Privacy Policy

Who is responsible

EXEMPLAR is the organisation responsible for the personal information described in this policy. Our training centre is located at South Khartoum, Catrina Street, West of Elqurashi Park. For privacy requests, contact exemplarcenter@gmail.com · 00249111224488.

Information we collect

We collect information you provide directly, information created when you use the site, and limited information from authentication providers when you choose those options.

• Identity and contact details: name (Arabic and/or English), email, phone/WhatsApp, nationality, gender, address, and similar registration fields
• Education and work details: university/qualification, specialisation, current job, workplace, and how you heard about our programs
• Program and training records: selected programs, enrollment status, attendance, completion, and related notes needed to deliver training
• Payment-related information: payment method, payment status, amounts/currency where recorded, transfer references, and payment receipts you or our team upload (we do not store full card numbers on our website)
• Account and authentication data: password hashes managed by our auth provider, session cookies, profile photo if you upload one, and Google account email/name if you use Google sign-in
• Corporate inquiry details: company name, contact person, job title, team size, and message when you use the corporate/B2B form
• Technical and usage data: IP address (as processed by hosting), browser/device type, pages visited, referrer, locale, and security logs needed to operate and protect the service

How we use information

We use personal information only for purposes connected to operating EXEMPLAR’s training services and website, including:

• Processing registrations, confirming seats, and communicating about schedules, payments, and attendance
• Providing the trainee account portal and linking historical registrations to your account when emails match
• Recording payment status and receipts for finance and certification eligibility
• Responding to contact and corporate training inquiries
• Sending transactional emails (for example registration confirmation, account activation, security notices) and, where appropriate, program announcements or invites; you can unsubscribe from non-essential outreach where an unsubscribe link is provided
• Securing the site, preventing fraud/abuse, measuring basic traffic, and improving usability
• Complying with legal, accounting, and audit obligations applicable to our operations in Sudan

Google sign-in

If you choose “Continue with Google”, Google authenticates you and shares basic profile information (typically your Google email and name) with our authentication provider so we can open your EXEMPLAR account session.

Google sign-in is intended for emails that already have a registration or account relationship with EXEMPLAR. We do not use Google sign-in to create a brand-new training registration by itself; registration is completed through our registration form.

Google’s own handling of your Google Account data is governed by Google’s policies. We only receive what is needed to authenticate and identify your EXEMPLAR session.

Cookies and similar technologies

We use cookies and similar storage needed for language preference, authentication sessions (admin and trainee accounts), security, and basic first-party usage measurement that helps us understand which pages are visited.

You can control cookies through your browser settings. Disabling essential cookies may prevent sign-in or form features from working correctly.

Sharing and processors

We do not sell your personal information. We share data only with trusted service providers who process it on our instructions to run the platform, or when the law requires disclosure. Typical categories include:

• Hosting and application infrastructure
• Database and authentication services
• Transactional and outreach email delivery
• Analytics/hosting diagnostics provided by our deployment platform
• Professional advisors or authorities when legally required

International processing

Our website and some processors may store or process data on servers outside Sudan. By using the site, you understand that your information may be transferred to and processed in other countries where our providers operate, subject to their security and contractual safeguards.

Retention and security

We retain registration, payment, attendance, and account records for as long as needed to deliver training, issue certificates, resolve disputes, meet legal/accounting requirements, and maintain operational history. When data is no longer needed, we delete or anonymise it where reasonably practicable.

We apply reasonable technical and organisational measures (access controls, encrypted transport, server-side processing for sensitive writes, and role-based admin access). No method of transmission or storage is 100% secure.

Children

Our programs and website are directed to adults and professional trainees. We do not knowingly collect personal information from children under 16 for online accounts. If you believe a child provided data inappropriately, contact us and we will take reasonable steps to delete it.

Your choices and requests

Subject to applicable law and our legitimate operational needs (for example certificate records), you may request access to, correction of, or deletion of personal data we hold about you, or ask questions about how we process it.

You can update some profile details in your account portal, sign out at any time, and use unsubscribe links in outreach emails where provided. For other requests, email us from the address linked to your registration so we can verify your identity.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be highlighted on the website. Continued use of the site after an update means you acknowledge the revised policy.