Privacy Policy

1. Who we are

Med Solutions Academy (“we”, “us”, “our”) operates healthcare exam preparation, licensing support and related digital services for professionals across the UAE and wider GCC, primarily via medsolutionsacademy.com and our Learning Management System (LMS).

UAE Head Office: Building C1, 1F Ajman Freezone, Ajman, UAE. Privacy requests: info@medsolutionsacademy.com or WhatsApp +971 56 177 5650.

2. Scope

This Privacy Policy explains how we handle personal data when you:

• create an account or use our LMS (courses, MCQ banks, mock exams, progress tracking);
• start a free trial or purchase a plan;
• use DataFlow document upload / application support;
• use CV Builder (including optional AI-assisted wording tools when enabled);
• use the PQR / eligibility self-assessment;
• contact us by form, email, phone, SMS or WhatsApp;
• visit our website (including cookies and analytics such as Google Site Kit / Google Analytics, where enabled).

Third-party job boards or external sites we link to have their own privacy practices. We are not responsible for those sites.

3. What data we collect

Account & profile

• Name, email address, mobile number (including country dialling code), password (stored hashed), profession category/title and target exam authority where you provide them.
• OTP verification metadata for email and/or SMS/WhatsApp verification when enabled.

Learning & product use

• Course enrolments, free-trial status, lesson/quiz progress, mock-exam attempts, certificates and related LMS activity.
• Support tickets, consultation requests and CRM contact notes generated from your interactions with us.

Payments

• Order details, plan/validity selected, amounts, currency, payment status and identifiers from payment processors (for example Stripe and/or Nomod). We do not store full card numbers on our servers; card data is handled by the payment provider.

DataFlow & licensing support

• Application details and documents you upload (which may include identity, education, licensing and other sensitive personal information). Documents may be retained on a permanent, staff-managed basis unless you request deletion and retention rules allow it (see Storage).

CV Builder

• CV content you enter (experience, education, licensing fields, contact details in the CV, and similar).
• If AI Assist is enabled by site administrators, text snippets you submit for improvement may be sent to the configured AI provider (for example OpenAI-compatible or Anthropic APIs).

PQR eligibility checker

• Answers you provide about education, experience, licensing status and contact preferences for a preliminary eligibility indication.

Technical & analytics

• IP address, browser/device type, pages viewed, approximate location derived from IP, referrers, and cookie identifiers used for security, preferences and analytics.

4. Why we use your data (purposes & legal bases)

We process personal data to:

• Provide the service — create accounts, deliver courses, run free trials, process payments, generate certificates and operate student dashboards (contract / performance of a service).
• Verify identity — email/SMS/WhatsApp OTP and account security (legitimate interests / contract).
• Deliver DataFlow & licensing support — review documents, manage cases with our staff, and communicate status (contract / consent where required).
• Operate CV Builder & optional AI tools — store and improve CV content you request (contract / consent for optional AI features).
• Provide PQR self-assessment — generate a preliminary eligibility indication and, where you agree, follow up (consent / legitimate interests).
• Communicate — transactional messages (enrolment, payment, OTP, support). Marketing messages are sent only where permitted and, where required, with a separate opt-in.
• Improve & secure the site — analytics, fraud prevention, debugging and service quality (legitimate interests).
• Comply with law — accounting, tax, regulatory or lawful requests (legal obligation).

Where UAE or other applicable law requires consent for a specific processing activity, we will seek that consent (including via registration checkboxes or feature-specific consents).

5. Storage & retention

• Account & LMS data — retained while your account is active and for a reasonable period afterwards for support, dispute resolution and legal compliance, then deleted or anonymised where practicable.
• Payment records — retained as required for accounting and chargeback handling, aligned with processor records.
• DataFlow documents — by default retained on a permanent, staff-managed basis (no automatic purge), because licensing files may need to be revisited for transfers, appeals or renewals. Staff may remove files manually. You may request deletion; we will assess the request against operational and legal needs.
• CV Builder content — retained while associated with your account unless you delete it or request erasure.
• Analytics cookies — retained according to the tool configuration (for example Google Analytics / Site Kit settings).

Hosting and backups may store data on infrastructure in the UAE, GCC region and/or other locations used by our hosting and SaaS providers. See Cross-border transfers below.

6. Who we share data with

We do not sell your personal data. We share it only as needed with:

• Payment processors — such as Stripe and/or Nomod to take payments and handle refunds/disputes.
• Messaging providers — email delivery services and, where configured, SMS or WhatsApp Business / Meta APIs for OTP and service messages.
• AI providers — if CV AI Assist or Career Tools are enabled, relevant text may be processed by the configured provider (for example Anthropic or an OpenAI-compatible endpoint) solely to return the requested suggestion.
• Our staff & authorised consultants — to deliver DataFlow, licensing and academic support.
• Analytics & site tools — such as Google services via Site Kit when enabled.
• Professional advisers & authorities — where required by law or to protect our rights, users or the public.

External job boards or partner sites opened from our pages receive data only if you choose to submit information there.

7. Cookies & similar technologies

We use cookies and similar technologies to:

• keep you signed in and secure the session;
• remember preferences;
• measure traffic and performance (for example via Google Site Kit / Google Analytics, when enabled);
• support payment and fraud-prevention flows.

You can control cookies through your browser settings. Blocking essential cookies may prevent login, checkout or OTP flows from working correctly.

8. Cross-border transfers (GCC & beyond)

We serve users across the UAE and GCC. Your data may be processed in the UAE and transferred to or accessed from other countries where our service providers operate (for example payment, email, SMS/WhatsApp, AI or hosting vendors). Where we transfer data internationally, we take reasonable steps appropriate to the sensitivity of the data and the nature of the service, including contractual and security measures with providers.

9. Your rights & requests

Subject to applicable UAE/GCC law and any overriding legal or operational requirements, you may request to:

• access a copy of personal data we hold about you;
• correct inaccurate information;
• request deletion of account data or specific documents (DataFlow files may require staff review because of permanent retention / case needs);
• withdraw consent where processing is based on consent (this does not affect prior lawful processing);
• object to certain marketing communications.

Email privacy requests to info@medsolutionsacademy.com or message us on WhatsApp +971 56 177 5650. We may need to verify your identity before fulfilling a request.

10. Children’s privacy

Our services are aimed at adult healthcare professionals and related adult learners. We do not knowingly collect personal data from children under 16 (or the higher age required in your jurisdiction). If you believe a minor has provided data, contact us and we will take appropriate steps to delete it.

11. Security

We use administrative, technical and organisational measures appropriate to the risk — including access controls for staff handling DataFlow documents, hashed passwords, HTTPS and provider security features. No method of transmission or storage is completely secure; please use a strong unique password and keep OTP codes private.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of the services after an update constitutes acceptance of the revised policy where permitted by law.

13. Contact for privacy requests

Med Solutions Academy
Email: info@medsolutionsacademy.com
WhatsApp: +971 56 177 5650
Phone: +971 50 161 6956
Or use our Contact page.

Related: Terms of Service · Account Terms & Conditions

These policies are provided as a business-use template for Med Solutions Academy and should be reviewed by a qualified lawyer familiar with United Arab Emirates and applicable GCC data-protection and consumer rules before relying on them for compliance. They do not constitute legal advice and are not a certification of legal compliance.