Privacy Policy

01Who we are

AVITSENA is a pharmaceutical training and quality consultation practice based in the Kingdom of Saudi Arabia. We are responsible (the “controller”) for the personal data described in this policy. You can contact us about privacy at any time through our contact page.

02Information we collect

• Account details: your name, email address, username and password (stored in encrypted form).
• Learning records: courses you enrol in, lesson progress, quiz and assessment results, completion dates, and certificates with their unique verification IDs.
• Messages you send us: the name, email, company, topic and message you submit through our contact form, and any later correspondence.
• Technical data: IP address, browser and device type, pages visited and timestamps, recorded in server logs and used for security and troubleshooting.
• Payment information: if you purchase a paid service, payment is processed by the payment provider shown at checkout. We do not store full card details.

03How we use your information

• to create and manage your account and give you access to courses;
• to track your progress, issue certificates and allow certificates to be verified;
• to respond to enquiries and provide consultation services you request;
• to keep the Platform secure, prevent misuse (for example, limiting repeated form submissions) and fix problems;
• to improve our courses and services;
• to meet legal, accounting and regulatory obligations.

We will only send you marketing messages with your consent, and you can withdraw that consent at any time.

04Legal bases

We process personal data where it is necessary to provide the services you request, to comply with legal obligations, for our legitimate interests in running a secure and effective training platform, or with your consent where consent is required.

05Cookies and similar technologies

We use essential cookies to keep you signed in and to protect forms and accounts. Some on-page preferences, such as the sound setting on our contact form, are stored in your own browser. We do not use advertising cookies. Our pages load web fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.

06Certificates and verification

Your certificate shows your name, the course title, completion date and a certificate ID. Anyone who has the certificate ID or link can verify that the certificate is genuine. Please share your certificate only with people you choose.

07Who we share data with

We do not sell your personal data. We share it only where needed with:

• service providers who host and operate the Platform, deliver email or process payments on our behalf, under appropriate confidentiality and data protection terms;
• your employer or training organisation, where they enrolled you or sponsor your training, limited to enrolment, progress and certificate information;
• authorities, courts or advisers where required by law or to protect our rights.

08International transfers

Some of our service providers may store or process data outside the Kingdom of Saudi Arabia. Where this happens, we take steps to ensure your data receives an adequate level of protection in line with the PDPL and its implementing regulations.

09How long we keep data

• Account and learning records: for as long as your account is active, and afterwards for as long as needed to verify certificates and meet legal obligations.
• Contact form messages: up to 24 months after our last communication, unless they become part of a service agreement.
• Server logs: for a limited period for security purposes.

10How we protect data

We use administrative, technical and physical safeguards appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, access controls and regular updates. No online system is completely secure, so please use a strong, unique password and keep it private.

11Your rights

Subject to the PDPL, you have the right to:

• be informed about how your data is processed;
• access and obtain a copy of your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of data that is no longer needed;
• withdraw consent where processing is based on consent.

To exercise these rights, send us a request through our contact page. We may need to verify your identity. If you are not satisfied with our response, you may lodge a complaint with the Saudi Data & AI Authority (SDAIA).

12Children

The Platform is intended for professionals and is not directed at children under 18. We do not knowingly collect personal data from children.

13Changes to this policy

We may update this Privacy Policy from time to time. The effective date at the top shows when it was last changed. Where changes are significant, we will take reasonable steps to let you know.

14Contact us

For any privacy question or request, please use our contact page.

See also our Terms of Use.