Privacy Policy

Depending on the nature of the verification service requested, Validate Group may collect and process different categories of personal information.

Identity & Contact Information

• Full name
• Nationality
• Date of birth
• Passport details
• Emirates ID details
• Residential or correspondence address
• Email address
• Telephone or mobile number
• WhatsApp number, where provided

Verification & Application Information

• Candidate or application reference numbers
• Student or enrollment numbers
• License or registration details
• Employee or staff identification numbers
• Application forms and declarations
• Consent and authorization records
• Verification requests and instructions
• Verification correspondence

Educational & Professional Information

• Degree certificates
• Diplomas and transcripts
• Academic records
• Academic attendance or enrollment information
• Professional licenses
• Employment records
• Employment history
• Professional qualifications
• References
• Verification outcomes and reports

Technical & Usage Information

• IP address
• Device information
• Browser details
• Operating system information
• Session activity
• Login records
• Website and portal usage information
• Cookies and similar technology information
• Security and access logs

Supporting Documentation

Any information contained within scanned, uploaded, photographed, or electronically submitted documents may also be processed where relevant to the requested verification service.

Validate Group may collect personal information through various methods, including:

• Candidate registration through our verification portal
• Online forms and application submissions
• Uploaded documents
• Email communications
• Telephone conversations
• Customer support interactions
• Verification authorization and consent forms
• Cookies and similar technologies
• WhatsApp, SMS, and other authorized communication channels
• Third-party verification partners and service providers
• Educational institutions and universities
• Current or former employers
• Licensing and regulatory authorities
• Government or public authorities
• Publicly available records where legally permissible

We may also receive information from third parties where the applicant has provided appropriate authorization or where disclosure is legally permitted or required.

Validate Group may process personal information for legitimate operational, contractual, compliance, security, and regulatory purposes, including:

• Conducting background verification and screening
• Verifying educational qualifications and credentials
• Confirming the authenticity of submitted documents
• Identity verification and authentication
• Employment and reference verification
• Professional and license verification
• Fraud prevention and detection
• Maintaining verification records
• Regulatory and legal compliance
• Risk management
• Client reporting
• Customer and applicant support
• Operational administration
• Service enhancement and system improvement
• Audit and quality assurance
• Security monitoring and access management
• Investigating suspected misuse or fraudulent activity
• Responding to legal or regulatory requests

We process personal information only where we have an appropriate legal, contractual, consent-based, or other lawful basis under applicable law.

Depending on the nature of the processing activity and applicable legal requirements, Validate Group may process personal information based on one or more of the following:

• Applicant or candidate consent
• Contractual necessity
• Legal and regulatory obligations
• Legitimate business or operational interests
• Verification authorization provided by the applicant, candidate, client, or authorized representative
• Fraud prevention and security requirements
• Protection of our systems, services, users, and business interests

Where sensitive or special-category personal information is processed, Validate Group will apply additional safeguards where required by applicable laws and regulations.

Where consent is used as the basis for processing, individuals may withdraw consent where legally applicable. Withdrawal of consent may affect our ability to provide certain verification services.

For the purposes described in this Privacy Policy, Validate Group may disclose or share personal information with authorized third parties where reasonably necessary, including:

• Educational institutions and universities
• Employers and former employers
• Licensing and regulatory authorities
• Government or public authorities where legally required
• Verification partners and service providers
• Technology and hosting providers
• Cloud infrastructure providers
• Professional advisers and auditors
• Clients or organizations that have lawfully requested verification services
• Legal, regulatory, or law-enforcement authorities where required or permitted by law

Information sharing is limited to information reasonably necessary for verification, compliance, operational, legal, contractual, or security purposes.

Where third-party service providers process personal information on our behalf, we take reasonable measures to require appropriate confidentiality, security, and data protection obligations.

Where you provide your mobile number, WhatsApp number, or email address, Validate Group may use these communication channels to provide transactional and service-related communications associated with your verification request.

Communications may include:

• Application confirmations
• Verification status updates
• Requests for additional documents or information
• Verification progress notifications
• Completion notifications
• Service-related reminders
• Important account or security notifications

WhatsApp communications may be delivered through the WhatsApp Business Platform and may be subject to applicable WhatsApp and Meta policies.

These communications are intended primarily to facilitate requested services and provide updates relating to an application or verification request.

Validate Group maintains technical, organizational, and administrative security measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, destruction, accidental loss, or other unlawful processing.

