Privacy Policy

Effective date: 9 August 2026
Version: 1.0

This Privacy Policy explains how Basemalattar.com collects, uses, stores and protects personal information when you visit the website, create an account or participate in its learning journeys, assessments and guided sessions.

1. Who we are

Our website address is:basemalattar.com

Questions or requests concerning personal information may be submitted through the website’s Contact page.

2. Information we collect

The information collected depends on how you use the website.

Account information

When you create an account, we may collect and store:

  • Your email address.
  • An internal WordPress username generated for technical purposes.
  • A securely hashed version of your password.
  • Your email-verification status.
  • The date and time you accepted the Terms of Use.
  • The versions of the Terms of Use and Privacy Policy acknowledged during registration.
  • Your account creation and recent activity information.

We do not store your password in readable form.

If profile features are introduced, you may also choose to provide your first name, last name and preferred certificate name.

Learning and progress information

When you participate in a Learning Journey, we may store:

  • Journeys or courses you joined.
  • Units and activities you completed.
  • Your current position and progress.
  • Quiz and questionnaire responses.
  • Calculated scores or reflective results.
  • Challenge or reflection responses you choose to submit.
  • Completion and certificate information where applicable.

Questionnaire and reflective information is used to provide the learning experience. It is not treated as a medical diagnosis or professional psychological assessment.

Please avoid entering highly sensitive personal, medical or confidential information into open-text fields unless the activity clearly requires it.

Communications

When you contact us or request account assistance, we may collect:

  • Your name and email address.
  • The content of your message.
  • Information needed to investigate an account, technical or support issue.
  • Records of account, verification and password-recovery emails sent by the website.

Technical and security information

The website and its hosting or security providers may process:

  • IP address.
  • Browser and device type.
  • Operating system.
  • Requested pages and access times.
  • Referral information.
  • Login, registration and password-reset attempts.
  • Security events and error logs.
  • Information used to distinguish legitimate visitors from automated activity.

This information is used to operate, secure and diagnose the website.

3. How we use information

We use personal information to:

  • Create and manage user accounts.
  • Authenticate users and recover account access.
  • Verify email addresses.
  • Provide access to protected learning content.
  • Save enrolment, progression and completion.
  • Generate questionnaire results and learning feedback.
  • Send essential account, verification and course-related messages.
  • Respond to questions and support requests.
  • Detect automated registrations, misuse and security threats.
  • Maintain, troubleshoot and improve the website.
  • Meet applicable legal and recordkeeping obligations.

We do not use account registration as automatic consent for unrelated marketing.

If optional newsletters or promotional communications are introduced, they will use a separate subscription or consent mechanism where required.

4. Legal and operational reasons for processing

Depending on the applicable privacy law, information may be processed because:

  • It is necessary to provide the account or learning service you requested.
  • It is necessary for the website’s legitimate operation and security.
  • You have given specific consent for an optional purpose.
  • It is required to comply with a legal obligation.
  • It is necessary to establish, exercise or defend legal rights.

Optional consent may be withdrawn without affecting processing already performed lawfully.

5. Cookies

The website uses essential cookies required for:

  • Account login and authentication.
  • Maintaining a secure user session.
  • Remembering whether you chose to remain signed in.
  • Password recovery and security.
  • Basic WordPress functionality.

Disabling essential cookies may prevent account login or protected content from functioning.

Additional cookies may be used by embedded media, analytics or other optional services. Where legally required, non-essential cookies should not be activated until the visitor has made an appropriate choice.

6. Cloudflare Turnstile

The website may use Cloudflare Turnstile to protect registration, login and password-reset forms from automated abuse.

When Turnstile is enabled, Cloudflare may process limited technical signals concerning the visitor, browser and device to determine whether a form submission appears legitimate. The resulting security token is verified by the website before the form is processed.

Turnstile is used for security rather than advertising. Information processed by Cloudflare is governed by the Cloudflare Turnstile Privacy Addendum.

7. Hosting and service providers

We may use specialised providers to operate the website, including:

  • Website and database hosting providers.
  • Content-delivery and security services.
  • Transactional email-delivery services.
  • Backup and technical-monitoring services.
  • Audio, video or embedded-content providers.
  • Payment providers if paid services are introduced.

These providers may process information only as required to perform their services, protect their systems or comply with applicable law.

Some providers may process information in countries other than the visitor’s country of residence. Where required, appropriate contractual or legal safeguards should be used for international transfers.

8. Embedded content and external links

Pages may include embedded audio, video, images or other material supplied by third-party services.

Embedded content may behave as though you visited the external provider directly. That provider may collect technical information, use cookies or record interaction with the embedded material according to its own privacy policy.

The website may also contain links to independent third-party websites. We are not responsible for their privacy practices.

9. How long we retain information

Account and Learning Journey information is normally retained while an account remains active so that the user can return and continue their progress.

We may retain certain records after account closure where reasonably necessary for:

  • Security and fraud prevention.
  • Resolving disputes.
  • Recording acceptance of legal terms.
  • Certificate or completion verification.
  • Financial and tax records if paid services are introduced.
  • Compliance with applicable legal obligations.

Technical logs, backups and temporary security records may be retained according to operational and hosting-provider schedules.

Information that is no longer reasonably required should be deleted or anonymised.

10. How we protect information

We use reasonable technical and organisational measures intended to protect personal information, including:

  • WordPress authentication and password hashing.
  • Restricted administrative access.
  • Secure password-reset mechanisms.
  • Email verification.
  • Form validation and request throttling.
  • Automated-activity protection where enabled.
  • Hosting, backup and security controls.

No internet service can guarantee absolute security. Users should choose a strong, unique password and keep it confidential.

11. Your choices and rights

Depending on the laws applicable to you, you may have the right to:

  • Request access to personal information held about you.
  • Request correction of inaccurate information.
  • Request deletion of your account or personal information.
  • Request restriction of certain processing.
  • Object to certain uses of your information.
  • Receive a portable copy of information you provided.
  • Withdraw optional consent.
  • Submit a complaint to an applicable data-protection authority.

Requests may be submitted through the website’s Contact page. We may need to verify your identity before completing a request.

Some information may be retained where deletion is not legally required or where retention is necessary for security, legal claims or statutory recordkeeping.

WordPress provides administrative tools for exporting and erasing personal data, although deleting a registered user account may require a separate administrative action. WordPress privacy documentation

12. Children’s privacy

The account and Learning Journey services are not intended for children under 16 without the involvement and permission of a parent or legal guardian.

We do not knowingly seek to collect personal information from children in circumstances where parental permission is legally required. If you believe a child has provided information inappropriately, please contact us.

13. Changes to this Privacy Policy

We may update this Privacy Policy when the website, its services, providers or legal obligations change.

The effective date and version number will be updated when substantive changes are made. Registered users may be notified or asked to acknowledge a revised version where appropriate.

14. Contact

Questions, requests or concerns about this Privacy Policy or the handling of personal information may be submitted through the website’s Contact page.