Privacy Policy
At Digital Canvas, protecting your privacy is fundamental to our mission of providing exceptional web design education in Oman. We are committed to maintaining the highest standards of data protection and transparency in how we collect, use, and safeguard your personal information.
This privacy policy explains our practices regarding the collection, use, disclosure, and protection of your personal data when you interact with our educational platform, enroll in courses, or engage with our services.
Last updated: July 20, 2025
Information We Collect
Personal Information You Provide
- Registration Data: Full name, contact information, educational background, and course preferences when you enroll in our programs
- Learning Profile: Skills assessments, portfolio submissions, project work, and academic progress throughout your educational journey
- Communication Records: Messages sent through our contact forms, support tickets, and interactions with our educational team
- Payment Information: Billing details and transaction records for course fees and educational materials (processed securely through encrypted payment systems)
- Career Development Data: Resume information, job preferences, and career goals for our placement assistance programs
Automatically Collected Information
- Website Usage Analytics: Pages visited, time spent on educational content, course completion rates, and learning patterns to improve our curriculum
- Technical Information: Device type, browser version, operating system, IP address, and connection details for security and optimization purposes
- Learning Behavior: Video watch time, assignment submission patterns, quiz performance, and engagement metrics to personalize your educational experience
- Location Data: General geographic location (city/region level) to provide relevant course schedules and local industry information
Legal Basis for Data Processing
- Contractual Necessity: Processing required to deliver educational services, assess your progress, and fulfill our obligations as an educational provider
- Legitimate Interest: Improving course quality, developing new educational content, and maintaining the security of our learning platform
- Consent: Marketing communications, optional analytics, and personalized course recommendations (which you can withdraw at any time)
- Legal Compliance: Meeting educational standards, financial regulations, and student data protection requirements in Oman
How We Use Your Information
Educational Services
- • Delivering personalized course content and learning paths
- • Tracking academic progress and providing performance feedback
- • Facilitating instructor-student communication and mentorship
- • Issuing certificates and maintaining academic records
- • Providing career guidance and job placement assistance
Platform Improvement
- • Analyzing learning effectiveness and course completion rates
- • Developing new educational content and curriculum updates
- • Optimizing website performance and user experience
- • Identifying technical issues and security vulnerabilities
- • Conducting educational research and industry trend analysis
Communication & Marketing
- • Sending course updates, announcements, and educational resources
- • Notifying about new programs, workshops, and industry events
- • Sharing relevant job opportunities and career development tips
- • Conducting surveys for feedback and service improvement
- • Promotional content about advanced courses and specializations
Data Sharing Practices
- • Industry partners for internship and job placement opportunities
- • Educational technology providers for enhanced learning tools
- • Payment processors for secure transaction handling
- • Analytics services for anonymized usage insights
- • Legal authorities when required by law or court orders
Data Protection & Security
Technical Safeguards
- Encryption: All sensitive data is encrypted both in transit and at rest using industry-standard AES-256 encryption protocols
- Secure Hosting: Our servers are hosted in certified data centers with 24/7 monitoring, backup power systems, and physical security controls
- Access Controls: Multi-factor authentication, role-based permissions, and regular access reviews ensure only authorized personnel can access student data
- Regular Updates: Our systems receive security patches and updates promptly to protect against emerging threats
Operational Security
- Staff Training: All team members receive comprehensive data protection training and sign confidentiality agreements
- Data Minimization: We collect only necessary information and regularly review data retention practices to minimize storage
- Incident Response: Established procedures for detecting, containing, and responding to potential data breaches within 72 hours
- Third-Party Vetting: All service providers undergo security assessments and must meet our data protection standards
Data Retention Periods
Your Privacy Rights
Access and Transparency Rights
- Right to Access: Request a comprehensive copy of all personal data we hold about you, including learning records, progress reports, and communication history
- Data Portability: Receive your educational data in a structured, machine-readable format that can be transferred to another educational provider
- Processing Information: Understand how your data is being used, who has access to it, and the legal basis for each type of processing
Control and Correction Rights
- Right to Rectification: Correct any inaccurate or incomplete personal information in your student profile or academic records
- Consent Withdrawal: Withdraw your consent for optional data processing activities like marketing communications or advanced analytics
- Object to Processing: Oppose the use of your data for direct marketing, automated decision-making, or other processing based on legitimate interests
Deletion and Restriction Rights
- Right to Erasure: Request deletion of your personal data when it's no longer necessary for educational purposes or when you withdraw consent
- Processing Restriction: Limit how we use your data while disputes are resolved or during the verification of deletion requests
- Account Deactivation: Suspend your learning account while preserving essential academic records as required by educational standards
How to Exercise Your Rights
To exercise any of these rights, please contact our Data Protection Officer through the main contact form on our website. Include your full name, enrollment details, and specific request. We will respond within 30 days and may require identity verification for security purposes.
Important Note: Some rights may be limited by our legitimate interests in maintaining educational records, meeting legal obligations, or providing ongoing educational services to other students.
Data Management & International Transfers
Local Data Processing
Your personal data is primarily processed within Oman and the Gulf Cooperation Council region to ensure compliance with local data protection regulations and cultural values.
When we use international educational technology services, we ensure appropriate safeguards are in place through contractual protections and adequacy decisions.
Third-Party Services
We carefully select educational technology partners who meet international data protection standards and undergo regular security assessments.
These partners include learning management systems, video hosting platforms, and career development tools that enhance your educational experience.
Data Breach Procedures
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours along with details about the incident and steps being taken to resolve it.
We maintain comprehensive incident response procedures and work with cybersecurity experts to minimize any potential impact on your privacy.
Policy Updates
We review and update this privacy policy regularly to reflect changes in our educational services, technology, and applicable data protection laws.
Significant changes will be communicated to enrolled students via their registered contact information, and the updated policy will be posted on our website.