Last updated: 20.06.2026
This Privacy Policy explains how the Academic Research and Educational Platform (Arep) ("Arep," "we," "us") collects, uses, and protects your personal data when you use Arep Academy (academy.arep.sa). We process personal data in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. For any privacy question or request, contact us at reach@arep.sa.
1. Who we are
Arep Academy is operated by the Academic Research and Educational Platform (Arep), Commercial Registration No. 1010883838, located at The Garage, 4019 King Abdullah Road, Al Raed, Riyadh 12354, Saudi Arabia. For the purposes of the PDPL, Arep is the data controller responsible for your personal data.
2. The personal data we collect
Account data: name, email, phone number, password, and your role (e.g., student).
Profile and learning data: courses and workshops you enrol in, progress, practice results, and readiness scores.
Payment data: processed through a licensed payment service provider; we do not store your full card details.
Workshop data: information needed to register you for in-person workshops at host universities or research centers.
Technical data: device, browser, and usage information collected automatically to operate and improve the platform.
We do not intentionally collect sensitive personal data (such as health data).
3. How we use your data, and our legal basis
To create and manage your account and provide the courses, workshops, and tools you request (basis: performance of our contract with you).
To process payments and issue invoices (contractual necessity and legal obligation).
To personalize your learning and generate readiness recommendations using automated tools (contract / your consent).
To improve and secure the platform (legitimate interests).
To send marketing or promotional messages — only with your consent (see Section 5).
To meet legal, regulatory, and tax obligations in Saudi Arabia.
4. Automated learning tools
Arep Academy uses automated tools (including AI-supported features) to analyze your practice results and learning activity and to give you personalized study recommendations and a readiness indicator. These tools support your learning and do not make legally significant decisions about you. You can contact us at any time to ask how these features use your data.
5. Marketing communications
We will only send you marketing messages (offers, new courses, newsletters) if you have given your consent. You can withdraw consent and opt out at any time via the unsubscribe link in our messages or by emailing reach@arep.sa. Withdrawing marketing consent will not affect courses or services you have already purchased.
6. Sharing your personal data
We do not sell your personal data. We share it only as needed with:
Payment service providers, to process payments securely.
Host universities or research centers when you register for an in-person workshop, limited to the information needed to enrol and admit you.
Service providers who help us operate the platform (e.g., hosting, technical support), under written agreements requiring them to protect your data and process it only on our instructions.
Government or regulatory authorities, where required by law.
7. Where we store and process your data
We primarily store and process your personal data within Saudi Arabia. Where a limited number of our technical service providers process certain data outside the Kingdom, we apply the appropriate safeguards required under the PDPL and its Personal Data Transfer Regulations.
8. How long we keep your data
We keep your personal data only as long as needed for the purposes in this policy, or as required by Saudi law (e.g., tax and accounting records). When no longer needed, we securely delete or anonymize it.
9. How we protect your data
We apply appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access. No system is completely secure, but we work continuously to safeguard your information.
10. Your rights
Under the PDPL, you have the right to: be informed about how we use your data; access your data and request a copy; request correction of inaccurate or incomplete data; request deletion where we have no legal reason to keep it; and withdraw consent at any time where consent is our basis for processing.
To exercise these rights, email reach@arep.sa. We will respond within the period required by the PDPL (currently 30 days). You also have the right to file a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) if you believe your data has been mishandled.
11. Cookies
We use cookies and similar technologies to operate the platform, keep you signed in, remember your preferences, and understand usage so we can improve. You can manage or disable cookies in your browser settings, though some features may not work properly without them.
12. Children
Arep Academy is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact reach@arep.sa and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a new "last updated" date and, where appropriate, notify you.
14. Contact us
Academic Research and Educational Platform (Arep)
The Garage, 4019 King Abdullah Road, Al Raed, Riyadh 12354, Saudi Arabia
Email: reach@arep.sa | Phone: +966 53 001 2161
