Privacy policy

• Your email and password — you use them to sign in to your account. We store your password hashed, so no one can read it, not even our team, and password reset links are valid for one hour and can be used only once. Your mobile number is used to contact you and to send you notifications about your application.
• Guardian details for students under 18: name, email and relationship, added by the student. The guardian uses them to follow the student’s file and reply to the admissions team; they can’t upload or pay, and the student can remove them at any time.
• Application details: your name in Arabic and English, email address, date of birth, nationality, city, gender, passport number, and any notes you write.
• Academic details for university applications: your most recent qualification and the institution that issued it, your GPA, graduation year, language test result, and funding source.
• Documents you upload: passport, national ID or iqama (residence permit), national address, personal photo, certificates and academic transcript, language test results, a bank statement when the institution asks for one, documents to be translated, and transfer receipts.
• Messages: your messages to the admissions team on your application page, and your enquiries and consultation requests (name, mobile number, email and message).
• Payment details: the amount, payment method, transaction number and reference. Your card details never pass through our servers and we don’t store them — you enter them directly in the payment gateway’s form.
• What we need to run the platform: a cookie for your sign-in session, and the form draft your browser saves before you sign in to your account. We don’t use advertising trackers. Some pricing pages show Jeel Pay’s official instalment calculator, which is subject to Jeel Pay’s own policy.

• To verify your identity when you sign in, and to save your applications and drafts to your account so you can finish them from any device.
• To review your application, submit it to the institution you chose, and issue the official quote.
• To keep you updated on your application by SMS and on your application page: when it’s received, documents we need, the quote, messages from the team, status changes, and payments.
• To process a payment or instalments when you choose them, to invoice you, and to meet our legal obligations.
• To answer your enquiries, and to protect the platform from misuse.

We process your data on the basis of the consent you give when you submit an application, to provide the service you asked for, and to meet our legal obligations. We don’t sell your data.

Scholarship news and offers by email: we send them to people who agreed to receive them, and to people who contacted us about studying in the last 24 months. Every message has a one-click unsubscribe link that takes effect immediately and doesn’t affect your application messages. We see whether a message was delivered, opened and its links clicked so we can improve what we send, and we don’t share that with anyone.

We share only what is needed to do what you asked:

• The institution you choose: the school, university, accommodation provider or training centre, and the visa authority for visa applications — the application details and documents needed for admission, the booking or the visa.
• Edvisor, for language school applications: a technology platform on which we create your profile and quote, through which we send your enrolment and its documents to the school, and from which we receive the school’s decision and offer letter.
• Jeel Pay, only if you choose instalments: your name, mobile number, email, and the amount and reference of your application, so Jeel Pay can check your eligibility and enter into an instalment agreement with you.
• Moyasar, the online payment gateway: you enter your card details directly in its form, and we receive only the transaction result, number and amount.
• Our SMS provider: your mobile number and the text of your application notifications, so they reach you.
• Our email providers: our Google Workspace mailbox for your application messages (sign-in and password reset links, guardian invitations, application notifications and document upload links), and Resend for scholarship news and offers — your email address and the message text so they reach you, and whether they were delivered and opened.
• Hosting and technical infrastructure providers that run the platform, under a contractual duty of confidentiality.
• Government or judicial authorities when the law requires us to.

Some of these parties are outside Saudi Arabia, such as schools and universities in your study destination, and Edvisor. We transfer to them only what your application needs, in accordance with the rules on transferring data outside Saudi Arabia.

• Uploaded documents are stored encrypted and can be opened only within the platform, by you or by the staff member authorised to handle your application.
• Staff access depends on their role: an admissions advisor sees the applications assigned to them and unassigned ones, and the website content editor can’t see student data.
• Your connection to the platform is encrypted. Your sign-in session is kept in a protected cookie that scripts on the page can’t read, and it ends after 60 days or when you sign out.
• The keys that connect us to our providers are stored encrypted and aren’t shown to anyone once saved.

• Application details, documents and messages: for as long as we provide the service, then for up to five years after the application is closed for legal purposes and to protect rights, after which they are destroyed.
• Payment records and invoices: for the period required by tax and accounting laws.
• Password reset links: one hour. Activation links and guardian invitations: seven days. Document upload links: 14 days or until the application is closed. Drafts: deleted when you submit the application. Documents you uploaded without submitting the application: you can delete them yourself from the form, or we’ll delete them at your request.

The Personal Data Protection Law gives you the right to:

• Know how your data is collected and why — which is what this page explains.
• Access your data and get a copy of it in a readable format.
• Have your data corrected, completed or updated.
• Ask for your data to be destroyed once it’s no longer needed, unless a law requires us to keep it.
• Withdraw your consent at any time. This doesn’t affect anything done before you withdraw it, and afterwards we may not be able to complete an existing application.
• Lodge a complaint with the Saudi Data and AI Authority (SDAIA) if you believe your data has been processed in breach of the law.

If you are under 18, submit your application with your parent or guardian’s knowledge and consent.

Message us on our official unified number on WhatsApp, call 0582357717, or write to us from your application page in My applications. We verify your identity using your registered email address and reply within 30 days.

We will never ask for your password or card details by phone or message, and KD has only one official number. Your document upload link is for your application only — don’t share it.

We may update this policy when our services or the law change. The date at the top of the page shows when it was last updated, and if a change affects how your data is used, we’ll let you know by message before it takes effect.