Privacy Policy

KlassPal is operated by Pal Ventures FZ-LLC, a company registered and licensed in the United Arab Emirates. We are the data controller for all personal data collected through klasspal.com. Contact: privacy@klasspal.com

Customers:

• Full name, email address, phone number
• Booking history and session details
• Payment method — processed securely by our payment provider. We never store your card number or CVV
• Session ratings and reviews you submit
• Referral codes and loyalty points
• Device type, browser, and IP address collected automatically when you use the platform

Instructors (in addition to the above):

• Date of birth, nationality, country, city, and area
• Emirates ID or passport — stored in private encrypted storage accessible only to you and authorised KlassPal staff
• Trade or freelance permit documents if applicable
• Profile photo and gallery images
• Working hours, availability, and pricing
• Bank account IBAN — used solely for payout processing
• Certifications and qualifications you choose to share
• Booking history, earnings, and commission tier

We share data only with trusted service providers necessary to operate the platform. Our main service providers are Stripe (payment processing), Tabby and Tamara (buy-now-pay-later payment options offered at checkout), Supabase (hosting and database), Resend (email delivery), Google (mapping and calendar services), and HubSpot (customer-relationship management). We do not sell your personal data to any third party under any circumstances. We will share your data with UAE law enforcement and regulatory authorities upon lawful request.

Some of your data is processed by service providers located outside the UAE. Where we transfer your personal data abroad, we do so only to jurisdictions recognised as providing an adequate level of protection, or under appropriate contractual safeguards, in accordance with Articles 22 and 23 of the UAE PDPL. Our main overseas recipients are our hosting, payment (including buy-now-pay-later), email, mapping/calendar, and customer-relationship-management providers.

Identity and permit documents are retained after account closure only where necessary to meet our identity-verification, anti-fraud, and legal-compliance obligations, and are securely deleted once that period ends. We keep all retention periods under review to ensure they remain the minimum required by law.

Under UAE Federal Decree-Law No. 45 of 2021, you have the right to access, correct, delete, and port your personal data, to object to or restrict certain processing, and to withdraw consent for marketing at any time. To exercise any of these rights, contact privacy@klasspal.com. We respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

KlassPal implements appropriate technical and organisational security measures including encrypted storage for sensitive documents, time-limited access links for private files, and industry-standard protections across the platform. All payment data is handled exclusively by our certified payment processor — never stored on KlassPal servers.

KlassPal uses only essential and functional cookies necessary for the platform to work and to keep you signed in, together with cookies set by trusted providers such as Stripe (payments) and Google (maps and calendar). We do not use advertising cookies or third-party tracking. Full details are in our Cookie Policy, and you can manage cookies through your browser settings.

In the event of a data breach, KlassPal will notify affected users and the UAE Data Office as required under UAE PDPL.

KlassPal accounts are created and held only by adults aged 18 and over. Where a class is booked for a minor, a parent or legal guardian must hold the account and book on the minor's behalf. In that case we process limited data about the minor — such as first name, age group, and session details — solely to deliver the class, on the basis of the guardian's consent and our contract with the guardian. We provide privacy information to the guardian, allow that consent to be withdrawn at any time, and do not create accounts for, or direct marketing to, minors.

We will notify you of material changes by email or platform notification.

privacy@klasspal.com | KlassPal — Pal Ventures FZ-LLC — UAE