1. Purpose

This Privacy Notice explains how ATC Training FZ-LLC collects, uses, stores and shares personal data relating to learners, prospective learners, customers and other individuals who interact with us.

It also explains your rights in relation to your personal data and how to contact us if you have a question or concern about the way your information is processed.

ATC Training FZ-LLC processes personal data in accordance with applicable data protection legislation, including UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable. The UAE Government identifies this as the federal legislation concerning protection of personal data.

2. Who We Are

Data Controller: ATC Training FZ-LLC
Registered in: Ras Al Khaimah Economic Zone (RAKEZ), United Arab Emirates
Email: info@atctraining.ae

ATC Training FZ-LLC is responsible for determining how and why personal data covered by this Privacy Notice is processed.

We form part of the ATC Group. Where appropriate, we may work with other ATC Group companies in providing and administering training and related services.

3. Personal Data We Collect

The personal data we collect will depend on your relationship with us and the training or services being provided.

This may include:

name, address, telephone number and email address;
date of birth, nationality and identification information where required;
employer or sponsoring organisation details;
qualifications, prior attainment and employment information;
course enrolment, attendance and participation records;
assessment and examination results and certification information;
assignments, assessment evidence and learner submissions;
course progress and completion records;
communications with tutors, assessors and other ATC personnel;
accessibility, reasonable adjustment or additional support information;
images, audio or video recordings where required for training, assessment or quality assurance;
payment, transaction and limited financial information;
feedback, complaints, appeals and correspondence; and
technical and account information associated with our websites, learning platforms and other systems.

We will only collect and process personal data that is appropriate for the purposes for which it is required.

4. Sensitive Personal Data

In some circumstances we may need to process information of a sensitive nature, including information relating to health, disability or additional support needs.

This may be necessary to provide learner support, make appropriate adjustments, establish suitability for particular training activities, meet regulatory or qualification requirements, or safely deliver training and assessment.

Sensitive personal data will only be processed where permitted under applicable law and appropriate safeguards will be applied.

5. How We Use Your Personal Data

We may process personal data to:

respond to enquiries and applications;
process purchases and enrol learners;
create and administer learner accounts;
provide training, learning and assessment services;
verify identity, qualifications and entry requirements;
monitor attendance, participation and course progress;
conduct examinations and assessments;
provide learner support and appropriate adjustments;
undertake internal and external quality assurance;
register learners with awarding organisations, regulators or other relevant bodies;
process results and certification;
communicate with learners and customers;
maintain qualification and training records;
process payments and manage accounts;
prevent and investigate malpractice, fraud or misuse of our services;
respond to complaints and appeals;
meet health and safety or regulatory responsibilities;
maintain the security and integrity of our systems and services;
monitor and improve the quality of our training and services;
meet legal, contractual, awarding organisation and approval requirements; and
undertake appropriate marketing and business communications.

6. Basis for Processing

We will process personal data only where there is an appropriate basis for doing so under applicable data protection legislation.

Depending on the circumstances, this may include where:

you have provided consent;
processing is necessary to enter into or perform a contract with you;
processing is necessary to comply with legal or regulatory obligations;
processing is necessary to protect public interests;
processing is necessary to establish or defend legal claims; or
another basis permitted by applicable law applies.

Where we rely upon consent, you may withdraw that consent subject to applicable legal requirements and any other lawful basis that may permit or require us to continue processing particular information.

7. Sharing Your Personal Data

We will only share personal data where there is an appropriate reason for doing so.

Depending on the course or service concerned, information may be shared with:

awarding organisations and qualification bodies;
regulators and approval bodies;
government or public authorities where applicable;
your employer, sponsor or organisation commissioning your training, where appropriate;
tutors, assessors, Internal Quality Assurers and other authorised personnel;
other companies within the ATC Group where necessary;
learning management system, technology, hosting and IT service providers;
payment service providers;
professional advisers and auditors;
debt recovery providers where necessary;
government, regulatory or law enforcement authorities where required; and
other organisations where sharing is necessary to provide the service or meet an applicable legal, contractual or regulatory requirement.

Where an employer, sponsor or other organisation has purchased or commissioned training on your behalf, we may provide relevant information to that organisation. This may include information relating to your enrolment, attendance, participation, progress, assessment outcome, completion or certification where appropriate.

