Bak.ae (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, enroll in our courses, or interact with our services. By using our services, you consent to the practices described herein.
1. Information We Collect
We may collect the following types of personal information:
1.1 Information You Provide Directly
- Identity Data: Full name, date of birth, nationality, and gender.
- Contact Data: Email address, phone number, postal address, and WhatsApp number.
- Enrollment Data: Course selections, payment information, dietary restrictions, and accommodation preferences.
- Communication Data: Messages sent through our contact form, email, WhatsApp, or social media channels.
- Professional Data: Occupation, employer, skill level, and baking experience.
1.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
- Usage Data: Pages visited, time spent on pages, navigation paths, referral sources, and click patterns.
- Cookie Data: Information collected through cookies and similar tracking technologies (see our Cookie Policy for details).
2. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To process enrollments, manage your account, deliver course content, and issue certificates of completion.
- Communication: To respond to inquiries, send course confirmations, schedule updates, and important administrative notices.
- Marketing: To send newsletters, promotional offers, and event invitations (only with your explicit consent). You may opt out at any time.
- Improvement: To analyze usage patterns, improve our website and course offerings, and personalize your experience.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations in the United Arab Emirates.
- Safety: To ensure the safety and security of our facilities, staff, and students during in-person classes.
3. Data Storage and Security
Your personal data is stored on secure servers located in the United Arab Emirates and may be processed in other jurisdictions where our service providers operate. We implement appropriate technical and organizational measures to protect your data, including:
- SSL/TLS encryption for all data transmitted through our website.
- Access controls limiting data access to authorized personnel only.
- Regular security audits and vulnerability assessments.
- Secure payment processing through PCI-DSS compliant payment providers.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Enrollment records are retained for a minimum of five (5) years following course completion.
4. Third-Party Services
We may share your information with the following categories of third parties:
- Payment Processors: Stripe, Tabby, and Tamara for secure payment processing.
- Communication Platforms: WhatsApp Business API and email service providers for customer communication.
- Analytics Providers: Google Analytics and similar services to understand website usage.
- Cloud Services: Hosting and infrastructure providers for website operation.
- Government Authorities: When required by UAE law or regulation.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy.
6. Your Rights
In accordance with the UAE Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR) where applicable, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data, subject to legal retention requirements.
- Right to Restrict Processing: Request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: Request your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to the processing of your personal data for direct marketing purposes.
- Right to Withdraw Consent: Withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within thirty (30) days.
7. International Data Transfers
Where we transfer your personal data outside the UAE, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including standard contractual clauses and adequacy decisions.
8. Children’s Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the “Last updated” date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.
10. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
- Email: [email protected]
- Phone: +971 52 763 0033
- WhatsApp: +971 52 763 0033
- Address: Bak.ae, Dubai Design District (d3), Building 4, Dubai, United Arab Emirates