Privacy Policy
gordonstoun.ae
Last updated: 20/08/2026
1. Introduction
This Privacy Policy explains how GORDONSTOUN JUBAIL ISLAND SCHOOL - L.L.C - S.P.C (“the School”, “we”, “us” or “our”) collects, uses, discloses and protects personal data when you visit or interact with our website at gordonstoun.ae (the “Website”).
We are committed to protecting your privacy and handling your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and any applicable implementing regulations, decisions and guidance issued from time to time, together with any other applicable data protection laws of the United Arab Emirates.
This Policy applies to personal data collected through the Website only. Personal data collected through the admissions process, enrolment or the day-to-day operation of the School is governed by our separate data protection notices provided at the relevant time.
2. Who We Are (Data Controller)
For the purposes of the PDPL, the data controller is: GORDONSTOUN JUBAIL ISLAND SCHOOL - L.L.C - S.P.C
Address: JUBAIL ISLAND, JUBAIL SOUTH, P396, BUILDING, INTERNATIONAL EDUCATION HOLDING L.L.C
Email: info@gordonstoun.ae
Telephone: [TBD]
If we have appointed a Data Protection Officer, their contact details are set out in Section 13 below.
3. Personal Data We Collect
We may collect the following categories of personal data through the Website:
- Information you provide to us: your name, email address, telephone number, nationality, and any other information you choose to provide when you complete an enquiry or admissions interest form, register for an open day or event, subscribe to our newsletter, or otherwise contact us through the Website. Where you make an enquiry on behalf of a child, this may include the child’s name, date of birth and current school year.
- Technical data: your IP address, browser type and version, device type, operating system, time zone setting and location data derived from your IP address.
- Usage data: information about how you use the Website, including the pages you view, the links you click, the time spent on pages and the website you arrived from.
- Cookie data: information collected through cookies and similar technologies, as described in Section 7.
We do not intend to collect sensitive personal data (such as data revealing health, religious beliefs or biometric data) through the Website. Please do not submit such data through Website forms unless we specifically request it and explain the basis for doing so.
4. How We Use Your Personal Data and Legal Bases
We process your personal data only where the PDPL permits us to do so. The table below sets out the purposes for which we use your personal data and the corresponding legal bases:
| Purpose | Personal Data Used | Legal Basis |
|---|---|---|
| Responding to admissions and general enquiries submitted through the Website | Name, contact details, details of your enquiry, information about your child (where you provide it) | Consent; steps taken at the data subject’s request with a view to entering into a contract, where applicable |
| Arranging school visits, open days and events | Name, contact details, attendance preferences | Consent; steps taken at the data subject’s request with a view to entering into a contract, where applicable |
| Sending newsletters and marketing communications you have requested | Name, email address, communication preferences | Consent (you may withdraw at any time) |
| Operating, securing and improving the Website | Technical data, usage data, cookie data | Consent for analytics and other non-essential cookies |
| Complying with legal and regulatory obligations | Any of the above, as required | Compliance with applicable UAE law |
Where we rely on your consent, you have the right to withdraw it at any time by contacting us using the details in Section 13. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
5. Children’s Data
As a school, we understand the importance of protecting children’s personal data. The Website is intended for use by parents, guardians and prospective families rather than by children. Where you provide personal data relating to a child (for example, in an admissions enquiry), we process it only for the purpose for which it was provided and with appropriate safeguards. The Website does not knowingly accept submissions directly from children. If we become aware that personal data has been submitted by a child without parental or guardian involvement, we will delete it promptly
6. How We Share Your Personal Data
We do not sell your personal data. We may share your personal data with:
- Service providers: third parties who provide services to us, such as website hosting, IT support, email delivery, analytics and customer relationship management systems, acting as data processors under our instructions and subject to contractual confidentiality and security obligations.
- Our affiliated entities: including Gordonstoun (UK) / AFFILIATED ENTITIES (TBD), where necessary for the purposes described in this Policy.
- Regulators and authorities: including relevant government bodies, educational regulators such as ADEK, law enforcement agencies and courts, or where disclosure is required by applicable UAE law.
- Professional advisers: lawyers, auditors and insurers where reasonably necessary.
7. Cookies
The Website uses cookies and similar technologies. Cookies are small text files placed on your device that help the Website function and provide us with information about how it is used.
- Strictly necessary cookies: required for the Website to operate and cannot be switched off.
- Analytics cookies: help us understand how visitors use the Website so we can improve it (for example, Google Analytics). These are used only with your consent
- Functional and marketing cookies: remember your preferences and, where used, support relevant communications. These are used only with your consent.
You can manage or withdraw your cookie preferences at any time through our cookie banner or your browser settings. Disabling some cookies may affect the functionality of the Website.
8. International Data Transfers
Your personal data may be transferred to, and stored in, countries outside the United Arab Emirates, including the United Kingdom / AFFILIATES (TBD), for the purposes described in this Policy. Where we transfer personal data outside the UAE, we will ensure that the transfer is permitted under Articles 22 or 23 of the PDPL, including, where applicable, through contractual arrangements requiring the recipient to implement appropriate data-protection safeguards, the data subject’s express consent, or another transfer ground permitted by law
9. Data Retention
We retain personal data collected through the Website only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting or reporting requirements. In general, enquiry data is retained for twenty-four (24) months from the date of your last interaction with us, and newsletter subscription data is retained until you unsubscribe. When personal data is no longer required, we securely delete or anonymise it.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction, alteration or damage, in accordance with Article 20 of the PDPL. These measures include encryption in transit, access controls, staff confidentiality obligations and regular review of our security practices. In the event of a personal data breach that would prejudice the privacy, confidentiality or security of your personal data, we will notify the UAE Data Office and affected data subjects in accordance with applicable legal requirements
11. Your Rights
Subject to the conditions and exemptions set out in the PDPL, you have the following rights in relation to your personal data:
- Access: to request access to, and information about, the personal data we hold about you, the purposes of processing, and the parties with whom it is shared.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in the circumstances set out in the PDPL.
- Restriction: to request that we restrict or cease processing of your personal data in certain circumstances.
- Portability: where processing is automated and based on consent or contractual necessity, to receive personal data you provided in a structured, machine-readable format and, where technically feasible, request its transfer to another controller
- Objection: to object to and request the cessation of processing for direct marketing purposes, including related profiling, and in the other circumstances provided under the PDPL.
- Automated decision-making: to object to decisions resulting from automated processing, including profiling, where they have a legal impact on or otherwise adversely affect you, and to request human review, subject to the exceptions provided under the PDPL
- Withdraw consent: to withdraw any consent you have given at any time.
To exercise any of these rights, please contact us using the details in Section 13. We will respond in accordance with the timeframes required under the PDPL. We may need to verify your identity before acting on your request. If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office, the federal data protection authority.
12. Third-Party Links
The Website may contain links to third-party websites, including social media platforms. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, please contact:
Data Protection Officer / Privacy Lead: [TBD]
Email: info@gordonstoun.ae
Address: Jubail Island, Jubail South, P396, Building, International Education Holding L.L.C
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Where changes are material, we will take reasonable steps to bring them to your attention.