Privacy Policy

This Privacy Policy explains how Enrolia, operated by VNSCO L.L.C-FZ, a company established in the United Arab Emirates ("Enrolia", "we", "us", or "our"), collects, uses, stores, shares, and protects personal data when you use our website, landing pages, forms, advertisements, WhatsApp channels, emails, phone calls, CRM workflows, or any other services connected with enrolia.ae.

By accessing our website, submitting an enquiry, completing a lead form, contacting us, communicating with us by phone, WhatsApp, SMS, email, social media, or otherwise providing personal data to us, you acknowledge and agree that we may process your personal data in accordance with this Privacy Policy and applicable UAE laws.

If you do not agree with this Privacy Policy, you should not use our website, submit your information, or communicate with us.

1. Who we are

Enrolia is an education enrollment, lead qualification, admissions support, and business development platform. We help parents, guardians, students, schools, nurseries, universities, training providers, and other education-related organisations connect with each other.

Depending on the situation, we may act as an independent data controller, joint controller, processor, intermediary, service provider, referral partner, marketing partner, admissions support provider, or business development partner.

Nothing in this Privacy Policy creates any admission guarantee, agency relationship, fiduciary duty, employment relationship, exclusive relationship, or obligation for Enrolia to act in the interests of any specific user, parent, student, school, university, nursery, or partner.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through:

• enrolia.ae;
• Enrolia landing pages and forms;
• Meta, Google, LinkedIn, TikTok, WhatsApp, or other advertising and communication channels;
• phone calls, call tracking systems, call recordings, SMS, WhatsApp, email, and CRM systems;
• meetings, events, referrals, partner introductions, and business development activities;
• campaigns operated by us for education partners;
• any other channel where this Privacy Policy is referenced or where you provide information to Enrolia.

This Privacy Policy does not apply to third-party websites, schools, nurseries, universities, payment providers, social media platforms, CRM providers, analytics providers, or other third parties that have their own privacy policies.

3. Personal data we may collect

We may collect and process the following categories of personal data:

3.1 Contact and identity data

This may include your name, phone number, WhatsApp number, email address, country, emirate, city, nationality, preferred language, and other contact details you provide.

3.2 Parent, guardian, student, or applicant enquiry data

This may include information about the type of education you are looking for, preferred school or institution, curriculum, year group, grade, age range, location preference, budget, expected start date, preferred communication method, admission urgency, tour preference, and other information relevant to an education enquiry.

3.3 Limited child-related information

Our services are intended for adults, including parents, guardians, and authorised representatives. We do not knowingly collect personal data directly from minors.

Where a parent, guardian, or authorised adult submits an education enquiry, we may process limited information relating to a prospective student where necessary to match the enquiry with relevant schools, nurseries, universities, or education providers. This may include age range, year group, grade, curriculum interest, language preference, location preference, and similar education-related information.

Unless specifically requested by a relevant education provider at a later stage, you should not submit a minor's passport, Emirates ID, medical records, photos, full address, financial documents, or other sensitive personal documents through Enrolia.

By submitting any child-related information, you confirm that you are the parent, legal guardian, or otherwise authorised adult and that you have the legal right to provide such information.

3.4 Communication data

We may collect records of your communications with us, including emails, WhatsApp messages, SMS messages, chat messages, social media messages, phone call notes, call recordings, meeting notes, CRM notes, support requests, and follow-up history.

Phone calls and online communications may be recorded, monitored, transcribed, summarised, stored, or reviewed for quality assurance, training, compliance, lead qualification, admissions support, dispute prevention, and business operations.

3.5 Marketing, advertising, and analytics data

We may collect data about how you found us and interacted with our campaigns, including advertising source, campaign name, UTM parameters, landing page, lead source, click data, browser information, device information, approximate location, IP address, cookies, pixels, conversion events, page views, form submissions, and similar analytics data.

3.6 CRM and lead management data

We may create and store CRM records containing your enquiry status, communication history, school preferences, assigned adviser, follow-up notes, lead score, qualification status, appointment status, tour status, application status, payment or enrollment status where shared with us, and related operational information.

