Privacy Policy

HIRFA LLC (trading as Hirfa Academy) respects your privacy and is committed to protecting your personal data.

1. Information Collected

We collect:

• Full name
• Email address
• Date of birth
• Government-issued ID type and ID number (encrypted using AES-256-GCM, used solely to verify your identity on your credential, never shared with third parties, and deleted upon request).
• Payment-related metadata (we cannot see full card details)

2. Use of Information

Your data is used to:

• Process payments
• Deliver certificates and course access
• Provide customer support
• Maintain service integrity

3. Data Sharing

We may share data with trusted third parties, including payment processors such as Stripe, strictly for transaction processing.

4. Data Storage

Data is stored securely and only retained as long as necessary for operational and legal purposes.

5. User Rights

Users may request access, correction, or deletion of their personal data by contacting us.

6. Security

We implement reasonable safeguards to protect user data; however, no system is completely secure.

7. Updates

This policy may be updated periodically.

8. Cookies & Tracking

We use cookies and tracking pixels (Meta Pixel, TikTok Pixel, Google Analytics) to improve our services and measure advertising performance. You may opt out via our cookie consent banner. We do not sell your data.

9. Lawful Basis for Processing (GDPR)

For users in the EU/UK, we process your personal data on the following legal bases:

• (a) Contract performance — to deliver your credential and course.
• (b) Legitimate interest — to prevent fraud and maintain platform integrity.
• (c) Consent — for marketing communications and tracking cookies.

10. Data Retention

We retain your name, email, and credential data for as long as your credential is valid plus 2 years. Encrypted national ID data is deleted upon your request. You may request deletion at any time via our contact page.

11. Your Rights (EU/UK)

If you are located in the EU or UK, you have the right to: access your data, correct inaccuracies, request deletion, object to processing, and lodge a complaint with your local data protection authority.

12. Contact for Data Requests

For any data-related request, email: support@hirfa.academy