1970-Jan-01

Data Protection and Security Policy

Classperts Comprehensive Policy Overview

1. Introduction

Classperts is a leading cloud-based e-learning platform, designed to provide robust educational solutions while ensuring the protection of personal data and adherence to Saudi regulations. Our platform is built to comply with the National E-Learning Center (NELC) and Saudi Data and Artificial Intelligence Authority (SDAIA) standards. This policy outlines our commitment to safeguarding data, maintaining service continuity, and upholding the highest security standards.

2. Definitions

Personal Data: Refers to any information relating to an identified or identifiable individual, including but not limited to names, contact information, educational records, and payment details.
Confidential Data: Sensitive data that, if disclosed without authorization, could cause significant harm to individuals or Classperts, including financial records and intellectual property.
Data Controller: The entity responsible for determining the purposes and means of processing personal data within Classperts.
Data Processor: Any entity that processes data on behalf of the Data Controller.
User: Any individual who interacts with the Classperts platform, including students, instructors, administrators, and support staff.

3. Personal Data Protection Policy

Classperts strictly adheres to the Personal Data Protection Law (PDPL) of Saudi Arabia, implementing comprehensive measures to protect personal data:

Data Collection: Personal data is collected only for specified, lawful purposes. The scope of data collection is limited to what is necessary for the intended purpose, ensuring minimal intrusion into users' privacy.
Data Retention: Personal data is retained only as long as necessary for the purposes for which it was collected. Classperts conducts regular audits to ensure data is accurate, complete, and up-to-date.
User Rights: Users have the right to access their personal data, request corrections, and demand deletion under certain circumstances. Classperts has established a clear process for users to exercise these rights.
Data Transfers: Personal data is not transferred outside Saudi Arabia unless legally required or with the user’s explicit consent. Any international data transfer is conducted with appropriate safeguards to ensure compliance with legal requirements【83†source】.

4. Backup and Recovery Policy

Classperts maintains a robust backup and disaster recovery strategy to protect data and ensure service continuity:

Data Backups: Regular backups are performed daily, with 14 full backups retained for a minimum of 3 months. Backups are stored across multiple data centers located on at least two continents, providing redundancy and ensuring data availability even in the event of a disaster.
Disaster Recovery Objectives: In the event of a catastrophic failure, Classperts aims to achieve a Recovery Point Objective (RPO) and Recovery Time Objective (RTO) of 24 hours for paid subscriptions. For free or trial users, the RTO is extended to 48 hours【81†source】.
Hardware Failover: Local hot standby replication and proactive monitoring ensure that hardware failures are addressed promptly, minimizing service disruption.

5. Security and Cybersecurity Policies

Classperts implements a comprehensive suite of security measures to protect its infrastructure, data, and users:

Network Security: All traffic on the Classperts platform is encrypted using HTTPS. Multi-factor authentication (MFA) is enforced for admin access, and regular security assessments are conducted to identify and mitigate potential threats【77†source】【92†source】.
Server Security: Our servers are protected by a multi-layered security approach, including firewalls, intrusion detection systems, and regular patch management. Physical access to server hardware is restricted to authorized personnel only, and servers are located in secure data centers【93†source】.
Web Application Security: Classperts employs advanced security measures to protect web applications from common threats such as cross-site scripting (XSS), SQL injection, and other vulnerabilities. Regular penetration tests are conducted to identify and address potential security weaknesses【92†source】【74†source】.
Incident Management: A detailed incident management plan is in place to respond to security breaches or data loss events. This plan includes immediate containment, eradication of the threat, recovery of systems, and communication with affected users. All incidents are thoroughly documented and reviewed to improve future responses【78†source】.

6. Data Classification and Information Policy

Classperts classifies data into categories based on its sensitivity to ensure proper handling and protection:

Confidential Data: This includes personal data, financial records, proprietary business information, and other sensitive data that could cause significant harm if disclosed. Confidential data is encrypted both at rest and in transit and is accessible only to authorized personnel.
Internal Data: This category includes data that is not public but does not pose a significant risk if disclosed. Internal data is accessible to employees and contractors with a legitimate need to know and is stored in secure environments.
Public Data: Publicly accessible data that does not pose a risk to Classperts or its users. Examples include marketing materials, press releases, and other non-sensitive information【51†source】.

7. Service Level Agreement (SLA)

Classperts is committed to delivering high-quality service with clearly defined performance and availability standards:

Performance and Availability: Classperts guarantees an uptime of 99.9%, with rapid response times for any service disruptions. API requests are designed to respond within 1-3 seconds, and the platform is optimized to load pages within the same timeframe under normal conditions.
Support and Incident Management: The SLA categorizes incidents into four priority levels (P1 to P4), each with specified response times. Critical issues (P1) such as system crashes or severe security breaches are addressed immediately, with a target resolution time of 2 hours. Lower priority issues have longer response times, but all incidents are managed promptly to minimize disruption【82†source】.

8. Communication Policy

Classperts prioritizes clear and transparent communication with its users:

User Support: Dedicated support channels are available for users to report issues or request assistance. Support is available 24/7 for critical issues, with detailed tracking of all user queries to ensure timely and effective responses.
Notifications: Users are kept informed about system updates, maintenance schedules, and any potential disruptions through multiple channels, including email notifications and in-app messages. Classperts ensures that all communications are clear, concise, and relevant to the users' needs【79†source】.

