Privacy policy
What we collect, why, and how you control it.
This page explains the personal data we process at Mishkat Al-Athar Training and the purpose of each kind. We handle it in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia.
What we collect
From the ad form: your name, your mobile number, and the answer to one qualifying question.
From the conversation: the messages you exchange with us on WhatsApp, including any images or voice notes you send.
At purchase: order and payment records. Payment itself is processed by the checkout provider, not by us — we never see or store your card details.
After purchase, and only for the certificate: your national ID number.
Why we collect it
To answer your enquiry, complete your enrolment, issue your certificate, and review and improve the quality of our replies.
We do not sell your data, we do not rent it, and we do not use it for a purpose other than the one it was collected for.
Your national ID
It is never requested in chat, and never accepted there.
It is collected only after payment, through a secure form link of your own.
It is stored encrypted, is not visible to the sales agent, and is used solely to issue your certificate.
Automated messaging and AI
We use an automated system that uses AI to compose replies on WhatsApp. If you ask whether you are talking to an automated system, it will tell you plainly that you are.
Conversations are reviewed for quality, and a member of the team may step in at any point.
You can stop the messages at any moment by saying so in the conversation; sending stops immediately.
Who we share it with
Service providers we rely on to run the service, and only as far as their job requires — the messaging platform, the payment gateway, the live-session platform, the ad platform you reached us through, and our hosting and AI model providers.
We do not share your data with anyone for their own marketing.
Your rights
You may ask to see the data we hold about you, to correct it, to have it deleted, to object to its processing, and to withdraw your consent.
Deletion does not extend to records we are legally required to keep, such as invoices.