Overview
Quriva ("we", "us", "our") is a university extension management platform operated by Lathran Technologies. This Privacy Policy applies to all users of the Quriva platform, including division directors, administrators, faculty, and enrolled students at partner institutions.
By accessing or using Quriva, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.
๐ก Plain English summary: We only collect data that's necessary to run your programs. We don't sell it. You can request deletion at any time. That's the short version โ the details are below.
Data We Collect
We collect two categories of information: information you provide directly, and information generated through your use of the platform.
Information you provide:
- Account registration details โ name, institutional email address, role, and university affiliation
- Student enrollment data โ full name, contact information, program selections, and payment records
- Program and event content โ titles, descriptions, schedules, and faculty information entered by administrators
- Communications โ messages sent through the platform's support or contact features
- Billing information โ processed securely via our payment providers; we do not store card numbers
Information collected automatically:
- Log data โ IP address, browser type, pages visited, timestamps, and referring URLs
- Device information โ operating system, screen resolution, and device type
- Usage analytics โ feature interactions, session duration, and navigation patterns
- Cookies and similar tracking technologies (see the Cookies section below)
How We Use Your Data
We use collected data for the following purposes only:
- Providing, maintaining, and improving the Quriva platform and its features
- Processing student enrollments, payments, and certificate issuance
- Sending transactional communications โ confirmations, reminders, and updates โ directly related to your use
- Generating the reporting and analytics visible within your division's dashboard
- Responding to support requests and resolving technical issues
- Complying with legal obligations applicable in the UAE, UK, and Canada
- Detecting and preventing fraudulent or unauthorised access
โ ๏ธWe do not use your data for advertising, sell it to third parties, or use it to train AI models without explicit written consent from your institution.
Sharing & Disclosure
We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:
- Service providers: Trusted third-party processors (payment gateways, cloud hosting, email delivery) who are contractually bound to handle data only as we direct
- Your institution: Division administrators have access to student data for programs within their institution only
- Legal requirements: When required by applicable law, court order, or governmental authority in the UAE, UK, or Canada
- Business transfers: In the event of a merger or acquisition, your data would transfer to the successor entity under the same protections
Data Retention
We retain personal data for as long as your account is active or as necessary to provide services. Specific retention periods:
- Active account data โ retained for the duration of your subscription plus 90 days post-termination
- Student enrollment records โ retained for 7 years to comply with academic record-keeping requirements
- Payment records โ retained for 7 years for tax and audit compliance
- Log and analytics data โ retained for 12 months, then aggregated and anonymised
You may request early deletion of your personal data (see Your Rights section below) subject to legal retention requirements.
Security
We implement industry-standard technical and organisational measures to protect your data, including:
- AES-256 encryption for data at rest; TLS 1.3 for data in transit
- Role-based access controls โ staff can only access data relevant to their function
- Regular penetration testing and vulnerability assessments
- SOC 2 Type II compliant infrastructure through our cloud hosting provider
- Mandatory two-factor authentication for all administrative accounts
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standards.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request erasure of your personal data (subject to legal retention obligations)
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to specific types of processing, including marketing communications
- Restriction: Request temporary restriction of processing while a complaint is being investigated
To exercise any of these rights, contact us at privacy@quriva.io. We will respond within 30 days.
Cookies
We use cookies and similar technologies to operate the platform and improve your experience. Categories of cookies we use:
- Essential cookies: Required for login sessions and platform security. Cannot be disabled.
- Functional cookies: Remember your preferences โ language, dashboard layout, and filter states.
- Analytics cookies: Help us understand how the platform is used so we can improve it (anonymised).
You can control non-essential cookies through your browser settings or the cookie consent banner on first visit. Disabling analytics cookies will not affect platform functionality.
International Transfers
Quriva operates across the UAE, UK, and North America. Your data may be processed in servers located in these regions. All international transfers are conducted under appropriate safeguards including:
- Standard Contractual Clauses (SCCs) approved by the UK ICO and EU Commission
- Compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection
- Compliance with Canada's PIPEDA (Personal Information Protection and Electronic Documents Act)