PRIVACY POLICY

Last updated: 14 December 2025

This Privacy Policy explains how The Garden of Knowledge W.L.L (“we,” “us,” or “our”) collects, uses, stores, and protects personal data when you interact with us through our website https://thegardenedu.com, our mobile application (The Garden of Knowledge), or through any other communications, marketing activities, or educational services (collectively, the “Services”).

We are committed to protecting personal data in accordance with the Bahrain Personal Data Protection Law (PDPL) and applicable regulations.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. WHO WE ARE

Data Controller:
The Garden of Knowledge W.L.L
Building 445B, Street 15B
Bani Jamrah 541, Bahrain
info@thegardenedu.com

We are responsible for determining how and why personal data is processed.

2. WHAT INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide, including when you:

  • Contact us or submit inquiries
  • Register for services or classes
  • Use our website or mobile application
  • Communicate with us via email, phone, WhatsApp, or in person

This may include:

  • Full name
  • Email address
  • Phone number
  • Mailing address
  • Contact preferences
  • Login credentials (where applicable)
  • Billing address
  • Identification details (where legally required)

2.2 Children’s Personal Information

We provide educational services to children (“Minors”).
We do not allow Minors to register, submit forms, or create accounts independently.

All children’s personal data is collected only through parents or legal guardians, with their knowledge and consent.

Children’s data may include:

  • Name
  • Age or date of birth
  • Educational level
  • Attendance and progress records

We do not market or advertise directly to children.

2.3 Sensitive Personal Data

Where required and permitted by law, and with appropriate consent, we may process limited sensitive personal data, such as:

  • Identification information
  • Biometric data (only if required for operational or security purposes)

Such data is handled with enhanced security measures in line with PDPL requirements.

2.4 Payment Information

Payment processing is handled securely by third-party providers. We do not store full payment card details.

Our payment service providers include:

  • TAP Company
  • Benefit
  • American Express Middle East

Their respective privacy policies govern the handling of payment data.

2.5 Information Collected Automatically

When you use our website or mobile application, we may automatically collect:

  • IP address
  • Browser type and device characteristics
  • Operating system
  • Language preferences
  • Referring URLs
  • Usage activity and interaction data
  • Approximate location data (based on IP address)

This data helps us maintain security, improve performance, and understand usage trends.

3. HOW WE USE YOUR INFORMATION

We process personal data for the following purposes:

  • To provide and manage educational services
  • To communicate with parents and guardians
  • To respond to inquiries and support requests
  • To create and manage user accounts
  • To process payments and maintain records
  • To send administrative and service-related communications
  • To improve our website, app, and services
  • To ensure security, prevent fraud, and detect misuse
  • To comply with legal and regulatory obligations

Marketing communications are sent only to parents or adults, and you may opt out at any time.

4. LEGAL BASIS FOR PROCESSING (PDPL)

Under the Bahrain PDPL, we process personal data based on one or more of the following:

  • Your consent
  • Performance of a contract or service
  • Compliance with legal obligations
  • Legitimate interests, where they do not override your rights

Children’s data is processed only with parental or guardian consent and for legitimate educational purposes.

5. SHARING OF PERSONAL INFORMATION

We may share personal data only when necessary and with appropriate safeguards, including with:

  • IT and cloud service providers
  • Website and application hosting providers
  • Analytics and performance monitoring tools
  • Communication platforms
  • Payment processors
  • Authorized staff and educators
  • Government or regulatory authorities, where legally required

We do not sell personal data.

6. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

  • Ensure website functionality and security
  • Analyze usage and performance
  • Improve user experience

We may use tools such as Google Analytics.

You can manage or disable cookies through your browser settings.
You may opt out of Google Analytics tracking here:
https://tools.google.com/dlpage/gaoptout

7. CHILDREN AND MINORS

In Short, Children’s data is collected only through parents or legal guardians.

  • Minors cannot independently register or submit personal data
  • We do not target or market to Minors
  • All processing of children’s data is for educational and administrative purposes only

If we become aware that data has been collected directly from a Minor without parental consent, we will delete it promptly.

Parents and guardians may access, correct, or request deletion of their child’s data at any time.

8. DATA RETENTION

We retain personal data only for as long as necessary to:

  • Provide educational services
  • Maintain required records
  • Comply with legal and regulatory obligations

Unless otherwise required by law, data is retained no longer than six (6) months after account termination, after which it is securely deleted or anonymized.

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

However, no system can be guaranteed to be completely secure, and use of our Services is at your own risk.

10. YOUR RIGHTS UNDER PDPL

Depending on applicable law, you may have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request the deletion of your data
  • Withdraw consent (where applicable)
  • Object to certain processing activities

Parents or guardians may exercise these rights on behalf of their children.

11. DO-NOT-TRACK SIGNALS

We do not currently respond to browser Do-Not-Track (DNT) signals.

12. UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time.
Any changes will be posted on our website with a revised “Last updated” date.

13. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, don’t hesitate to get in touch with us:

The Garden of Knowledge W.L.L
info@thegardenedu.com
Building 445B, Street 15B, Bani Jamrah 541, Bahrain