Privacy Policy

1. Data controller

The organization responsible for deciding how and why your personal data is processed is Tiny Tots Kindergarten, Al Khalidiyah District, inside Diamond Village Compound, Jeddah, Kingdom of Saudi Arabia.

For privacy and personal-data questions or requests, you can contact us at:

Phone: 055 818 1447

Email: tiny.tots.jeddah@gmail.com

2. Whose data we process

We may process personal data relating to parents and guardians; enrolled or prospective children; authorized persons and emergency contacts; website visitors; people who contact or visit Tiny Tots; and others whose information is reasonably needed to provide our services or meet legal and safety obligations.

A child's information should be provided by a parent, guardian, or another person legally authorized to provide it.

3. Personal data we may collect

Depending on how you deal with Tiny Tots, we may collect parent or guardian information such as name, phone number, email, address, preferred contact method, identity information where needed, relationship to the child, emergency contacts, and correspondence with Tiny Tots.

Child information may include full name, age, date of birth, gender where needed, national ID or residency information where applicable, passport information where applicable, birth certificate, photos, program and class information, attendance records, educational and developmental information, and information needed to provide appropriate support.

Where needed for safety, enrollment, or service delivery, we may process health and sensitive information such as immunization records, allergies, medical conditions, dietary needs, disabilities or special educational needs, medications, emergency medical information, and developmental or early-intervention information.

If a payment is made, we may process the payer's name, payment amount, invoice and transaction information, payment status, and limited payment details provided by our payment provider.

CCTV may be used on our premises for child protection, safety, security, and incident management. We may also create photos or videos linked to activities, events, or educational documentation.

When you use our website, we or our approved service providers may receive technical information such as IP address, browser and device information, website interactions, approximate location inferred from technical data, cookie or analytics identifiers, and information about how the site is accessed and used.

4. How we collect personal data

We may obtain personal data through website contact or enquiry forms; registration and enrollment forms; directly from parents or guardians; during visits, assessments, and interviews; through email, phone, or WhatsApp correspondence; through payments and administrative records; through CCTV systems; from approved service providers; and automatically through cookies and similar technologies on the website.

5. Purposes of use

We may process personal data to respond to enquiries; arrange school visits; review and process registration applications; provide educational and early-intervention services; communicate with parents and guardians; manage attendance and progress reports; protect children's health, safety, and well-being; manage authorized pickup; respond to emergencies; manage fees, invoicing, and payments; keep educational and administrative records; manage facilities and CCTV systems; improve our website and services; investigate complaints or incidents; comply with applicable legal and regulatory requirements; and establish, exercise, or defend legal rights where needed.

We will not use personal data for a purpose incompatible with the purpose for which it was collected, except where applicable law allows.

6. Legal basis for processing

Depending on the circumstances, we process personal data on one or more legal bases recognized under Saudi law, including consent; steps needed to enter into or perform an enrollment or service agreement; compliance with applicable legal or regulatory requirements; protecting vital interests, health, or safety where the law allows; and legitimate interests to the extent permitted by the Personal Data Protection Law and not conflicting with the individual's rights and interests.

Where Saudi law requires explicit consent, including in some cases of processing sensitive personal data, we will obtain the appropriate consent. Where processing is based on consent, consent may be withdrawn in accordance with applicable law. Withdrawal does not affect processing that was lawful before the withdrawal date.

7. Children's personal data

Because Tiny Tots serves young children, protecting children's information is especially important to us. We expect personal data relating to a child to be provided by a parent, legal guardian, or another duly authorized person.

We aim to collect only information reasonably needed for education, enrollment, child protection, health, administration, and other lawful purposes. Where the law requires parental consent, we will obtain that consent before carrying out the relevant processing.

8. CCTV

CCTV may operate in selected parts of the Tiny Tots premises for child protection, safety, security, incident investigation, protection of children, staff, and property, and compliance with legal requirements.

Access to CCTV is limited to duly authorized persons. Recordings are kept only for as long as reasonably needed for these purposes, or longer if an incident, investigation, or legal obligation requires it. CCTV recordings are not ordinarily provided to third parties unless disclosure is legally authorized, needed for an appropriate investigation, or permitted under the Personal Data Protection Law.

