Privacy Policy

Plain language summary: We collect your name and email when you register or subscribe to our newsletter. We use it to manage your account and track your learning progress. We comply with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and India's DPDP Act 2023. We do not sell your data. You can request deletion at any time. That's the short version.

1. Who We Are

This Privacy Policy applies to Moneykar.com ("we", "us", "our"), a financial literacy consultancy platform operated under a UAE Administrative Consultancy & Studies Activity License. We are the data controller for personal data collected through this website. For privacy-related queries, contact us at [email protected].

2. Data We Collect

We do not collect financial account numbers, Aadhaar, PAN, credit card details, or any other sensitive financial data.

3. Legal Basis for Processing

We process your personal data under the following legal frameworks:

• UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (primary jurisdiction)
• India's Digital Personal Data Protection Act (DPDP Act), 2023 — for users accessing from India
• IT (Amendment) Act 2008 & IT Rules 2011 — supplementary Indian compliance

Legal bases for processing:

• Consent — You explicitly consent at registration and at newsletter subscription via separate checkbox.
• Contract — Processing is necessary to provide the Academy and progress-tracking services you enrolled in.
• Legitimate interests — Security logging, fraud prevention, and platform improvement, balanced against your rights.

4. How We Use Your Data

• Create and manage your Moneykar account
• Track and save your Academy learning progress
• Send transactional emails (account confirmation, security alerts)
• Send educational newsletters and updates — only if you opt in separately
• Improve the platform through aggregated, anonymised usage analytics
• Respond to your support requests

We will never use your data for profiling, targeted advertising, or sell/rent your personal data to third parties.

5. Data Sharing & Email Consent Framework

We share minimal data only where necessary:

• Airtable — Name and email of newsletter subscribers are stored in Airtable for communication management. Airtable is bound by its own privacy policy and GDPR/UAE data protection commitments.
• No other third-party sharing. We do not share data with advertisers, data brokers, or any third party for commercial purposes.
• Legal requirement — We may disclose data if required by UAE law, court order, or competent regulatory authority.

Email Consent Framework (UAE Compliance):

• Newsletter subscription requires an explicit opt-in checkbox — pre-ticked boxes are not used.
• Subscription confirmation is sent to your email address before newsletters begin (double opt-in).
• Every marketing email includes a clear, one-click unsubscribe link.
• Your email address is used solely for the purpose stated at the time of collection.
• We do not send unsolicited commercial communications (spam) in compliance with UAE Cybercrime Law Federal Decree-Law No. 34 of 2021.

6. Data Retention Policy

To request deletion of your data, email us with "Right to Erasure" in the subject line. We will action your request within 15 business days in line with UAE Federal Decree-Law No. 45 of 2021 obligations.

7. Your Rights

Under UAE Federal Decree-Law No. 45 of 2021 and India's DPDP Act 2023, you have the right to:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data ("right to be forgotten")
• Withdraw consent — Withdraw marketing consent at any time via the unsubscribe link or by email
• Portability — Request your data in a structured, machine-readable format
• Object to processing — Object to processing based on legitimate interests
• Grievance redressal — Lodge a complaint with our Privacy Officer

To exercise any right, email us at [email protected] with "Data Request" in the subject line. We will respond within 15 business days. UAE residents may also escalate unresolved complaints to the UAE Personal Data Protection Office.

8. Cookies

We use a single session cookie to keep you logged in. We do not use third-party tracking cookies, advertising cookies, or behavioural analytics cookies. No cookie consent banner is required as our only cookie is strictly necessary for core functionality.

9. Data Security

We implement appropriate technical and organisational measures in compliance with UAE Federal Decree-Law No. 45 of 2021 and the IT (Reasonable Security Practices and Procedures) Rules, 2011:

• Passwords are hashed using industry-standard cryptographic algorithms (Werkzeug PBKDF2) — never stored in plain text
• HTTPS enforced in production (TLS encryption in transit)
• Database access restricted to application layer only
• No payment data is ever collected or stored

10. Children's Privacy

The Platform is intended for users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has registered, please contact us immediately and we will delete the account without delay.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated by email or via a prominent notice on the Platform at least 7 days before they take effect. The "Last updated" date at the top will always reflect the current version.

12. Privacy Officer / Grievance Contact

As required under UAE Federal Decree-Law No. 45 of 2021, Rule 5(9) of the IT Rules 2011, and the DPDP Act 2023:

Privacy Officer: Moneykar Team
Email: [email protected]
Response time: Within 15 business days of receipt
Escalation (UAE): UAE Personal Data Protection Office — tdra.gov.ae