3.7 B2B and partner data

If you represent a school, nursery, university, training provider, agency, vendor, advertiser, or business partner, we may process your business contact details, job title, organisation, website, LinkedIn profile, business email, phone number, meeting notes, proposal history, contract status, campaign status, commercial discussions, and publicly available business information.

3.8 Technical data

We may collect IP address, browser type, device type, operating system, language settings, timezone, referring URL, pages viewed, session duration, error logs, security logs, and similar technical information.

3.9 Information from third parties

We may receive information from education partners, advertising platforms, analytics providers, CRM providers, referral partners, public directories, business databases, social media platforms, event organisers, consultants, agencies, and other lawful sources.

4. Data we do not intentionally collect

We do not intentionally collect highly sensitive personal data unless it is necessary for a specific lawful purpose or you voluntarily provide it.

You should not submit health data, disability records, medical information, biometric data, religious information, political opinions, criminal records, financial account credentials, passport copies, Emirates ID copies, visa copies, or other sensitive documents unless we or a relevant education partner specifically request them for a clearly identified purpose.

If you provide sensitive or unnecessary information without being asked, we may delete it, ignore it, restrict it, retain it for legal protection, or forward it to a relevant education partner where reasonably necessary for your enquiry.

5. How we collect personal data

We may collect personal data when you:

• visit our website or landing pages;
• submit a form;
• click or respond to an advertisement;
• contact us by phone, WhatsApp, SMS, email, social media, or chat;
• book a call, meeting, tour, or consultation;
• request information about schools, nurseries, universities, or education providers;
• communicate with one of our advisers or admissions support team;
• interact with our CRM, chatbot, automation, AI assistant, or lead qualification tools;
• attend an event, webinar, meeting, or presentation;
• are referred to us by another person, company, school, university, nursery, or partner;
• represent a business or education institution that we may contact for partnership or B2B purposes.

6. Purposes of processing

We may process personal data for the following purposes:

6.1 Education enquiry and matching

To understand your requirements, qualify your enquiry, recommend relevant schools, nurseries, universities, courses, programmes, or education providers, and help connect you with relevant admissions teams.

6.2 Communication and follow-up

To contact you by phone, WhatsApp, SMS, email, social media, or other channels regarding your enquiry, admissions options, tours, applications, deadlines, availability, offers, reminders, updates, and related matters.

6.3 Sharing with education partners

To share your information with schools, nurseries, universities, training providers, admissions teams, consultants, or other education partners that may be relevant to your enquiry or that you ask us to connect you with.

6.4 CRM and admissions support

To create, manage, update, and store CRM records; track lead status; manage follow-ups; assign advisers; record communication history; support admissions processes; improve response times; and measure campaign or enrollment performance.

6.5 Marketing and promotional communication

To send you information about education options, open days, school tours, deadlines, offers, events, newsletters, market updates, content, partner opportunities, or other services that may be relevant to you.

You may opt out of marketing communications, but we may still send service-related, transactional, administrative, legal, or enquiry-related communications where permitted by law.

6.6 Advertising and retargeting

To measure and improve our advertising campaigns, create audiences, exclude irrelevant audiences, retarget users, optimise conversions, attribute leads, improve campaign performance, and deliver more relevant advertising through platforms such as Meta, Google, LinkedIn, TikTok, or similar providers.

6.7 B2B outreach and partnerships

To identify, contact, assess, and communicate with schools, nurseries, universities, education groups, investors, vendors, advertisers, agents, consultants, and other businesses for partnership, sales, marketing, research, referral, commercial, or business development purposes.

6.8 Analytics and product improvement

To analyse website usage, campaign performance, parent demand, enquiry quality, school demand, admissions trends, user behaviour, conversion rates, CRM performance, and service quality.

6.9 Automation, AI, profiling, and lead scoring

To use automated tools, AI systems, CRM automation, lead scoring, routing, deduplication, enrichment, classification, summaries, recommendations, and workflow automation.

