Privacy Policy

1. Who We Are

Hesham Abbas Medany for Consulting W.L.L, trading as Hesham Abbas for Consulting ("HAC", "we", "us", "our"), is a consulting firm registered in the Kingdom of Bahrain, Commercial Registration No. 170152-1. Our registered address is Flat/Shop No. 1144, Building 1398, Road 4626, Block 346, Manama / Sea Front, Kingdom of Bahrain.

This Privacy Policy explains how we collect, use, store, and protect personal data when you visit heshamabbasforconsulting.com (the "Website"), enquire about our services, or register for our training programs.

For any privacy-related questions or requests, contact us at info@heshamabbasforconsulting.com.

2. What Data We Collect

Data you provide directly:

• Contact details: full name, email address, phone number, country of residence
• Professional details: organization name and job title (where provided)
• Enrollment details: the course, cohort date, and program you register for
• Correspondence: the content of emails or messages you send us

Data collected automatically:

• Technical data: IP address, browser type, device type, and pages visited, collected through standard server logs and our hosting infrastructure

Payment data:

We do not collect, store, or process your card or payment details. All payments are processed by Tap Payments, a licensed payment services provider regulated in the GCC. When you make a payment, your card details are entered directly on Tap's secure payment page and are subject to Tap's own privacy policy, available at tap.company. We receive only confirmation of payment status, the amount, and a transaction reference.

3. How We Use Your Data

We use your personal data to:

• Process your course registration and payment
• Send you enrollment confirmations, course information, joining instructions, and payment receipts
• Notify you of changes to course dates, format, or content
• Respond to your enquiries
• Issue certificates upon course completion, which may require sharing your name with the relevant awarding body (see Section 5)
• Maintain business records as required by Bahraini law
• Improve our Website and services

We do not sell your personal data. We do not use your data for automated decision-making or profiling.

Marketing: We will only send you marketing communications about future courses or services if you have registered for a program with us or have otherwise consented. Every marketing email includes a clear way to opt out.

4. Legal Basis for Processing

We process your personal data in accordance with the Kingdom of Bahrain's Personal Data Protection Law (Law No. 30 of 2018). Our processing is based on:

• Contract performance: processing needed to register you for a course and deliver it
• Legal obligation: record-keeping required under Bahraini commercial and tax law
• Legitimate interest: responding to enquiries and improving our services
• Consent: where you have opted in to marketing communications

5. Who We Share Data With

We share personal data only where necessary to deliver our services:

• Tap Payments — payment processing (payment status and transaction data only)
• Awarding and accreditation bodies (e.g., Highfield) — your name and course results, solely for certificate issuance and qualification registration
• Course delivery partners — where a course is delivered in partnership with an accredited training provider, your name and contact details may be shared with the delivering trainer solely for course administration
• Service providers — our website hosting provider and transactional email provider, who process data on our behalf under appropriate safeguards
• Legal authorities — where disclosure is required by law or a valid legal process in the Kingdom of Bahrain

Some of these recipients may be located outside Bahrain (including in the GCC, Egypt, the United Kingdom, the United States, or the European Union). Where data is transferred internationally, we take reasonable steps to ensure it is protected to a standard consistent with Bahraini data protection law.

6. Data Retention

We retain personal data only as long as necessary:

• Enrollment and payment records: retained for the period required by Bahraini commercial and tax law
• Certificate records: retained to enable verification of qualifications
• Enquiry correspondence: retained for up to 24 months after last contact
• Marketing preferences: retained until you opt out

When data is no longer needed, it is securely deleted.

7. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) across the Website, restricted access to personal data on a need-to-know basis, and reliance on established, security-audited service providers for hosting, payments, and email. No system is completely secure; if we become aware of a data breach affecting your personal data, we will act in accordance with our obligations under Bahraini law.

8. Your Rights

Under Bahrain's Personal Data Protection Law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to legal retention requirements
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, email info@heshamabbasforconsulting.com. We will respond within a reasonable timeframe and in accordance with applicable law.

9. Cookies

The Website uses only the cookies and local technologies necessary for it to function correctly. We do not currently use advertising or cross-site tracking cookies. If we introduce analytics or other non-essential cookies in the future, this policy will be updated and appropriate consent obtained.

10. Third-Party Links

The Website may contain links to third-party websites, including those of our partners and accreditation bodies. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies.

11. Children

Our services and Website are directed at professionals and businesses. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be highlighted on the Website. Continued use of the Website after changes constitutes acceptance of the updated policy.

13. Contact

Hesham Abbas Medany for Consulting W.L.L
Flat/Shop No. 1144, Building 1398, Road 4626, Block 346
Manama / Sea Front, Kingdom of Bahrain
Commercial Registration No. 170152-1
Email: info@heshamabbasforconsulting.com