1. Introduction

This Privacy Policy explains how UAFA ("we", "us"), operator of lms.uafa.az, collects, uses and protects your personal data. We process personal data in accordance with the Law of the Republic of Azerbaijan "On Personal Data". By using the platform, you agree to this Policy.

2. Information We Collect

• Account data: name, email address, phone number, and a password stored in encrypted form.
• Learning data: courses purchased, lesson progress, quiz results and certificates.
• Order data: purchase history, amounts, invoices and payment status.
• Technical data: IP address, browser and device type, and pages visited.
• Correspondence: any information you send us through the contact form or by email.

3. Payment Information

Payments are processed by our payment provider. Card details are entered on their secure page over an encrypted connection.

We do not collect, store or have access to your card number, expiry date, CVV or PIN. No card data is kept on our servers. Our provider operates in line with PCI DSS and Visa/Mastercard security standards, and payments are protected by 3-D Secure. We receive only the transaction result, reference number, amount, and the last four digits of the card, which we keep for accounting and refund purposes. All transactions are in Azerbaijani Manat (AZN).

4. How We Use Your Data

We use your data to create and manage your account, give you access to purchased courses, process payments and refunds, issue invoices, provide customer support, send service notifications, prevent fraud, meet our accounting and tax obligations, and improve the platform. Marketing emails are sent only with your consent, and you can unsubscribe at any time.

5. Sharing Your Data

We do not sell or rent your personal data. We share it only with our payment provider, hosting and email service providers, analytics providers, and course instructors where necessary to deliver a course — and with state authorities where required by law. All such parties are bound to keep your data confidential.

6. Data Retention

We keep account and learning data for as long as your account is active and for a reasonable period afterwards. Payment and invoice records are kept for 5 years, as required by Azerbaijani tax legislation. After that, data is deleted or anonymised.

7. Cookies

We use cookies that are necessary for login, security and checkout, as well as cookies that remember your preferences and help us analyse how the platform is used. You can block cookies in your browser settings, but the platform will not function correctly without the necessary ones.

8. Security

All traffic between your browser and our servers is encrypted using SSL/TLS. Passwords are stored in hashed form and cannot be viewed by our staff. Access to personal data is limited to authorised personnel. Card data is handled entirely by our PCI DSS compliant payment provider. Please keep your login credentials confidential and notify us of any unauthorised use of your account.

9. Your Rights

You may request access to your data, correct inaccurate data, request deletion of your account, object to or restrict processing, withdraw your consent, or unsubscribe from marketing communications. To exercise these rights, contact us using the details below or through our Contact page. Note that we are required to retain payment records for the statutory period.

10. Children

The platform is intended for users aged 18 and over. Users under 18 may use it only with the consent of a parent or legal guardian.

11. Changes to This Policy

We may update this Policy from time to time. The current version is always published on this page with the date of the last update. Continued use of the platform after changes implies acceptance.

12. Contact Us

If you have any questions about this Policy or your personal data, contact us at office@uafa.az, or through our Contact page.