Privacy Policy

“MEDD Leadership For Effective and Educational Enrichment” Website – Privacy Policy 

At “MEDD Leadership For Effective and Educational Enrichment”, we recognize the importance of protecting your privacy and are committed to handling your personal data responsibly and securely. This Privacy Policy explains how we collect, use, process, and protect your personal data when you access or use our website or participate in training programs offered by “MEDD Leadership For Effective and Educational Enrichment”. 

  1. Information We Collect

When you access or use “MEDD Leadership For Effective and Educational Enrichment”’s website or learning portal, register for a workshop or course, or otherwise interact with our services, we may collect and process various types of personal data, including:

  • Personal Data You Provide: This may include your name, email address, telephone number, organization, job title, Qatar ID, nationality, address, and other information you provide when registering for or participating in our courses, workshops, or related activities.
  • Information Received through WooCommerce: This may include information in connection with your registration for or purchase of our courses, workshops, or related services.
  • Information Generated through “MEDD Leadership For Effective and Educational Enrichment”: In connection with your participation in our courses, workshops, or other programs, we may generate and maintain records relating to your enrolments, attendance, applicable tiers, and certificate requests.
  • Device and Technical Information: We may collect certain information when you access or use our website or learning portal, such as your IP address, browser type, device type, and operating system.

We use this information to operate and improve the “MEDD Leadership For Effective and Educational Enrichment” website, provide our educational services, manage enrolments and communications, and enhance the overall user experience. 

  • How We Use the Collected Information

We use the personal data we collect for the following purposes:

  • Registering participants for workshops and courses, managing learning portal accounts, authenticating user logins, recording attendance, and issuing certificates.
  • Delivering course content and monitoring learning progress, assessments, and course completion.
  • Communicating with participants by email or WhatsApp regarding registration confirmations, reminders, course information, and logistical arrangements, as well as responding to enquiries.
  • Maintaining participant training records, calculating training tiers, issuing certificates, linking website payments to participant records, preparing Qatari and non-Qatari participant reports, sending transactional emails, and authenticating user access.
  • Processing course or workshop fees securely through our payment service provider, Dibsy.
  • Using photographs or video recordings where separate consent has been obtained.
  • Maintaining the security of our website and learning portal, preventing fraud, resolving technical issues, and improving our services through aggregated and anonymized reporting.
  • Complying with applicable legal, accounting, auditing, and regulatory requirements.

We do not use personal data for marketing, profiling, or automated decision-making. Certificate issuance and release are not fully automated and always involve human review and approval.

  • Sharing of Personal Data

We do not sell or rent your personal data to third parties. We may share your personal data with third parties where necessary, including:

  • Service Providers: Third-party service providers that support the operation, hosting, maintenance, and security of the “MEDD Leadership For Effective and Educational Enrichment” website and learning portal.
  • Third-Party Service Providers: Providers that facilitate specific services on our behalf, such as payment processing, email communications, and WhatsApp messaging.
  • Professional Advisers and Other Authorized Parties: Where disclosure is reasonably necessary for legal, accounting, auditing, or operational purposes.
  • Government, Regulatory, or Law Enforcement Authorities: Where disclosure is required by applicable law or regulation, or in response to a valid legal request.

We take appropriate technical and organizational measures to protect personal data against unauthorized access, use, alteration, disclosure, loss, or destruction. Access is limited to authorized personnel and service providers where necessary, and we take steps to ensure that third parties handling personal data use it appropriately and only for the intended purpose.

  • Systems and Data Security
  • WordPress integration: The learning portal connects to the WordPress website through a read-only, one-directional API. The systems have separate databases and passwords, with users matched by email address.
  • Hosting: The hosting provider and region are selected at provisioning. Where data is hosted outside Qatar, this is treated as a cross-border transfer and the hosting location is documented.
  • Passwords and HTTPS: Passwords are hashed using bcrypt (cost factor 12). HTTPS, HSTS, and secure-cookie enforcement are not currently implemented.
  • Logging: The system maintains a limited log of rejected webhook signatures, including the associated IP address. Logs are stored in a single file, with debug mode enabled, and are not currently subject to log rotation or a defined retention period. The log is accessible to users with server access. There is currently no audit log of administrative actions.
  • Export and deletion: Data export and deletion functionality is not currently available.
  • Sessions: Authentication uses server-side sessions with a 120-minute idle expiry. “Keep me signed in” currently uses a persistent cookie of approximately 400 days.
  • Cookies

The “MEDD Leadership For Effective and Educational Enrichment” website may use cookies and similar technologies to support its functionality, remember user preferences, and improve the overall user experience. Where applicable, cookies may also be used to help us understand how visitors interact with the website.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of some features of the website.

  • Data Retention

“MEDD Leadership For Effective and Educational Enrichment” retains personal data for no longer than reasonably necessary to provide its services and carry out the activities described in this Privacy Policy. Certain records may be retained for longer periods where necessary to comply with applicable legal, financial, auditing, or regulatory requirements. 

  • User Rights

Depending on applicable law, you may have certain rights in relation to the personal data we hold about you, including the right to:

  • Request information about, or a copy of, your personal data.
  • Request that inaccurate or incomplete personal data be corrected or updated.
  • Request the deletion of your personal data where there is no legal or legitimate reason for its continued retention.

You may submit a request using the contact details provided at the end of this Privacy Policy. 

  • Changes to This Privacy Policy

“MEDD Leadership For Effective and Educational Enrichment” may update this Privacy Policy from time to time to reflect changes to our services, data practices, or applicable legal or regulatory requirements. The latest version will be made available on this page, with the effective date updated accordingly.

We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data. 

  • Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how “MEDD Leadership For Effective and Educational Enrichment” handles your personal data, please contact us using one of the following methods:

  • Email: medd@info.com
  • Online: Through the “Contact Us” page on the “MEDD Leadership For Effective and Educational Enrichment” website.