Who we are
This site at steyp.com/ae is operated by Steyp Education and Training LLC, established in Dubai in 2025 and KHDA approved in Dubai for its permitted activities. In this policy, "Steyp", "we" and "us" mean that company, and it is the controller of the personal data described below.
- Legal entity
- Steyp Education and Training LLC
- Established
- 2025, Dubai, United Arab Emirates
- Approval
- KHDA approved in Dubai, for its permitted activities
- Address
- RKM Building, Office 223, Near Qiyadah Metro Station, Hor Al Anz, Dubai, UAE
- hello@steyp.com
- Phone
- +971 50 160 4799
The Indian site at steyp.com/in is operated by a separate company, Steyp Private Limited, under its own privacy policy. If you deal with the Indian business, that policy applies to you and this one does not.
What this policy covers
It covers this website, the institutional enquiry form, the learner registration form, and the personal data we handle while delivering programs in schools, colleges, universities and partner venues.
It applies to personal data processed under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and any executive regulations issued under it.
What we collect
We collect what the forms ask for and nothing beyond it. No payment is taken on this site, so we never see card or bank details.
- Institutional enquiry
- Institution name, institution type, city or emirate, your name, your role, your email address, your phone number, cohort size and grade levels, the program and format you are interested in, your timeline, and anything you write in the free text field.
- Learner registration
- The program selected, the learner group, the learner's name, the learner's age, the name of the person we should contact (a parent or guardian where the learner is under 18), an email address, a phone number, and anything written in the notes field, which may include preferred days, prior experience or accessibility needs.
- Program delivery
- Attendance records, skills checklists and assessment results, project and capstone work, certificate records including the unique certificate identifier issued, and photographs or video recorded during sessions.
- Website and device data
- IP address, browser and device type, pages viewed and referring page, collected through the third-party tools listed under cookies and tracking below.
Where the data comes from
- Directly from you, when you complete a form, email us, call us or use the chat widget.
- From a parent or legal guardian registering a learner under 18.
- From an institution that has commissioned a program, which gives us the class list, attendance information and a coordinator contact.
- From a partner venue handling registrations for an open cohort it hosts.
Why we use it, and our lawful basis
Under Federal Decree-Law No. 45 of 2021, personal data may be processed with the consent of the data subject or where one of the exceptions in the law applies, including where processing is necessary to perform a contract, to protect the vital interests of the data subject, to comply with a legal obligation, or for a legitimate interest that does not prejudice the data subject's rights.
- Answering an enquiry
- Your consent, and our legitimate interest in replying to a business enquiry addressed to us.
- Preparing a proposal and running a program
- Performance of a contract, or steps taken at your request before entering one.
- Assessment, reporting and certification
- Performance of the contract with the institution or the registering adult, and our legitimate interest in keeping a certificate record that can be verified later.
- Keeping a session safe
- Protecting the vital interests of the learner.
- Photography and marketing
- Consent, obtained through the institution or from the registering adult.
- Analytics and advertising
- Consent, where consent is required for the cookie or similar technology involved.
- Accounting and regulatory records
- Compliance with a legal obligation.
We do not make decisions about anyone by automated means alone, and we do not sell personal data.
Children's data and parental consent
Our school programs run for ages 8-17, so most of the learners in them are children. That shapes how we handle their data.
- A registration for a learner under 18 must be completed by a parent or legal guardian. That adult is the person we contact and the person who accepts the terms.
- We do not knowingly accept a registration submitted by a child. If we learn that one has been, we stop processing it and remove it unless a parent or guardian confirms it.
- For a program commissioned by an institution, the institution obtains parental consent for participation, for sharing the class list with us and for photography, as part of its own consent process. We rely on the institution's confirmation that it has done so.
- A parent or legal guardian can ask us at any time to show them what we hold about their child, to correct it, or to delete it.
- We ask for the learner's age rather than a date of birth, and we ask for nothing about a child that the program does not need.
Photographs and filming
We photograph and sometimes film sessions, and we use some of those images on this site and in program materials.
- For an institution-run program, consent for photography is handled through the institution's own process before the program starts.
- For an open cohort, we ask the registering adult for consent before the program starts.
- A learner or their guardian can decline, and declining does not affect taking part.
- Consent can be withdrawn later. Ask us to remove an image and we will take it down from material we control and stop using it. We cannot recall copies a third party has already published.
To withdraw photography consent or ask for an image to be removed, email hello@steyp.com and tell us which program and session the image comes from, so we can find it.
How long we keep it
We keep personal data for as long as it is needed for the purposes described in this policy, and to maintain the institution's and the learner's program record. A certificate record is kept so that a certificate issued years earlier can still be verified.
Steyp does not operate a fixed deletion schedule, and this page does not promise that a record is erased once a program ends. Where a record is no longer needed for any of those purposes, we remove it or reduce it to something that no longer identifies anyone.
You can ask us to delete personal data we hold about you at any time, and we will do that unless we still need it for a purpose described above or the law requires us to keep it. How to ask is set out under your rights below.
How we protect it
The site is served over HTTPS and form submissions are encrypted in transit. Access to enquiry and registration records is limited to the staff who need it, accounts are individual rather than shared, and trainers receive only the participant information a session requires.
Photographs and class lists taken to a venue are held on Steyp accounts rather than personal ones, and a trainer's access ends when their involvement in the program does.
No system is completely secure and we will not claim otherwise. Where a breach of your personal data is likely to prejudice your privacy or your rights, we will notify the UAE Data Office and, where the law requires it, you.
Your rights
Under Federal Decree-Law No. 45 of 2021 you can ask us to:
- tell you what personal data we hold about you and why we hold it,
- give you a copy of it, in a structured, machine-readable form where that applies,
- correct it where it is wrong or incomplete,
- delete it, where we have no continuing reason to keep it,
- restrict or stop a particular use of it, including direct marketing,
- withdraw a consent you gave us, which does not affect what we did before you withdrew it,
- object to a decision taken about you by automated means.
To use any of these, email hello@steyp.com with enough detail for us to find your record, or write to us at Steyp Education and Training LLC, RKM Building, Office 223, Near Qiyadah Metro Station, Hor Al Anz, Dubai, UAE. If you are asking about a learner under 18, tell us you are the parent or legal guardian, and we may ask you to confirm it before we answer.
We answer as quickly as we reasonably can, and we tell you if we need more information in order to identify your record. Using these rights costs nothing.
If our answer does not satisfy you, you can complain to the UAE Data Office.
Changes to this policy
We may update this policy. The date at the top of the page is the date of the version you are reading, and a material change will be announced here.