Privacy Policy

Last Updated: February 7, 2026

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, such as when you create an account, enroll in a course, or contact us for support. This may include:

  • Name and contact information (email address, phone number)
  • Account credentials (username, password)
  • Payment information (processed by third-party payment processors)
  • Educational background and professional information
  • Course progress and performance data
  • Communications with us (support requests, feedback)

1.2 Information Collected Automatically

When you access our website, we automatically collect certain information about your device and usage:

  • IP address and approximate location (country, city)
  • Browser type and version
  • Device type, operating system, and screen resolution
  • Pages visited, time spent, and navigation patterns
  • Referral source (how you arrived at our site)
  • Cookies and similar tracking technologies (see our Cookie Policy)

1.3 Information from Third Parties

We may receive information about you from third-party services you use to access our platform, such as social media login providers or payment processors.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our educational services
  • Process course enrollments and transactions
  • Deliver course content and track your progress
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Send you marketing communications (with your consent)
  • Analyze usage patterns to improve our website and services
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

3. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it:

  • Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
  • Password Protection: Passwords are hashed and salted using industry-standard algorithms
  • Access Controls: Access to personal data is restricted to authorized personnel only
  • Regular Audits: We conduct regular security assessments and updates
  • Data Breach Procedures: In the event of a data breach, we will notify affected users and relevant authorities as required by law

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These include:

4.1 Essential Cookies

Required for the website to function properly, including session management and security features.

4.2 Analytics Cookies

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as:

  • Pages visited and time spent on each page
  • Device type, browser, and screen resolution
  • Approximate location (country and city level)
  • Referral source and navigation patterns

We have enabled IP anonymization in Google Analytics to protect your privacy. You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

4.3 Marketing Cookies

We use Google Ads and other advertising services for remarketing and conversion tracking. These services may use cookies to:

  • Show you relevant ads based on your interests
  • Track conversions from our advertising campaigns
  • Measure the effectiveness of our marketing efforts

You can manage your ad preferences at Google Ads Settings.

For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

5. Third Parties and Data Sharing

We may share your information with third parties in the following circumstances:

5.1 Service Providers

We work with third-party service providers who perform services on our behalf:

  • Payment Processors: To process course payments securely
  • Analytics Services: Google Analytics for website analytics
  • Advertising Services: Google Ads for marketing and remarketing
  • Email Services: To send course updates and communications
  • Cloud Hosting: To store and process data securely

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

  • Compliance with legal obligations
  • Protection of our rights and property
  • Prevention of fraud or security threats
  • Protection of the safety of our users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

6. International Data Transfers

Your information may be transferred to and processed in countries other than Egypt, including countries that may not have the same data protection laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by relevant authorities
  • Adequacy decisions by data protection authorities
  • Other legally approved transfer mechanisms

By using our services, you consent to the transfer of your information to countries outside Egypt for the purposes described in this Privacy Policy.

7. Your Rights (GDPR Compliance)

Depending on your location, you may have certain rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, such as when:

  • The data is no longer necessary for the purposes it was collected
  • You withdraw your consent (where consent was the basis for processing)
  • You object to the processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed

7.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

7.5 Right to Restriction of Processing

You have the right to request restriction of processing of your personal information in certain circumstances.

7.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes or based on legitimate interests.

7.7 How to Exercise Your Rights

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within 30 days. You may also have the right to lodge a complaint with a data protection authority.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

  • Account Information: Retained while your account is active and for 3 years after account closure
  • Course Data: Retained for the duration of your enrollment and for 5 years thereafter for educational records
  • Payment Information: Retained for 7 years for tax and accounting purposes
  • Marketing Data: Retained until you unsubscribe or for 2 years of inactivity
  • Analytics Data: Retained for 26 months (Google Analytics default)

After the retention period expires, we will securely delete or anonymize your personal information.

9. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

For users between 16 and 18 years of age, we require parental or guardian consent before enrolling in our courses.

10. Marketing Communications

With your consent, we may send you marketing communications about our courses, updates, and special offers. You can opt-out of marketing communications at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Updating your communication preferences in your account settings
  • Contacting us directly using the contact information below

Please note that even if you opt-out of marketing communications, we will still send you essential service-related communications (e.g., course updates, account notifications).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this policy
  • Notify you via email or through a prominent notice on our website
  • Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CanopyCode Labs

Magra Al Eyoun Street

Cairo, Al Qāhirah 11451

Egypt

Phone: +20 11 8499 9923

Email: info@canopycodelabs.space

Data Protection Officer: info@canopycodelabs.space