Depending on the nature of the information and processing activity, security safeguards may include:

• Secure hosting infrastructure
• Encryption and secure transmission protocols
• Role-based access controls
• Authentication procedures
• Secure document management systems
• Access logging and monitoring
• Security assessments and reviews
• Vulnerability and security testing
• Business continuity and recovery measures
• Confidentiality obligations for employees and service providers
• Controlled access to sensitive information

Access to personal information is restricted to authorized personnel and service providers who have a legitimate business need to access such information.

Where required by applicable law, Validate Group will take appropriate steps in response to a personal data security incident or breach.

Verification services may require information to be communicated to or processed by institutions, employers, verification partners, service providers, or authorities located outside the United Arab Emirates.

As a result, personal information may be transferred, accessed, or processed across different countries and jurisdictions.

Where personal information is transferred internationally, Validate Group will take reasonable measures to ensure that such transfers are conducted in accordance with applicable data protection and privacy requirements.

International transfers may be necessary to complete verification requests because educational institutions, employers, regulatory authorities, and other verification sources may be located in different countries.

Validate Group retains personal information only for as long as reasonably necessary to:

• Complete requested verification services
• Maintain verification and transaction records
• Meet legal and regulatory obligations
• Support audit and compliance activities
• Resolve disputes or claims
• Enforce contractual rights
• Prevent fraud and misuse
• Maintain operational and security records

Retention periods may vary depending on:

• Applicable laws and regulations
• Client or regulatory requirements
• Nature of the verification activity
• Contractual obligations
• Operational and compliance requirements
• Security and fraud-prevention needs

Following expiration of the applicable retention period, information may be securely deleted, archived, anonymized, or otherwise disposed of in accordance with applicable requirements and our internal retention procedures.

Validate Group may use cookies, analytics tools, and similar technologies to:

• Maintain secure sessions
• Improve portal functionality
• Monitor system performance
• Remember user preferences
• Analyze website usage
• Improve user experience
• Detect suspicious or unauthorized activity
• Support website security

Where applicable, users may be able to manage certain cookie preferences through their browser or available website controls.

Additional information regarding cookies and tracking technologies is available in our Cookie Policy.

Validate Group websites, portals, or communications may contain links to third-party websites, applications, institutions, or external services.

Validate Group is not responsible for:

• Third-party privacy practices
• External website content
• Independent security measures
• Third-party data collection activities
• Third-party terms and conditions

Users are encouraged to review the privacy policies and terms of external platforms before providing personal information.

Where applicable, Validate Group applications or portals may request limited device permissions to support verification services, document submission, authentication, security, and user experience.

Depending on the platform and service, permissions may include:

• Camera access for document capture
• Storage or file access for document uploads
• Network connectivity
• OTP and authentication support
• Notification services
• Location access where specifically required for a legitimate verification or service purpose

Validate Group will use such permissions only for legitimate operational, security, authentication, or verification-related purposes and subject to applicable platform permissions and legal requirements.

Subject to applicable laws and regulations, individuals may have rights relating to their personal information, including the right to:

• Request access to personal information
• Request correction of inaccurate information
• Request deletion where legally permissible
• Request restriction of processing
• Withdraw consent where applicable
• Object to certain processing activities
• Request portability or transfer of personal information where applicable
• Raise a privacy-related complaint or concern

Validate Group may request reasonable information to verify an individual's identity before responding to certain requests.

Certain rights may be restricted where processing or retention is required or permitted for:

• Legal obligations
• Regulatory requirements
• Fraud prevention
• Verification integrity
• Security purposes
• Audit and compliance requirements
• Establishment, exercise, or defense of legal claims

Individuals may request deletion of their personal information, subject to applicable legal, regulatory, contractual, security, fraud-prevention, and legitimate business requirements.

To help us locate and verify the relevant information, the request should include, where applicable:

• Full name
• Registered email address or mobile number
• Application or reference number
• Description of the information requested for deletion

Validate Group may request additional information to verify the identity of the requester.

Following verification, we will review the request and, where legally permissible, delete, anonymize, or remove the applicable information from active systems.

Certain information may need to be retained where required for legal, regulatory, contractual, security, fraud-prevention, audit, dispute-resolution, or other lawful purposes.

Validate Group may revise or update this Privacy Policy periodically to reflect:

• Operational changes
• Regulatory developments
• Security enhancements
• Technology updates
• Changes to our services
• Changes to data processing practices

Updated versions will be published on the Validate Group website or relevant portal together with the revised effective date.

Users are encouraged to review this Privacy Policy periodically to remain informed about how personal information is processed.

For questions, privacy requests, complaints, data deletion requests, or concerns regarding this Privacy Policy or the processing of personal information, please contact:

© 2026 Validate Group – All Rights Reserved.