Privacy Policy

HIRFA LLC (operating as Hirfa Academy) respects your privacy and is committed to protecting your personal data.

1. Information We Collect

We collect:

• Full name
• Email address
• Date of birth
• Government ID type and number (encrypted with AES-256-GCM, used solely for identity verification on your certificate, never shared with third parties, deleted upon request)
• Payment metadata (we do not see full card details)

2. How We Use Your Information

Your data is used to:

• Process payments
• Issue certificates and course access
• Provide customer support
• Maintain the integrity of the service

3. Data Sharing

We may share data with trusted third parties, including payment processors such as Stripe, solely for transaction processing.

4. Data Retention

Data is stored securely and retained only as long as necessary for operational and legal purposes.

5. User Rights

Users may request access to, correction of, or deletion of their personal data by contacting us.

6. Security

We implement reasonable measures to protect user data; however, no system is ever completely infallible.

7. Updates

This policy may be updated periodically.

8. Cookies & Tracking

We use cookies and tracking pixels (Meta Pixel, TikTok Pixel, Google Analytics) to improve our services and measure advertising performance. You can opt out via the cookie consent banner. We do not sell your data.

9. Legal Basis for Processing (GDPR)

For users in the EU/UK, we process your personal data on the following legal bases:

• (a) Contract performance — to deliver your certificate and course access.
• (b) Legitimate interest — to prevent fraud and maintain platform integrity.
• (c) Consent — for marketing communications and tracking cookies.

10. Data Retention Period

We retain your name, email, and certificate data for the validity period of your certificate plus two years. Encrypted national ID data is deleted upon request. You may request deletion at any time via the contact page.

11. Your Rights (EU/UK)

If you reside in the EU or UK, you have the right to access your data, correct errors, request deletion, object to processing, and lodge a complaint with your local data protection authority.

12. Contact for Data Requests

For any data-related requests, email us at: support@hirfa.academy