9. Disclosure and sharing of personal data

We do not sell personal data. Where necessary and legally permitted, we may disclose limited information to authorized Tiny Tots staff and teachers; IT, website, hosting, and technical service providers; payment providers; professional advisers; healthcare or emergency services when needed; transport providers where a parent requested or authorized the service; government, educational, regulatory, law-enforcement, or judicial authorities where the law requires; and other service providers who work for us under appropriate data-protection requirements.

We aim to disclose only the minimum information reasonably needed for the relevant purpose.

10. Transfers outside the Kingdom

Some technology or communications providers used by Tiny Tots may operate systems outside the Kingdom of Saudi Arabia. Where personal data is transferred or processed outside the Kingdom, Tiny Tots will take appropriate measures to ensure the transfer complies with the Personal Data Protection Law, its implementing regulations, and applicable requirements for transferring personal data outside the Kingdom.

11. Storage and retention

Personal data is kept for as long as reasonably needed for the purpose for which it was collected, and for any additional period required by applicable laws, regulations, contractual obligations, or a legitimate legal need. Retention periods may therefore differ by category of information.

When personal data is no longer needed and there is no legal basis to keep it, we will securely destroy, delete, or anonymize it in accordance with our procedures.

12. How we protect personal data

We use reasonable administrative, organizational, and technical safeguards intended to protect personal data from unauthorized access or disclosure, accidental loss, misuse, alteration, destruction, and other unlawful processing. Access to sensitive children's information is limited to people who reasonably need it to perform their responsibilities.

No electronic system can be guaranteed completely secure, but we continue to apply safeguards appropriate to the nature and sensitivity of the information.

13. Your personal-data rights

Subject to the conditions and exceptions under Saudi law, individuals may have rights including the right to know the legal basis and purpose of collection; the right to access their personal data; the right to obtain a copy in a clear, readable form; the right to request correction, completion, or updating of inaccurate information; the right to request destruction of personal data when it is no longer needed, subject to legal retention requirements; and the right to withdraw consent where processing is based on consent.

For a young child's personal data, these rights may be exercised by a parent or legal guardian to the extent permitted by applicable law. We may need to verify your identity and authority before fulfilling a request relating to a child's data or to sensitive data.

14. Marketing communications

We will not use personal contact details to send promotional or direct-marketing communications except as permitted by applicable law and after obtaining any required consent. You may ask us to stop sending marketing communications using an available unsubscribe option, where provided, or by contacting us directly.

Stopping marketing communications does not prevent necessary administrative, safety, enrollment, or service-related messages.

15. Cookies and analytics

Our website may use cookies and similar technologies to operate the site, remember preferences, understand how the site is used, keep it secure, and improve performance. Some of these technologies may be provided by third parties.

Where consent is required for non-essential cookies or similar technologies, we will provide an appropriate choice before activating them. You can also manage cookies through your browser settings, although disabling some of them may affect certain site features.

16. Third-party sites and platforms

Our website may contain links to third-party sites or platforms, including social, messaging, maps, or other external services. Those parties process information according to their own privacy practices. We encourage you to review their privacy policies before submitting personal information to them.

17. Personal-data incidents

If a personal-data incident occurs, Tiny Tots will assess the event and take appropriate steps to contain and address it. We will notify the competent authority and/or affected individuals where notification is required under applicable Saudi data-protection laws.

18. Complaints

If you have a concern about how Tiny Tots processes personal data, please contact us first so we can review it. You may also have the right to complain to the competent Saudi data-protection authority in accordance with the Personal Data Protection Law and its implementing regulations.

19. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, technology, services, or legal requirements change. The current version will be published on our website with its last-updated date. Where required, we will provide additional notice or obtain new consent for material changes in how personal data is processed.

20. Contact us

For questions, requests, or comments about privacy or personal data, you can contact Tiny Tots Kindergarten at:

Phone: 055 818 1447

Email: tiny.tots.jeddah@gmail.com