Privacy Notice

This Privacy Notice explains how Nabyga Learning ("Nabyga", "we", "us"), based in the Sultanate of Oman, collects and uses your personal data when you use our website nabyga.com and our workshops (the "Service"). Nabyga Learning is the data controller of the personal data we process about you through the Service.

We collect only what we need to run the Service:

• Registration details — your full name and phone number.
• Access code — the unique code we issue to confirm your seat.
• Payment metadata — payment method (online or transfer), amount, currency, timestamps, and the payment provider's transaction ID. Card numbers and bank details are handled directly by Paddle and are never stored on our servers.
• Transfer receipts — if you pay by manual transfer, the receipt image or file you send us via WhatsApp.
• Workshop activity — quiz answers, scores, attendance, feedback and certificates.
• Support messages — anything you send us on WhatsApp or by email.
• Technical data — IP address, device and browser information, and basic usage/telemetry, collected automatically when you visit the Service.

• Provide the Service — register you, issue and verify your access code, run the workshop, quiz and leaderboard, mark attendance, and issue certificates. Legal basis: performance of a contract with you.
• Payments — process your payment through Paddle or verify your transfer receipt. Legal basis: performance of a contract with you and compliance with legal obligations (accounting, tax).
• Customer support — respond to your questions and complaints. Legal basis: our legitimate interest in supporting our participants.
• Security and fraud prevention — protect the Service, other participants and ourselves. Legal basis: our legitimate interest and legal obligation.
• Improve the Service — understand how the platform is used and improve future workshops. Legal basis: our legitimate interest.

We share personal data only with the categories of recipients below, and only to the extent needed:

• Paddle.com — our Merchant of Record for online payments. Paddle handles the sale, subscription management, payment processing, tax compliance, invoicing, and refunds for online orders. See Paddle's privacy policy.
• Hosting and backend infrastructure providers that host our website, database, and authentication (acting as processors on our behalf).
• Instructors of the workshop you register for, so they can deliver the session and see aggregated participation.
• Communication providers such as WhatsApp, when you contact us or send us a transfer receipt through them.
• Professional advisers (such as legal or accounting) where necessary.
• Authorities where required by applicable law.

We do not sell your personal data.

Our service providers (including Paddle and our hosting infrastructure) may process your data outside the Sultanate of Oman, including in the EEA, the UK and the United States. Where this happens, we rely on appropriate safeguards such as the contractual commitments of those providers and, where relevant, standard contractual clauses.

We keep your registration, payment and workshop-participation records for as long as needed to deliver the Service, issue certificates, and meet our legal and accounting obligations (typically up to seven years for financial records). Support messages and transfer receipts are kept as long as needed to resolve your query and defend any related claims. When we no longer need your data, we delete or anonymise it.

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data;
• object to or restrict certain processing;
• withdraw consent where we rely on it (without affecting past processing);
• lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at +968 7155 2969 and we will respond within a reasonable time (and in any case within one month where required by law).

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and row-level database security. No online service is perfectly secure, so we also ask you to keep your access code and account credentials confidential.

We use a small number of cookies and similar technologies that are strictly necessary for the Service to work (for example, to keep you signed in and remember your language preference). We do not use advertising cookies. You can control cookies through your browser settings, but the Service may not function properly without the essential ones.

We may update this Privacy Notice from time to time. If we make a material change, we will update the "Last updated" date above. For any privacy question, contact Nabyga Learning on WhatsApp at +968 7155 2969.