Privacy Policy

Window to the World Institute — Madinah

Last updated: 2 November 2026

Window to the World Institute is committed to protecting your personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations. This policy explains what data we collect, why we collect it, who we share it with, how we protect it, and what your rights are.

1. Who we are

Window to the World Institute is responsible for the personal data collected through this website and when you enrol in our programs. Address: 2564 Awes Bin Malik, Madinah 42364, Kingdom of Saudi Arabia.

2. Data we collect

Identity and contact details: name, national ID or Iqama number, date of birth, mobile number, email, and city.
Academic data: placement test results, attendance, grades, and assessments.
Financial data: payment and invoice records.
Communication history: messages via WhatsApp and email.
For students under 18: the parent or guardian's name and contact details. The parent or guardian provides the student's data and consents to its processing.
Browsing data: technical information such as device type and pages visited, through cookies and measurement tools (see section 6).

Required fields in our forms are needed to process your request. If they are not provided, we cannot complete your registration or contact you.

3. Why we collect it

Registration, level placement, and group assignment.
Tracking attendance and progress, and issuing certificates.
Contacting you about courses, schedules, and updates.
Issuing invoices and meeting legal and tax requirements.
Measuring and improving the performance of our website and advertising.
Sending institute offers and news to those who opt in, which you can stop at any time.

4. Sharing your data

We do not sell your data or share it with others for their own marketing. Data is shared only to the extent necessary with:

Technical service providers that host our systems: Odoo (management system and website), Google Workspace (email), and WhatsApp (messaging), who are bound by confidentiality.
Payment and instalment providers (such as online payment gateways, Tabby, and Tamara) when you pay through them.
TikTok, to measure the effectiveness of our advertising (see section 6).
Government authorities where required by law, such as the Zakat, Tax and Customs Authority (ZATCA) for electronic invoices.
The employer, for corporate training participants, limited to the agreed attendance and progress reports.

5. Storage and protection

Data is stored in cloud systems with trusted service providers, whose servers may be located inside or outside the Kingdom as permitted by applicable regulations. We use individual accounts with role-based access, two-factor authentication, encryption, and backups, and our staff sign confidentiality undertakings.

We keep data for the following periods, then securely destroy or anonymise it:

Financial records and invoices: 6 years from the end of the related tax period, or longer where the law requires.
Student academic records: 5 years after the last enrolment.
Data of people who contacted us but did not enrol: 2 years from the last contact.

6. Cookies and measurement tools

Our website uses cookies that are necessary for it to work, a visitor statistics tool provided by Odoo, and the TikTok Pixel to measure the effectiveness of our TikTok advertising, which may send technical information about your visit to TikTok. You can control or delete cookies in your browser settings.

7. Photos and social media

We do not publish students' photos or videos on social media without written consent from the student, or from the parent or guardian for students under 18.

8. Your rights

To know how your data is collected and used.
To access your data and obtain a copy.
To request correction or updating of your data.
To request deletion of your data unless the law requires us to keep it (such as tax invoices).
To withdraw your consent at any time, including consent to marketing messages, without affecting processing carried out before withdrawal.
To file a complaint with the Saudi Data and AI Authority (SDAIA) under the Personal Data Protection Law.

9. Contact us

For any request or question about your data: info@windowtotheworld.sa or WhatsApp +966 53 378 9995.

We acknowledge your request within 3 working days and complete it within 30 days at most. We may ask you to verify your identity first.

10. Changes to this policy

We may update this policy from time to time. Any update will be posted on this page with its date.

Follow us