Privacy Policy

This policy is effective from 15 September 2026.

How we organise protection of personal data internally is described in our Data Protection Policy. Use of this website is also subject to our Terms of Use.

CRAM EdTech is a UAE-licensed technology and education company. We provide computer programming, consultancy, and educational support services, including IGCSE and A Level tuition and the Learning Portal.

For the purposes of the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and related regulations, CRAM EdTech is the data controller for personal data described in this policy, unless we tell you otherwise for a specific service.

Privacy requests and questions: use the contact or Book a Call options on our website, call +971 56 604 0293, or email info@lms.com. Postal address: P.O. Box 19894, United Arab Emirates.

This policy covers personal data we process in connection with:

• Our marketing website (cramedtech.com) and related content
• Enquiries, bookings, and enrolment conversations
• The Learning Portal (accounts, classes, syllabus, assignments, and related features)
• Identity documents used for UAE bank / tuition payment verification
• Software and consultancy enquiries where you share contact or project details with us

• Students enrolled or invited to the Learning Portal
• Parents or guardians (including where a parent’s passport is provided for fee verification)
• Teachers and other staff using the portal
• Website visitors and people who book a call or contact us

Account and profile. Name, email address, password or Google sign-in details, role (for example student, teacher, or admin), and optional profile photo.

Identity documents (high sensitivity). For bank and tuition payment verification in the UAE we may collect:

• Students: Emirates ID or National ID (front and back) belonging to the student, and the parent’s passport photo page (not the student’s passport), because fees usually come from the parent’s bank account
• Teachers: their own Emirates ID or National ID (front and back) and their own passport photo page

We may extract limited fields from those images (for example document number and expiry date) using automated tools so admins can manage verification and renewals. Document images are stored in a private storage area, not a public website folder.

Education and portal activity. Enrolments, class groups, live class and schedule information, syllabus progress, assignments, submissions, grades, feedback, attendance, and similar learning records needed to deliver tuition.

Website and communications. Contact details you submit (name, email, phone), booking information, messages you send us, and technical data such as device or browser type, approximate location derived from IP address, and diagnostic logs. If analytics tools (for example Google Analytics) are enabled, they may collect aggregated or device-level usage data.

Information from others. An admin or school contact may invite you to the portal and provide your name, email, and role so we can create your account.

We use personal data to:

• Create and manage accounts and authenticate users
• Deliver tuition, classes, assignments, and portal features
• Verify identity for UAE bank transfers and tuition fee processing
• Respond to enquiries and book introductory calls
• Improve our services, security, and website performance
• Meet legal, licensing, accounting, and regulatory obligations in the UAE
• Send service messages (for example password resets, invitations, and document reminders) and, where permitted, updates about our courses

Under the PDPL and, where relevant for international individuals, comparable frameworks, we rely on bases such as: performance of a contract or steps prior to a contract (enrolment and portal access); consent (for example optional marketing or certain document uploads); legal obligation; and legitimate interests that do not override your rights (for example securing our systems and improving the product), assessed carefully where applicable.

Many IGCSE and A Level students are under 18. Where a student is a minor, a parent or guardian should oversee enrolment and account setup. We collect the parent’s passport for payment verification as described above, and we expect parents to review this policy with their child as appropriate.

If you believe we hold a child’s data without appropriate parental involvement, contact us using the details above and we will review and take suitable action.

We do not sell personal information. We share data only as needed to run our services, including with trusted processors under appropriate arrangements, for example:

• Hosting, database, authentication, and private file storage (for example Supabase)
• Website and application hosting (for example Vercel)
• Sign-in and AI-assisted tools used in our products (for example Google services for OAuth and document or syllabus processing)
• Email delivery and communications tools

We may also disclose information if required by UAE law, a competent authority, or to protect the rights, safety, or property of CRAM EdTech, our users, or others. Identity documents are accessed inside CRAM EdTech only by authorised staff (typically admins) for payment verification and account setup checks — not shared with other students or the public.

We are based in the UAE and serve families and clients in the UAE and internationally. Some processors may store or process data in other countries. Where personal data is transferred outside the UAE, we take steps consistent with the PDPL and good international practice (for example contractual safeguards with processors and limiting access to what is needed).

If you are in the EEA, UK, or another region with similar privacy laws, you may have additional rights under local law. We aim to honour equivalent transparency and access rights where they apply to our processing, even though CRAM EdTech is not established as an EU controller unless we notify you otherwise.

We keep personal data only as long as needed for the purposes above, or longer where the law requires it.

• Account and academic records: for the period of your enrolment or engagement, then for a reasonable period afterward for educational continuity, dispute handling, and legal retention (often up to several years depending on the record type)
• Identity documents: while needed for fee verification, banking compliance, and related account checks; we then delete or restrict them when they are no longer required
• Website enquiries and booking details: for a shorter period needed to respond and follow up, unless you become a client or student and the data becomes part of your account relationship

We apply technical and organisational measures appropriate to the risk, including private storage for identity documents, access controls, encrypted transport (HTTPS), and limiting admin access to sensitive files. No online service is completely secure; please use a strong unique password and tell us promptly if you suspect unauthorised access to your account.

More detail on our protection approach is in the Data Protection Policy.

Subject to the PDPL and any applicable international law, you may have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request erasure or restriction in certain cases
• Object to certain processing
• Withdraw consent where processing is based on consent
• Receive information about how we process your data (as in this policy)

Parents or guardians may exercise rights on behalf of a minor student where appropriate. To make a request, contact us using the details in “Who we are”. We may need to verify your identity before responding. Some requests may be limited where we must retain data for legal, security, or contractual reasons.

We use cookies and similar technologies that are necessary for the site and Learning Portal to function (for example session and authentication cookies so you stay signed in across cramedtech.com and learning.cramedtech.com where configured). If we use analytics cookies, they help us understand aggregated usage. You can control cookies through your browser settings; blocking some cookies may affect login or site features.

If you have a concern, please contact us first so we can try to resolve it. You may also have the right to lodge a complaint with the UAE Data Office or another competent data protection authority in your country of residence, where applicable.

We may update this policy from time to time. The latest version will always be published on this page with an updated effective date. Material changes may also be highlighted through the website or portal where appropriate.