We do not make final school admission decisions. Admission, acceptance, rejection, fees, availability, eligibility, and enrollment decisions are made by the relevant school, nursery, university, or education provider.

6.10 Security, fraud prevention, and compliance

To protect our website, CRM, users, partners, staff, systems, campaigns, and business from fraud, abuse, unauthorised access, spam, security incidents, unlawful activity, misrepresentation, or misuse.

6.11 Legal, financial, and business protection

To comply with applicable laws, maintain records, respond to lawful requests, enforce agreements, defend or pursue claims, resolve disputes, audit performance, protect our legal rights, and support corporate, accounting, tax, insurance, and administrative requirements.

7. Legal basis for processing

We process personal data where permitted under applicable UAE laws, including where:

• you have given consent;
• processing is necessary to respond to your enquiry or provide requested services;
• processing is necessary for pre-contractual or contractual purposes;
• processing is necessary to comply with legal obligations;
• processing is necessary to protect our rights, defend claims, pursue claims, prevent fraud, or protect third-party rights;
• processing is necessary for business operations, B2B communications, marketing, analytics, service improvement, security, or other lawful commercial purposes;
• processing is based on information that you made public or that was lawfully obtained from public or third-party sources;
• processing is otherwise permitted by applicable law.

Where processing is based on consent, you may withdraw consent in accordance with this Privacy Policy. Withdrawal of consent does not affect processing that occurred before withdrawal and does not prevent us from continuing to process data where another lawful basis applies.

8. Consent to contact

By submitting your phone number, WhatsApp number, email address, or other contact details to Enrolia, you consent to being contacted by Enrolia and, where relevant, by selected schools, nurseries, universities, education providers, admissions teams, consultants, or partners.

Contact may be made by phone call, WhatsApp, SMS, email, social media, CRM automation, chatbot, or other communication channels.

You understand that your enquiry may require multiple follow-ups, reminders, clarifications, and coordination messages.

You may opt out of marketing communications, but opting out may not stop service-related, administrative, transactional, legal, or enquiry-related communications where such communication is necessary or permitted by law.

9. Sharing personal data with schools and partners

We may share personal data with:

• schools;
• nurseries;
• universities;
• training providers;
• admissions teams;
• education groups;
• education consultants;
• CRM providers;
• call centre and communication providers;
• WhatsApp, email, SMS, and telephony providers;
• advertising platforms;
• analytics platforms;
• automation and AI service providers;
• hosting and cloud providers;
• payment providers;
• professional advisers;
• legal, accounting, audit, tax, insurance, and compliance advisers;
• government authorities, regulators, courts, or law enforcement where required or permitted;
• potential buyers, investors, successors, acquirers, or business partners in connection with a merger, acquisition, restructuring, asset sale, financing, investment, or corporate transaction.

Once your information is shared with a school, nursery, university, or other third-party provider, that party may process your data under its own privacy policy and legal responsibilities. Enrolia is not responsible for the privacy practices, admissions decisions, fees, service quality, communications, contracts, offers, or actions of third-party education providers.

10. Commercial referral and commission model

Enrolia may receive fees, commissions, referral fees, success fees, service fees, advertising fees, retainers, or other commercial consideration from schools, nurseries, universities, education providers, agencies, or partners in connection with leads, referrals, applications, enrollments, campaigns, admissions support, or related services.

You acknowledge that we may share relevant enquiry and status information with partners for the purpose of tracking referrals, campaign performance, commission eligibility, admissions outcomes, and commercial reporting.

This does not mean that we sell personal data as a standalone data brokerage product. However, personal data may be shared as part of our referral, enrollment, admissions support, marketing, CRM, and commercial services.

11. B2B use of data

If you are a representative of a business, school, nursery, university, education group, agency, vendor, investor, advertiser, or potential partner, we may use your business contact information for B2B purposes, including:

• partnership outreach;
• sales and business development;
• proposal preparation;
• CRM records;
• market mapping;
• account-based marketing;
• event invitations;
• commercial follow-up;
• contract negotiation;
• relationship management;
• research and analysis;
• investor, vendor, or partner communications.

