2026

Draft for legal review before publication.

Who we are

ZERAX Academy is responsible for the personal data we collect through the platform (the "controller", in the terms of the Personal Data Protection Law). This policy is written in line with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its regulations.

For anything about your data, contact us at contact@zerax.online.

The data we collect

AccountYour name, email, mobile number if you add one, and your password, stored encrypted.
PurchasesWhat you bought, the amount, the date and the invoice. Card details are handled by the payment gateway; we don't store them.
Learning progressThe lessons you've opened and completed, and the certificates issued to you.
Activity answersWhat you write or choose in the activities after each lesson.
Device and technical dataDevice and browser type, IP address, and sign-in and error logs.

Why we use it, and on what basis

  • To deliver what we agreed: opening your account, giving you access to your courses, saving your progress, and issuing and verifying your certificate.
  • To meet legal obligations: issuing tax invoices and keeping the records the law requires.
  • Legitimate interest: protecting the platform against fraud and misuse, and improving our courses using aggregated data that doesn't identify you.
  • With your consent: offers and news emails, and non-essential cookies. You can withdraw consent at any time.

We never sell your data.

Who we share it with

  • The licensed payment gateway, to process payments and refunds.
  • Hosting and technical providers we rely on to run the platform and send email, under contracts that require them to protect the data and use it only as we instruct.
  • The organization that bought your seat, if you're learning through work. It sees your progress and completion only, never your activity answers.
  • Anyone verifying your certificate: the public verification page shows your name, the course, the issue date and the certificate's status.
  • Official bodies where the law requires it.

Where your data is stored

We store your data with trusted hosting providers. If any of it needs to be transferred outside the Kingdom, we do so only as the PDPL and its regulation on transfers outside the Kingdom permit, with safeguards that keep its protection at least at the level the law guarantees.

How long we keep it

  • Account and progress data: for as long as your account is open. When you close it, we delete it or make it anonymous.
  • Certificate records: for as long as the certificate is valid, so it can still be verified.
  • Invoices and payment records: for the period required by tax and commercial law.
  • Device and security logs: briefly, no longer than needed to protect the platform.

Your rights

Under the PDPL, you have the right to:

  • Be informed about what we collect and why, which is what this page does.
  • Access the data we hold about you.
  • Get a copy of your data in a clear, readable format.
  • Correct, complete or update your data.
  • Have it deleted once it's no longer needed, unless the law requires us to keep it.
  • Withdraw consent to any processing based on it, without affecting processing done before.

How to use your rights

You can change most of your details directly in your account settings. For anything else, email contact@zerax.online from the address registered on your account. We may ask you to confirm your identity first, and we'll respond within 30 days.

Cookies

We use essential cookies to keep you signed in and save your progress; the platform can't work without them. We only use analytics cookies with your consent, and you can change your choice at any time.

Children

ZERAX courses are for adults, and we don't allow anyone under 18 to create an account. If we learn we've collected data from a minor, we delete it.

Security

We protect your data with encryption in transit and by limiting access to the members of our team who need it, and we review our measures regularly. If an incident affects your data, we'll notify the competent authority and you, as the law requires.

Complaints

If you're unhappy with how we've handled your data, please contact us first so we can put it right. You always have the right to complain to the competent authority, the Saudi Data and AI Authority (SDAIA).

Changes to this policy

We may update this policy. When a change is significant, we'll email you before it takes effect. The date of the last update is always shown at the top of this page.

Contact

For any question about your privacy: contact@zerax.online, or use the contact page.

A question about your data?

Contact us