9. Compliance and Monitoring

Classperts regularly reviews and audits its operations to ensure compliance with Saudi regulations and internal policies:

Regulatory Compliance: All processes and procedures are designed to comply with the Personal Data Protection Law (PDPL) and SDAIA guidelines. Regular internal audits are conducted to verify adherence to these regulations.
Policy Updates: The policies outlined in this document are reviewed periodically to ensure they remain up-to-date with evolving legal requirements and industry best practices. Users are notified of any significant policy changes via email or the platform【83†source】.

Newly Added Sections

10. User Content Ownership and Licensing

Classperts recognizes the importance of intellectual property rights and ensures that users retain ownership of the content they create and upload. By uploading content to the platform, users grant Classperts a non-exclusive, worldwide license to use, reproduce, distribute, and display the content as necessary for the operation of the platform. This license is essential for providing services such as content delivery, backup, and distribution to other users.

11. Content Moderation Policy

To maintain a safe and productive learning environment, Classperts implements a comprehensive content moderation policy:

Guidelines for Acceptable Use: Users are expected to adhere to community guidelines, which prohibit content that is offensive, harmful, or violates the rights of others.
Monitoring and Enforcement: Classperts uses automated tools and manual review processes to monitor content uploaded to the platform. Content found to be in violation of guidelines is removed, and repeated violations may result in account suspension or termination.
Appeal Process: Users who believe their content was unfairly removed can appeal the decision. The appeal is reviewed by a dedicated team, and users are informed of the outcome within a specified timeframe.

12. Third-Party Integrations and Data Sharing

Classperts integrates with various third-party services to enhance platform functionality and user experience:

Data Sharing Agreements: Classperts only shares data with third parties that adhere to strict data protection standards. Data sharing agreements are in place to ensure third-party services comply with Classperts' security and privacy policies.
Limited Data Access: Only the minimum amount of data necessary for the integration is shared with third parties. Sensitive data such as personal information and payment details are not shared unless absolutely required and with explicit user consent.

13. Accessibility Compliance

Classperts is committed to making its platform accessible to all users, including those with disabilities:

Compliance with Accessibility Standards: The platform is designed to comply with global accessibility standards, such as the Web Content Accessibility Guidelines (WCAG). This includes features like keyboard navigation, screen reader compatibility, and customizable text sizes.
Ongoing Improvements: Classperts continuously evaluates and improves accessibility features based on user feedback and technological advancements. Users are encouraged to report any accessibility issues they encounter, which are promptly addressed by the development team.

14. International Data Transfers

While Classperts primarily operates within Saudi Arabia, there may be instances where data needs to be transferred internationally:

Legal Safeguards: Any international data transfers are conducted in compliance with applicable laws and regulations, ensuring that data is protected to the same standard as within Saudi Arabia. This includes the use of standard contractual clauses and other legal mechanisms to safeguard data during transfers.
User Consent: In cases where data transfer is not covered by legal requirements, Classperts will obtain explicit user consent before proceeding with the transfer. Users are informed of the risks and benefits associated with the transferLet's continue:

14. International Data Transfers (continued)

Data Localization: In compliance with Saudi regulations, personal data is primarily stored and processed within Saudi Arabia. Any exceptions to this rule are handled with the utmost care, ensuring that data is protected throughout the transfer process.

15. Detailed Incident Response Plan

Classperts has developed a comprehensive incident response plan to manage and mitigate the impact of any security breaches or data loss events:

Immediate Containment: Upon detecting a security incident, immediate actions are taken to contain the threat and prevent further damage. This includes isolating affected systems and disabling compromised accounts.
Eradication and Recovery: After containment, the root cause of the incident is identified and eliminated. Data recovery processes are initiated, with a focus on restoring service as quickly as possible.
User Communication: Affected users are notified of the incident, including details on the nature of the breach, the data impacted, and the steps Classperts is taking to resolve the issue. Users are provided with guidance on how to protect themselves from potential consequences of the breach.
Post-Incident Review: Following the resolution of the incident, a thorough review is conducted to analyze the cause, the effectiveness of the response, and opportunities for improvement. Lessons learned are used to strengthen Classperts' security posture and incident response procedures.

16. Policy Updates and User Notifications

Classperts reserves the right to update this policy to reflect changes in legal requirements, industry standards, or operational needs:

Regular Reviews: This policy is reviewed annually, or more frequently as needed, to ensure it remains up-to-date and effective.
User Notifications: Significant changes to the policy are communicated to users through multiple channels, including email notifications and in-app alerts. Users are encouraged to review the updated policy and reach out with any questions or concerns.
User Consent: Continued use of the Classperts platform following the notification of policy updates constitutes acceptance of the revised policy terms. Users who do not agree with the updates may choose to deactivate their accounts.

Items in cart

0 Items in cart

0 Save for Later

Total:

0 $

1970-Jan-01

Items in cart

0 Items in cart

0 Save for Later

Total:

0 $

Added to cart