We may collect B2B information from public sources, referrals, business directories, websites, LinkedIn, events, meetings, email signatures, advertising interactions, partner introductions, and other lawful sources.

12. Cookies, pixels, and tracking technologies

We may use cookies, pixels, tags, scripts, SDKs, server-side tracking, analytics tools, advertising identifiers, and similar technologies to operate our website, improve performance, remember preferences, analyse traffic, measure campaigns, attribute conversions, prevent fraud, and deliver or optimise advertising.

These technologies may be provided by third parties such as Google, Meta, LinkedIn, TikTok, analytics providers, CRM providers, or advertising partners.

You may disable cookies through your browser settings, but some website features may not work properly. Where required by law, we may ask for your consent to use certain cookies or tracking technologies.

We may not respond to "Do Not Track" browser signals unless required by applicable law.

13. Automated tools, AI, and profiling

We may use automated systems, AI tools, CRM automation, lead scoring, routing, enrichment, deduplication, transcription, summarisation, classification, and recommendation tools to support our operations.

These tools may be used to:

• qualify enquiries;
• route leads to relevant schools or advisers;
• prioritise follow-ups;
• generate call or chat summaries;
• improve campaign performance;
• identify likely education preferences;
• detect duplicate or fraudulent enquiries;
• analyse conversion patterns;
• support B2B outreach and partner selection.

Automated tools support our internal operations and do not guarantee admission, enrollment, pricing, availability, eligibility, or acceptance by any education provider.

Where applicable law gives you the right to object to certain automated processing, you may contact us using the details in this Privacy Policy.

14. Data accuracy and user responsibility

You are responsible for ensuring that any information you provide to us is accurate, lawful, complete, current, and not misleading.

If you provide information about another person, including a child, spouse, family member, employee, student, colleague, or business contact, you confirm that you have authority to provide that information and that such person has been informed where required by law.

We are not responsible for loss, delay, rejection, missed deadlines, incorrect school matching, communication failure, or other consequences caused by inaccurate, incomplete, delayed, unauthorised, or misleading information provided to us.

15. International transfers

We may process, store, access, or transfer personal data inside or outside the UAE. This may include transfers to countries where our service providers, CRM systems, hosting providers, analytics providers, advertising platforms, communication tools, consultants, team members, partners, or education providers are located.

By using our services or submitting information to us, you acknowledge that your personal data may be transferred internationally where permitted by applicable law.

Where required, we may rely on consent, contractual safeguards, adequacy mechanisms, necessity for requested services, legal claims, or other lawful transfer mechanisms.

16. Data retention

We may retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including enquiry handling, admissions support, partner reporting, CRM management, marketing, analytics, legal compliance, accounting, audit, fraud prevention, dispute resolution, enforcement of agreements, business records, and protection of our rights.

Unless a shorter or longer period is required by law or business necessity, we may retain enquiry, CRM, communication, marketing, and partner records for up to seven years from the last meaningful interaction, transaction, campaign, referral, enrollment, dispute, or business relationship.

We may retain anonymised, aggregated, statistical, analytical, or non-identifiable data indefinitely.

Deletion requests may be refused, delayed, limited, or fulfilled only partially where retention is necessary or permitted for legal, regulatory, security, accounting, audit, fraud prevention, dispute, business record, contractual, or rights-protection purposes.

17. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

However, no website, CRM system, communication channel, email system, cloud service, database, or internet transmission is completely secure. We do not guarantee absolute security.

You are responsible for using secure devices, secure networks, accurate contact details, and appropriate caution when sharing personal information online or through messaging platforms.

18. Your rights

Subject to applicable UAE laws and any available exceptions, you may have certain rights in relation to your personal data, including the right to:

• request information about the types of personal data processed;
• request access to certain personal data;
• request correction of inaccurate personal data;
• request deletion of personal data in certain circumstances;
• request restriction or cessation of processing in certain circumstances;
• object to certain direct marketing;
• withdraw consent where processing is based on consent;
• request transfer of personal data where technically feasible and legally required;
• object to certain automated processing where applicable.

