Privacy Policy

1. Overview

AatiCademy (“we”, “us”, “our”) operates the website aaticademy.com and provides online tutoring services to students across the United Arab Emirates and internationally. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and other applicable regulations.

2. What data we collect

We collect only the personal data necessary to provide our tutoring services and respond to your inquiries. Specifically:

• • Parent/guardian name — collected when you fill our contact form or take the learning assessment.
• • Phone number — used to contact you about your daughter's tutoring.
• • Email address — collected optionally, used to send reports and updates.
• • Country — used for timezone coordination and service availability.
• • Child's name, grade, and subject — used to personalize the diagnostic report and match your daughter with the right tutor.
• • Quiz answers and scores — used to generate the personalized academic report.
• • Usage data — anonymous analytics about how you use our website (pages visited, time on site, etc.), collected via Meta Pixel only after you accept our cookie consent banner.

3. Why we collect it

We use your personal data for the following purposes:

• • To provide personalized tutoring services to your daughter.
• • To send you the diagnostic academic report you requested.
• • To contact you about scheduling trial sessions and ongoing tutoring.
• • To improve our services and develop new offerings.
• • To comply with legal and regulatory obligations.

We do not use your personal data for any purpose not listed here without your explicit consent.

4. Where your data is stored

Your personal data is stored in the following locations:

• • Google Sheets — lead data (parent name, phone, email, child details, quiz results) is stored in a private Google Sheet accessible only to the AatiCademy team via [email protected].
• • Formspree — used to forward lead form submissions to our email inbox. Formspree processes data in accordance with their Privacy Policy.
• • Vercel — our website hosting provider. Vercel processes server logs (IP address, request timestamps) in accordance with their Privacy Policy.
• • Meta (Facebook) — if you accept our cookie consent, Meta Pixel collects anonymous usage data for analytics and advertising. See Meta's Privacy Policy.

5. How long we keep your data

We retain your personal data for as long as you are an active client, plus 2 years after your last interaction, to allow for re-enrollment and reference. After this period, we securely delete your data. You may request earlier deletion at any time (see Section 7).

6. Cookies

Our website uses cookies for the following purposes:

• • Essential cookies — required for the website to function (e.g., remembering your cookie consent choice). These cannot be disabled.
• • Analytics cookies (Meta Pixel) — used to understand how visitors use our website and to measure the effectiveness of our advertising. These are only loaded after you accept our cookie consent banner.

You can change your cookie consent choice at any time by clearing your browser's localStorage for aaticademy.com.

7. Your rights

Under the UAE PDPL and other applicable data protection laws, you have the following rights regarding your personal data:

• • Right of access — you can request a copy of all personal data we hold about you.
• • Right to correction — you can request that we correct any inaccurate or incomplete data.
• • Right to deletion — you can request that we delete your personal data, subject to legal retention requirements.
• • Right to object — you can object to our processing of your data for specific purposes.
• • Right to withdraw consent — you can withdraw consent for processing that relies on consent (e.g., analytics cookies) at any time.

To exercise any of these rights, email us at [email protected] with the subject line “Data Rights Request”. We will respond within 30 days.

8. Data security

We implement appropriate technical and organizational measures to protect your personal data, including HTTPS encryption (SSL/TLS), input sanitization, honeypot spam protection, rate limiting on form submissions, and access controls on all data storage systems. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

Our services are designed for school-age girls (Grades 1-12). We collect personal data about students (name, grade, subject) only through their parent or legal guardian. We do not knowingly collect personal data directly from children under 16. If you believe we have collected data from a child without parental consent, please contact us immediately at [email protected] and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this page periodically.

11. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us: