Privacy Policy for OSHA Training Platform

1. The Privacy Policy aims to help all users of OSHA Platform services understand the nature of data collected upon visiting the website or e-training platform, and how such data is handled and protected.

2. OSHA Platform management is strictly committed to safeguarding the privacy and security of user data, ensuring it is stored safely, accessed solely by authorized specialists, and never disclosed or shared with unauthorized individuals or entities.

3. All users of OSHA Platform without exception are deemed legally and ethically bound by all terms, laws, and regulations applicable on OSHA Platform from their initial moment of platform use; accessing the platform constitutes formal acknowledgment of their responsibility to comply with all applicable local and international laws.

4. If you do not agree to any of these terms, you are not authorized to use or access OSHA Platform, as all materials contained herein are protected under applicable copyright and trademark protection laws.

These terms and conditions shall be governed by and interpreted in accordance with the laws of the Kingdom of Saudi Arabia, and all platform users irrevocably submit to the exclusive judicial jurisdiction of the courts of the Kingdom of Saudi Arabia.

The platform collects data that explicitly identifies the user or makes direct identification possible, including full name, contact number, email address, and nationality to complete registration in paid or free educational/training events and services. Additional information required as a fundamental prerequisite for enrollment in specific activities may also be gathered, such as workplace, job title, and city, to support the continuity of the learning journey and evaluate instructional quality. Furthermore, learning activity records are tracked for each trainee (user), such as completed learning paths, learning minutes, accredited certificates, assessments, and other related metrics.

Usage data is collected automatically when using OSHA Platform. This data may include information such as the user's Internet Protocol (IP) address, browser type and version, platform pages visited, date and time of visit, duration spent on pages, unique device identifiers, and other diagnostic data. When accessing the platform via a device, certain information may be collected automatically, including but not limited to device type, device ID, device IP address, operating system, web browser type, and hardware identifiers.

The platform's use of the user's IP address helps diagnose server problems and compile necessary statistics to measure platform utilization (visitor counts and client machine language). The platform strictly forbids any party outside its technical team from viewing user IP addresses.

User data is retained as long as the account remains active on the platform in order to ensure educational continuity, preserve all certificates earned, and maintain academic transcripts, enrolled training course records, assessments, and all related learning history. An account may also be permanently deleted from the platform's databases upon a formal request submitted via info@aosha.sa; the user bears full responsibility for the irreversible deletion of all educational progress, records, certificates, and personal profile data, and deleted accounts cannot be recovered.

Platform administration reserves the right to delete or freeze a user account without prior consultation upon discovering any circumvention methods, academic integrity violations, impersonation, intrusion attempts, non-educational platform exploitation, intellectual property infringements, or attempts to download non-downloadable materials.

Based on OSHA Platform's responsibility to protect user confidentiality and restrict access strictly to authorized personnel, user data is neither published nor shared, except in the following circumstances:

• A. Sharing trainee and user data with training providers or certificate-issuing bodies for courses delivered via OSHA Platform.
• B. When user data is requested under legal authority as part of a judicial, security, or government inquiry.
• C. Where disclosure is necessary to detect, prevent, or address fraud, security breaches, or abuse.
• D. When submitting documentation justifying withholding certificates or reporting continuing education hours to governing bodies.

OSHA Platform is dedicated to maintaining the confidentiality of user data and refraining from publishing or disclosing it to unauthorized third parties. Access is restricted strictly to qualified, authorized personnel to guarantee user privacy and sustain trust in the platform.

All stored data is treated according to the highest standards of security and protection, and is utilized solely for approved educational and administrative functions linked to platform services.

• A. Policy Document Owner: (Mr. Mishaal Al-Issa)
• B. Policy Review and Updates: (Mr. Abdullah Al-Harbi)
• C. Policy Implementation and Enforcement: (Mr. Abdulhadi Al-Omari)