How UONE Academy collects, uses, protects and retains personal data worldwide.
This Privacy Policy applies to the UONE Academy website, applications, accounts, courses, learning features, newsletters, support and related services (Services). The controller responsible for deciding why and how personal data is processed is UONE PROFESSIONAL DEVELOPMENT PORTAL - FZCO (UONE, we, us or our).
This Policy is intended to comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL). Where the EU General Data Protection Regulation or the UK GDPR applies because we offer Services to or monitor individuals in the relevant territory, the additional standards and rights in this Policy also apply.
We collect only data reasonably needed to operate and protect the Academy, process purchases, communicate with learners and meet legal obligations. Depending on how you use the Services, this may include:
Please do not submit sensitive personal data, identity documents, financial account secrets, private keys, seed phrases, health data or other information that the Academy does not request.
We use personal data for the following purposes and, where GDPR applies, on the following legal bases:
Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations. Where processing relies on consent, you may withdraw consent at any time without affecting processing already carried out lawfully.
UONE does not sell or rent Academy users’ personal data. We do not disclose personal data to independent third parties for their own advertising, data brokerage or unrelated commercial purposes.
We may give limited access to personal data only where reasonably necessary to the following recipients:
Processors may use personal data only on UONE’s documented instructions, to provide the contracted service, and must protect it under appropriate contractual and security obligations. A current list of material processor categories or specific providers may be requested from Compliance@UnitedOne.Global.
UONE is established in the UAE and the Services are available internationally. Personal data may therefore be accessed or processed in the UAE and in other countries where contracted service providers operate. Those countries may have different data-protection laws from your country.
For transfers governed by the UAE PDPL, we use a permitted transfer basis and appropriate contractual or organisational safeguards. For transfers governed by GDPR to a country without an adequacy decision, we use an approved safeguard such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate. You may contact us for information about the safeguard relevant to your data.
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide purchased access, maintain learning and certificate records, resolve disputes, prevent fraud, enforce agreements and satisfy legal, tax and accounting requirements.
When data is no longer required, we delete it, anonymise it, or securely isolate it until deletion is possible. Aggregated or genuinely anonymised information that no longer identifies an individual may be retained for analytics and service improvement.
We use proportionate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised access, disclosure or destruction. Measures may include access controls, encryption in transit, credential protection, logging, backups, vendor review and incident procedures. No online service is completely secure, so you should use a strong unique password, protect your devices and notify us promptly of suspected account misuse.
Where required by applicable law, UONE will notify the competent authority and affected individuals of a personal-data breach within the legally prescribed period and based on the relevant risk assessment.
Subject to applicable law and relevant exceptions, you may ask UONE to:
To exercise a right, email Compliance@UnitedOne.Global from the address associated with your account and describe the request. We may request proportionate information to verify identity and authority. We will respond within the period required by applicable law; under GDPR this is generally one month, subject to a permitted extension for complex or multiple requests.
EU/EEA and UK individuals may also lodge a complaint with the data-protection authority in the country where they live or work or where an alleged infringement occurred. UAE individuals may contact the competent UAE data-protection authority. We encourage you to contact UONE first so that we can address the concern promptly.
Because UONE may offer Services to individuals in the EU/EEA, it will designate an EU representative where Article 27 GDPR requires one. The representative’s identity and contact details must be published here before targeted EU/EEA launch: [INSERT EU REPRESENTATIVE NAME, POSTAL ADDRESS AND EMAIL]. You may always contact UONE directly at Compliance@UnitedOne.Global.
Cookies are small files or identifiers placed on or read from a device. UONE may use:
Non-essential cookies will not be activated for users where prior consent is legally required until that consent is given. You can accept, refuse or change non-essential cookie choices through the consent tool and browser settings. Refusing necessary cookies may prevent account, payment or course functions from working. The live cookie notice should identify the specific cookies and providers actually enabled on the final website.
We may send operational messages needed to manage your account or purchases. Promotional email or similar electronic marketing will be sent only where permitted by law, including on the basis of consent where required. You can opt out at any time through the unsubscribe link or by contacting us. Opting out of marketing does not stop necessary service or legal notices.
UONE does not currently make decisions producing legal or similarly significant effects about Academy users solely by automated means. We may use limited automation to recommend course content, detect fraud or protect accounts, with human review where required. If this changes materially, we will update this Policy and provide any required choices or safeguards.
The Services are intended for adults aged 18 or older. We do not knowingly collect personal data from a child through the Academy without appropriate consent and safeguards required by applicable law. If you believe a child has provided data improperly, contact us so that we can investigate and delete or restrict it as appropriate.
The Services may link to websites, wallets, exchanges, social networks or other services operated independently of UONE. Their privacy practices are governed by their own notices. Review those notices before providing personal data to them.
We may update this Policy to reflect changes in law, technology, providers or the Services. The updated version will be posted with a revised effective date. We will provide additional notice of material changes where required. A change to this Policy does not retroactively authorise a materially different use of data where consent or another legal basis is required.
Privacy and rights requests should be addressed to Compliance@UnitedOne.Global. Please do not send passwords, private keys, seed phrases or unnecessary identity documents by ordinary email.