Who we are and scope

Musing Technology Academy is operated by Tafkeer for Systems and Information Technology in Jordan. This policy applies to the Academy website, learner accounts, course and chapter access, purchases, certificates, support requests, and related communications.

Data we collect

• Account and identity data such as name, username, email, country, preferred language, and profile fields.
• Learning data such as enrolments, accessible chapters, lesson activity, completion, progress, assessments, and certificates.
• Transaction data such as order items, currency, amount, payment status, invoice references, and refund or access-revocation records. We do not intentionally store complete payment-card numbers.
• Technical and security data such as session identifiers, timestamps, IP and device/browser information available in server logs, and records needed to prevent abuse.
• Information you submit through contact, business, support, or rights requests.

Why and how we use data

• To create and secure accounts, deliver purchased or assigned learning, record progress, and issue certificates.
• To process orders, reconcile payments, issue invoices, prevent duplicate delivery, handle refunds, and meet accounting obligations.
• To respond to enquiries, provide support, maintain service reliability, investigate misuse, and protect learners and the platform.
• To produce privacy-conscious aggregate service metrics and improve content, accessibility, and learner experience.
• Where applicable, processing is based on contract performance, legal obligations, legitimate operational and security interests, or consent when consent is the appropriate basis.

Sharing and service providers

We share only what is reasonably necessary with providers supporting hosting, Moodle operations, payment processing, protected video delivery, email, security, and professional support. Payment providers process payment details under their own notices. Business customers may receive authorised learner enrolment and progress information for programmes they sponsor. We do not sell personal data.

International processing and security

Some providers may process data outside Jordan. We assess transfers and use contractual, technical, and organisational safeguards appropriate to the service and applicable law. Measures include role-based access, secure connections, controlled administrative access, backups, monitoring, and payment reconciliation. No online system can be guaranteed completely risk-free.

Retention

We retain account and learning records while an account remains active. If an account has no valid paid access and no login activity for 36 months, we may anonymise or delete it after reasonable notice to the account email on file. Payment, invoice, refund, and dispute records are retained for 7 years from the transaction date for accounting, tax, and dispute-resolution purposes. Certificate and public verification records are retained indefinitely to support ongoing certificate verification. Security, access, and abuse-prevention logs are retained for 12 months unless a longer period is needed for an active investigation or legal obligation. Data no longer needed under these periods is deleted, anonymised, or securely restricted.

Your choices and rights

• Request information about or access to personal data we hold about you.
• Ask us to correct incomplete or inaccurate information.
• Request deletion, restriction, portability, or objection where the applicable law grants that right.
• Withdraw consent for future processing where processing depends on consent.
• Complain first through our Contact page. Where applicable, you may then approach Jordan’s Personal Data Protection Directorate or another competent authority.

Children, changes, and contact

The Academy is not directed to children who cannot lawfully form an account or purchase without parent or guardian involvement. We may update this policy when services, providers, or laws change; material changes will receive an updated date and appropriate notice. Use the Contact page for privacy requests and do not send passwords or complete payment-card data.