These rights are not absolute. We may reject, limit, delay, or charge for a request where permitted by law, including where a request is excessive, repetitive, unfounded, unclear, unverifiable, affects the rights of others, affects security, conflicts with legal obligations, relates to legal claims, affects investigations, requires disproportionate effort, or where we have a lawful basis to continue processing.

19. How to make a request

To make a privacy request, contact us at:

info@enrolia.ae

We may ask you to verify your identity, confirm your relationship to the relevant data, clarify your request, provide additional information, or use a specific request process.

We may not respond to requests that are anonymous, unverifiable, abusive, excessive, unlawful, misleading, or unrelated to personal data processed by Enrolia.

If your request relates to data already shared with a school, nursery, university, or other third party, you may need to contact that third party directly.

20. Marketing opt-out

You may opt out of marketing emails by using the unsubscribe link where available or by contacting us at info@enrolia.ae.

For WhatsApp, SMS, phone, or other channels, you may request that we stop marketing communications. We may keep a suppression record to ensure we do not contact you again for the same marketing purpose.

Opting out of marketing does not prevent us from contacting you for service-related, transactional, administrative, legal, security, admissions, referral tracking, or ongoing enquiry purposes where permitted by law.

21. Third-party platforms

Our website and services may interact with third-party platforms, including Meta, Google, LinkedIn, TikTok, WhatsApp, email providers, CRM systems, analytics platforms, call tracking providers, payment processors, hosting providers, and school systems.

These third parties may collect or process data according to their own terms and privacy policies. We are not responsible for third-party privacy practices, security measures, service availability, platform rules, data processing, or communications.

22. Third-party links

Our website, messages, emails, or partner communications may contain links to third-party websites, school websites, university websites, application portals, booking pages, social media pages, payment pages, or other external resources.

We are not responsible for the content, accuracy, privacy practices, security, availability, or actions of any third-party website or service.

23. Children and minors

Our website and services are intended for adults. Minors should not submit information directly to Enrolia.

If you are under 18, you must not use our website, submit forms, contact us, or provide personal data without the involvement and consent of a parent or legal guardian.

If we become aware that we have collected personal data directly from a minor without appropriate authorisation, we may delete, restrict, or otherwise handle that data in accordance with applicable law.

Parents and guardians should avoid submitting unnecessary sensitive information about minors through Enrolia.

24. No responsibility for admissions decisions

Enrolia may help connect users with schools, nurseries, universities, or education providers, but we do not control admissions decisions, availability, eligibility criteria, tuition fees, discounts, payment terms, refund rules, academic requirements, visa requirements, transport availability, documents required, or enrollment outcomes.

Any admissions decision, offer, rejection, fee, contract, refund, dispute, or service issue is between you and the relevant education provider.

25. Business transfers

If Enrolia or VNSCO L.L.C-FZ is involved in a merger, acquisition, restructuring, financing, investment, sale of assets, transfer of business, insolvency process, joint venture, or similar transaction, personal data may be disclosed or transferred as part of that transaction.

Any successor or acquiring party may continue to process personal data in accordance with this Privacy Policy or a replacement policy.

26. Changes to this Privacy Policy

We may update this Privacy Policy at any time. The updated version will be posted on enrolia.ae or otherwise made available through our services.

The "Last updated" date will indicate when the Privacy Policy was most recently changed.

Your continued use of our website, services, forms, communication channels, or interactions with us after an update means you acknowledge the updated Privacy Policy.

27. Governing law

This Privacy Policy is governed by the applicable laws of the United Arab Emirates, subject to any mandatory laws that cannot be excluded.

To the maximum extent permitted by applicable law, any dispute arising out of or in connection with this Privacy Policy, our website, or our processing of personal data shall be subject to the competent courts of Dubai, United Arab Emirates.

28. Contact

For privacy-related questions or requests, contact:

Enrolia

Operated by VNSCO L.L.C-FZ

United Arab Emirates

Email: info@enrolia.ae