Vetta Privacy Policy

1. Who this policy covers

This Privacy Policy applies to the Vetta IT Consultancy and Services website at www.vetta.ae (the "Site"), and to the Vetta Learning Management System reachable from it (the "LMS") — together, "Vetta," "we," "us," or "our." It applies to visitors browsing the Site, people who submit an enquiry through our Contact page, and students and company administrators who use the LMS.

This policy does not cover the practices of any third-party service we link to or rely on to operate the Site — see "Links to other websites" and "How we share information" below for how we handle those.

2. Information we collect

Information you give us directly

You can browse the marketing pages of this Site — the home, courses, services, and about pages — without telling us anything about yourself. We only collect personal information when you choose to give it to us, for example:

• Contact form enquiries: your full name, email address, mobile number, job designation, company name, preferred contact method, enquiry category, and whatever you write in your message.
• LMS accounts: your name, work email address, and company affiliation when an account is created for you (student or company-admin role).
• Direct correspondence: anything you send us by email, such as to support@vetta.ae, including any attachments.

Information collected automatically

Like most websites, our hosting and content-delivery providers automatically log basic technical information when you visit — such as your IP address, browser type, device type, the pages you request, and timestamps. We use this only in aggregate, to keep the Site running reliably and secure, not to build a profile of you as an individual. See "Cookies & similar technologies" below for more detail on this and on any future analytics tools.

3. How we use your information

We use the information described above to:

• Respond to enquiries submitted through the Contact form or sent to us directly, and follow up about the training, consulting, or infrastructure services you asked about.
• Create and administer LMS accounts, enrol students in the right courses, track course and quiz progress, and issue certificates of completion.
• Send service-related communications — for example, confirming enrolment, sharing course materials, or notifying you of a password reset.
• Keep the Site and LMS secure, diagnose technical problems, and improve how they work.
• Meet our legal, accounting, and regulatory obligations in the UAE.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you, and we do not sell your personal information to third parties.

4. Our legal basis for processing

Vetta is based in the United Arab Emirates, and we process personal information in line with the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"). Depending on the situation, our basis for processing your information is one of the following:

• Your consent — for example, when you submit the Contact form, or agree to LMS terms when your account is created.
• Performance of a contract — for example, administering your LMS account and course enrolment once your company has engaged Vetta for training.
• Our legitimate business interests — for example, keeping the Site secure and responding to enquiries — balanced against your rights and interests.
• A legal obligation — for example, retaining certain business records as UAE law requires.

Where we rely on your consent, you may withdraw it at any time — see "Your rights" below.

5. Cookies & similar technologies

As of the effective date above, this Site does not use advertising or third-party tracking cookies, and we don't currently run a web-analytics tool. The Site does use a small number of essential, functional technologies to work correctly:

• LMS sign-in: the LMS uses a secure session token (via our authentication provider, Supabase) so you stay signed in as you move between pages. Without it, you'd need to sign in again on every page.
• Fonts: the Site loads typefaces from Google Fonts, which may involve a request to Google's servers when a page loads.

If we introduce analytics or performance-monitoring tools in the future — such as Google Analytics, to understand which pages are useful and how the Site can be improved — we will update this section to name the tool, describe what it collects, and explain how you can opt out where applicable, before it goes live. Where a browser cookie-consent banner is required for a given tool, we'll add one at that time. Most browsers also let you block or delete cookies yourself through their settings; doing so may affect features like staying signed in to the LMS.

6. How we share information

We do not sell, rent, or trade your personal information. We share it only in the following circumstances:

• Service providers we rely on to operate the Site and LMS — currently Web3Forms (to deliver Contact-form submissions to our inbox) and Supabase (to host LMS accounts, course data, quiz results, and certificate files). Each processes information on our behalf and only as needed to provide their service to us.
• Within your own company's LMS account, where applicable — a company administrator can see the enrolment, quiz results, and certificates of students registered under their own company, so they can track their team's training. They cannot see another company's data — see "The LMS in detail" below.
• Legal and safety reasons — if required by UAE law, a court order, or a valid legal process, or where necessary to protect the rights, property, or safety of Vetta, our users, or the public.
• In connection with a business transaction — such as a merger, acquisition, or sale of assets, in which case we would take reasonable steps to ensure your information continues to be protected.

7. The LMS in detail

Because the LMS handles more personal information than the rest of the Site, here's specifically what it stores and who can see it:

• Student accounts hold your name, email address, the company you're enrolled under, which courses you're assigned, your quiz attempts and scores, and any certificates issued to you. You can see your own data by signing in.
• Company-admin accounts can see and manage the students registered under their own company only — enrolling them in courses, viewing their results, and issuing or removing certificates. Database-level access controls (row-level security) enforce this separation; a company admin cannot query or view another company's students, even by guessing an ID.
• Certificates generated on course completion are stored as files linked to your student record and are accessible to you and your company admin.
• Account deletion: a company admin can permanently delete a student record (or an entire company record) from the LMS, which removes the associated enrolments, quiz history, and certificate files. This is irreversible once confirmed. If you'd like your own LMS data removed and don't have access to a company admin, contact us using the details in "Contact us" below.

8. How long we keep information

We keep personal information only for as long as it's needed for the purpose it was collected, or as UAE law requires:

• Contact form enquiries are kept for as long as needed to respond to and follow up on the enquiry, and a reasonable period after in case you get back in touch.
• LMS account data is kept for as long as your account remains active with your company, so your course history and certificates stay available to you. It is deleted when a company admin removes your record, or when we're asked to and are not otherwise required to keep it.
• Business and financial records connected to services provided are retained for the period required under applicable UAE commercial and tax regulations.

9. How we protect your information

We use reasonable technical and organizational measures to protect the personal information we hold, including encrypted connections (HTTPS) across the Site and LMS, database-level access controls that scope LMS data to the right company and role, and restricting access to personal information to those who need it to do their jobs. No method of transmission or storage is completely secure, so while we work to protect your information, we can't guarantee absolute security. If you believe your LMS account has been compromised, contact us immediately using the details below.

10. International data transfers

Vetta is based in the UAE, and most of our own operations happen here. Some of the third-party service providers we rely on (see "How we share information") may process or store data on servers located outside the UAE. Where this happens, we work with providers that maintain appropriate safeguards for cross-border data transfer in line with UAE PDPL requirements.

11. Your rights

Under UAE PDPL, and as a matter of good practice regardless of where you're located, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information, subject to any legal or contractual reason we may need to keep it.
• Withdraw consent at any time, where we rely on your consent to process your information.
• Object to or restrict certain processing of your information.

To exercise any of these rights, contact us using the details in "Contact us" below. We'll respond within a reasonable time and may need to verify your identity first, particularly for LMS account requests.

12. Children's privacy

Our services are intended for businesses and working professionals. The Site and LMS are not directed at children, and we do not knowingly collect personal information from anyone under the age of majority. If you believe a child has provided us with personal information, please contact us so we can remove it.

13. Links to other websites

Our Site may contain links to third-party websites — for example, to the services we use to power the Contact form or LMS. We are not responsible for the privacy practices or content of any third-party site, and we encourage you to review their own privacy policies before providing information to them.

14. Changes to this policy

We may update this Privacy Policy from time to time — for example, as we add new features like analytics, or as our practices or applicable law change. We'll update the "last updated" date at the top of this page when we do. Your continued use of the Site or LMS after a change is posted means you accept the updated policy, so we encourage you to check back periodically.

15. Contact us

If you have any questions about this Privacy Policy, or want to exercise any of the rights described above, contact us at support@vetta.ae. You can also reach us through the Contact page.