We do not sell personal data or provide personal data to other organisations for their own marketing purposes without an appropriate basis for doing so.

8. UK and International Qualifications

Some courses offered by ATC Training FZ-LLC may lead to qualifications, certifications or training recognised or regulated outside the UAE.

Where applicable, it may therefore be necessary to share learner information with awarding organisations, regulators, approval bodies or other organisations located outside the UAE.

This may include organisations within the United Kingdom, such as UK awarding organisations and regulatory or approval bodies, where relevant to the course or qualification undertaken.

We will only share information that is appropriate for the relevant purpose and will apply appropriate safeguards where required.

9. Service Providers

We use third-party systems and service providers to support the delivery and administration of our services.

These may include providers of:

learning management systems;
website and hosting services;
email and communications;
customer and learner administration systems;
assessment and examination systems;
cloud storage and productivity systems;
payment processing;
electronic signatures;
remote assessment or invigilation; and
other business and technology services.

Where another organisation processes personal data on our behalf, appropriate contractual, technical and organisational controls will be used where required.

10. International Transfers

Due to the nature of our business, personal data may be accessed, stored or processed outside the United Arab Emirates.

This may include transfers to other ATC Group companies, awarding organisations, regulatory or approval bodies and technology or service providers located in other countries.

Where personal data is transferred outside the UAE, ATC Training FZ-LLC will take appropriate steps to ensure that the transfer is made in accordance with applicable data protection requirements and that appropriate safeguards are applied where required.

11. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, contractual, regulatory, awarding organisation and approval requirements.

Different types of records may therefore be retained for different periods.

When determining an appropriate retention period, we may consider:

the nature and purpose of the record;
applicable legal and regulatory requirements;
awarding organisation or qualification requirements;
certification and verification requirements;
contractual obligations;
the need to respond to complaints, appeals or legal claims; and
legitimate operational requirements.

Personal data that is no longer required will be securely deleted, anonymised or otherwise disposed of in accordance with our data retention arrangements.

12. Security of Your Personal Data

ATC Training FZ-LLC maintains appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse or destruction.

Access to personal data is restricted according to business need and the responsibilities of the individuals concerned.

We also maintain internal policies, procedures and controls relating to data protection, information security and the appropriate use of information technology.

13. Your Rights

Subject to applicable UAE data protection legislation and any applicable exceptions, you may have rights in relation to your personal data, including rights to:

obtain information about the personal data we process;
request access to certain personal data;
request correction of inaccurate personal data;
request deletion of personal data in applicable circumstances;
request restriction or cessation of certain processing;
object to certain automated processing decisions where applicable;
request transfer of personal data where applicable; and
withdraw consent where processing is based upon your consent.

The UAE PDPL expressly establishes data-subject rights and a complaints mechanism.

These rights are subject to the conditions and exceptions provided by applicable law.

We may need to verify your identity before responding to a request.

14. Marketing

We may communicate with existing and prospective customers about courses, services or relevant opportunities where permitted.

Where consent is required, we will obtain it before sending the relevant marketing communication.

You may opt out of marketing communications at any time by using the unsubscribe facility provided in the communication or by contacting us.

Opting out of marketing will not prevent us from sending communications necessary to administer your account, course, qualification, order or other service.

15. Cookies and Website Information

Our website may use cookies and similar technologies to provide website functionality, maintain security, understand website usage and support marketing activities where permitted.

Further information about the cookies used and the choices available to you is provided through our Cookie Policy and cookie consent arrangements.

16. Questions, Concerns and Data Requests

If you have a question about how we process your personal data, wish to exercise one of your data protection rights or have a concern about the use of your information, please contact:

ATC Training FZ-LLC
Ras Al Khaimah Economic Zone
United Arab Emirates

Email: info@atctraining.ae

We will consider and respond to requests and concerns in accordance with applicable data protection requirements.

17. Complaints

If you have a concern about the way ATC Training FZ-LLC processes your personal data, we encourage you to contact us in the first instance so that we can investigate and respond.

Applicable UAE data protection legislation also provides mechanisms for complaints concerning the processing of personal data. The federal PDPL assigns the relevant supervisory and complaint-handling functions to the UAE Data Office (referred to as the “Bureau” in the legislation).

18. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our activities, systems, services or applicable legal requirements.

The current version will be published on our website.