Academy

Privacy Policy

Last updated: 20 July 2026

This Privacy Policy explains how 9cpt fze (registered at Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates) collects, uses, discloses and protects your personal data.

1. Data Controller

9cpt fze is the "data controller" of the personal data processed under this Policy. For any data-protection query, contact us at privacy@9cpt.com.

2. What Personal Data We Collect

  • Account data — name, email address, hashed password, language preference, profile picture (if provided).
  • Billing data — billing address, transaction identifier, invoice history and VAT number where applicable. Full card details are handled directly by Stripe; we never see or store them.
  • Usage data — courses viewed, video progress, quiz results, timestamps, device type, operating system, browser type, IP address (truncated for analytics), referrer URL.
  • Support and communications — messages you send to support, feedback, survey responses.
  • Cookies and similar technologies — see our Cookies Policy for the full inventory and controls.

3. Purposes & Lawful Bases for Processing

  • Performance of a contract — creating your account, delivering course access, processing payments, providing customer support.
  • Legitimate interests — preventing fraud and abuse, securing the Service, product analytics, service improvement, direct marketing to existing customers (which you can opt out of at any time).
  • Consent — non-essential cookies, promotional emails to non-customers, testimonials, marketing profiling.
  • Legal obligation — accounting, tax records; responding to lawful requests from public authorities.

4. How Long We Keep Your Data

We keep active-account data for as long as your account is open. After account closure, we retain limited records for up to 3 years to defend legal claims. Payment, invoicing and tax records are kept for the period required by applicable law. Marketing consent is kept until you withdraw it.

5. Sharing With Third Parties

We share the minimum data required with vetted processors bound by written data-processing agreements:

  • Stripe Payments Europe, Limited — payment processing.
  • Amazon Web Services EMEA SARL — hosting and infrastructure.
  • SendGrid / Twilio Ireland Limited — transactional and marketing email delivery.
  • Google Ireland Limited — analytics (with IP truncation and short retention).
  • Zendesk — customer support ticketing.

We never sell your personal data. We may disclose data if required by law, court order, or to protect our legal rights.

6. International Data Transfers

Where personal data is transferred outside the United Arab Emirates, we rely on appropriate safeguards to protect your data.

7. Your Rights

You have the right to: (a) access your personal data; (b) request rectification of inaccurate data; (c) request erasure; (d) restrict processing; (e) data portability; (f) object to processing based on legitimate interests or direct marketing. To exercise any of these rights, email privacy@9cpt.com. We respond within one month.

8. Security

We use TLS 1.3 encryption in transit, AES-256 encryption at rest, multi-factor authentication for staff, least-privilege access controls, quarterly penetration tests, and continuous vulnerability monitoring. Payment card data is handled exclusively by our PCI-DSS certified processor.

9. Children's Privacy

The Service is not directed at persons under 18. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, contact us and we will delete it promptly.

10. Automated Decision-Making

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.

11. Changes to This Policy

We may update this Policy periodically. Material changes will be notified by email and by prominent notice on the Service at least fourteen (14) days before they take effect.

12. Contact

9cpt fze
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Data Protection Contact: privacy@9cpt.com
Email: support@9cpt.com