NabtaCode LMS

1. Who is responsible for your data

The data controller is NabtaCode, registered in the United Kingdom (Company No. 16539088). Contact: info@nabtacode.com.

2. What we collect

• Parent/guardian details — name, email address, phone/WhatsApp number, billing and invoice records.
• Learner details — name, age group and skill level, account credentials, course enrolments, progress, grades, badges and submitted projects.
• Class recordings — live sessions are recorded and may include the learner's voice, video and chat messages.
• Communications — messages sent through the Platform, by email or WhatsApp.
• Technical data — IP address, browser type, log data and essential cookies (such as the MoodleSession cookie required to stay logged in).

3. Children's data

Our courses are designed for children. We collect only the minimum data needed to deliver classes, and we require consent from a parent or legal guardian for any learner under 13. Parents/guardians may review their child's data, request corrections or ask us to delete it at any time by contacting info@nabtacode.com.

4. How and why we use data

• Delivering classes, tracking progress and issuing certificates — performance of our contract with you.
• Providing session recordings for catch-up — legitimate interest in supporting learning.
• Support and scheduling via email/WhatsApp — performance of contract.
• Invoicing and accounting — legal obligation.
• Improving our courses and Platform — legitimate interest.
• Showcasing learner projects or sending marketing — only with consent, which you can withdraw at any time.

5. Who we share data with

• Instructors — see learner names, progress and class participation to teach effectively.
• Service providers — secure hosting of the Platform, Cloudflare (content delivery and security), and WhatsApp/email providers used for communication.
• Analytics — our public website (nabtacode.com) uses Google Analytics and the Meta (Facebook) Pixel; these marketing tools are not used inside the learning platform itself.
• We never sell personal data, and we never share children's data for advertising.

6. International transfers

Data is stored on secure servers provided by our hosting provider. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep data

• Account and progress data — for the life of the account and up to 12 months after closure.
• Class recordings — for the duration of the course and a reasonable period afterwards for catch-up purposes.
• Invoices and accounting records — as required by law.

8. Your rights

Under UK GDPR you (and parents/guardians on behalf of their children) have the right to access, correct, delete or receive a copy of personal data, to object to or restrict processing, and to withdraw consent. To exercise any right, email info@nabtacode.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

9. Cookies

The Platform uses only essential cookies (e.g. MoodleSession) needed for login and security. Our public website uses analytics and marketing cookies as described above.

10. Security

We protect data with HTTPS encryption, access controls and regular updates. Access to children's data is limited to staff and instructors who need it.

11. Changes to this policy

We may update this policy from time to time; material changes will be announced on the Platform.

12. Contact

Email: info@nabtacode.com
WhatsApp: +965 670 628 28 (Kuwait) · +971 559 629 361 (UAE) · +20 101 604 0251 (Egypt)

Effective date: 20 July 2026 — version 1.0