Privacy Policy - Universal American School.

Privacy Policy - Universal American School.

Website Privacy Notice 

Universal American School Dubai. Last update 19th June 2026

1. Introduction

Universal American School Dubai ("UAS Dubai," "we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website and in your interactions with our school. This Privacy Notice explains how we collect, use, disclose, and otherwise process your personal data in accordance with the United Arab Emirates Data Protection Law (Law No. 45 of 2021) (the "UAE PDPL") and other applicable data protection regulations.

This Privacy Notice applies to:

Information collected through our website (www.uasdubai.ae)
Information collected during student enrollment and school operations.
Information collected through school systems, communications, and educational activities.

Please read this Privacy Notice carefully. If you have questions, please contact us at the details provided in Section 11 below.

2. Who We Are and Contact Information

School Name:
Universal American School Dubai, Location: Dubai, United Arab Emirates

Data Protection Officer / Privacy Contact: 
UAS Data Protection- dataprotection@uasdubai.ae

3. Personal Data We Collect

We may collect the following categories of personal data but not limited to listed below from parents/guardians, students, staff, and website visitors:

3.1 Student Data

Enrollment Information: Full name, date of birth, student ID, grade level, emergency contact details

Academic Data: Grades, test scores, attendance records, coursework, educational progress, behavioral notes

Health and Wellness Data: Medical conditions, allergies, vaccinations, health-related accommodations, emergency medical information

Financial Information: Invoice details, payment records, fee payment status (limited to school operations)

3.2 Parent/Guardian Data

Contact Information: Name, email address, phone number, home address.
Relationship Information: Proof of guardianship, custody documentation
Communication Records: Emails, messages, and inquiries related to school matters.

3.3 Website Visitor Data

Contact Form Information: Name, email, phone number, message content (voluntary)

Website Usage Data: IP address, browser type, pages visited, time spent on site (collected through web analytics)

Cookies: Information about your website interactions (see Section 10)

4. Why We Collect and Process Your Data

We process your personal data for the following purposes:

Educational Services: To manage student enrollment, deliver educational programs, track academic progress, and maintain student records.

Communication: To communicate with students, parents, and guardians regarding school activities, events, announcements, and administrative matters

Health and Safety: To maintain student health records, manage medical accommodation, and respond to health-related emergencies.

Financial Administration: To process tuition payments, manage invoices, and maintain financial records.

Regulatory Compliance: To comply with legal obligations, including educational regulations issued by KHDA (Knowledge and Human Development Authority) and other relevant authorities.

Website Functionality: To improve our website, analyze user behavior, and optimize our online presence.

Legitimate Interests: To manage school operations efficiently, ensure school safety and security, and protect our rights and interests.

5. Legal Basis for Processing

Under the UAE PDPL, we process your personal data on the following legal bases:

Contractual Obligation: Processing necessary to fulfil our obligations as your educational service provider.

Legal Obligation: Processing required to comply with UAE laws and regulations, including KHDA requirements.

Consent: Where you have explicitly consented to specific processing activities (e.g., newsletter subscriptions, optional communications)

Legitimate Interests: Where processing is necessary for our legitimate interests in operating the school, ensuring student safety, and maintaining administrative efficiency.

6. Who We Share Your Data With

We may share personal data with the following categories of recipients:

School Staff: Teachers, administrators, counselors, and support staff who need access to student data to provide educational services.

Regulatory and Government Authorities: When required by law, including KHDA, Ministry of Education, and law enforcement as required.

Parents/Guardians: Information related to their child's education and welfare (shared with authorized guardians only)

Emergency Services: Health and contact information may be shared with emergency services in urgent situations.

7. How Long We Keep Your Data

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, and regulatory requirements. Retention periods may vary as follows:

Student Academic Records: Retained for a minimum of 10 years after the student's graduation or withdrawal, in accordance with educational standards, this may be subjected to change as compliance and legal requirements. 

Health and Medical Records: Retained in accordance with health and safety regulations and school policy.

Financial Records: Retained for the period required by UAE accounting and tax regulations.

Website Analytics: Retained for up to 12 months from collection date.

8. Your Data Protection Rights

Under the UAE PDPL, you have the following rights with respect to your personal data:

8.1 Right of Access
You have the right to request access to your personal data held by us. Upon receipt of a verifiable access request, we will provide you with a copy of your data within 30 days.

8.2 Right of Correction
You have the right to request correction of inaccurate or incomplete personal data. We will correct your data promptly upon verification of the request.

8.3 Right to Object
You have the right to object to processing of your personal data for specific purposes, including where processing is based on legitimate interests or consent.

8.4 Right to Data Portability
You have the right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format, subject to applicable limitations.

How to Exercise Your Rights: To exercise any of these rights, please submit a written request to our Data Protection Officer with sufficient detail to identify your data and your request. We will verify your identity before processing your request and will respond within 30 days of receipt.

9. Children's Privacy

UAS Dubai is an educational institution serving children. We recognize the importance of protecting children's privacy and complying with enhanced data protection standards for minors.

9.1 Parental Consent
For children under the age of legal capacity as defined under UAE law, we obtain explicit consent from parents or legal guardians before processing personal data beyond what is necessary for educational services. Parents may withdraw consent at any time by contacting our Data Protection Officer and/or Administration.

9.2 Children's Data Security
We implement age-appropriate safeguards to protect children's data, including restricted access to systems, secure storage, and limited sharing with third parties.

9.3 Direct Communication with Children
We do not engage in direct marketing or unsolicited communications with students. Any communications are sent through parents/guardians or for legitimate educational purposes.

10. Cookies and Website Analytics

Our website uses cookies and web analytics tools to improve your browsing experience and analyze website usage.

10.1 Types of Cookies
Essential Cookies: Necessary for website functionality (no consent required)
Analytics Cookies: Used to understand how visitors use our website and identify improvement opportunities.

10.2 Your Cookie Choices
You can control cookie settings through your browser. You may accept or refuse non-essential cookies at any time. Please note that disabling cookies may affect your ability to use certain features of our website.

11. Contact Us
If you have questions about this Privacy Notice, wish to exercise your data protection rights, or have concerns about how we manage your data, please contact our Data Protection Officer:

Data Protection Officer / Privacy Contact
Universal American School Dubai
Email: UAS Data Protection - dataprotection@uasdubai.ae 
Address: 90 58a Street Rebat St - Dubai Festival City - Dubai

12. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated notice on our website and updating the "Last Updated" date. Your continued use of our services following notification of changes constitutes your acceptance of the updated Privacy Notice.

13. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of sensitive data in transit and at rest
Access controls limiting data access to authorized personnel.
Regular security assessments and vulnerability testing
Staff training on data protection and confidentiality

While we endeavor to protect your data, no security measure is 100% guaranteed. We encourage you to protect your password and account information and notify us immediately of any unauthorized access.