Dubai, United Arab Emirates
Effective Date: 1 June 2026
Version: 1.0
01. Introduction
This Privacy Policy describes how Validate Group (“Validate Group”, “we”, “our”, or “us”) collects, processes, stores, uses, transfers, protects, and manages personal information obtained from applicants, candidates, clients, institutions, and users of our verification services and digital platforms.
Validate Group is a UAE-based background screening and due diligence company providing services including educational verification, degree verification, employment screening, identity verification, compliance reviews, and related verification solutions.
We are committed to maintaining the confidentiality, integrity, and security of personal information processed through our systems and services.
This Privacy Policy explains:
- What information we collect
- How we obtain and use personal data
- The legal basis for processing
- How information may be shared
- Data security measures
- International transfers
- User rights and obligations
By using the Validate Group Degree Verification Portal, website, mobile services, or related verification systems, you acknowledge and agree to the practices outlined in this Privacy Policy.
02. Personal Information We May Collect
Depending on the nature of the verification service requested, Validate Group may collect and process the following categories of personal information:
Identity & Contact Information
- Full name
- Nationality
- Date of birth
- Passport details
- Emirates ID details
- Residential address
- Email address
- Telephone or mobile number
Verification & Application Information
- Candidate reference numbers
- Student or enrollment numbers
- License or registration details
- Employee or staff identification numbers
- Application forms and declarations
- Consent and authorization records
Educational & Professional Information
- Degree certificates
- Diplomas and transcripts
- Academic attendance records
- Professional licenses
- Employment records
- Verification outcomes and reports
Technical & Usage Information
- IP address
- Device information
- Browser details
- Session activity
- Login records
- Website analytics
- Cookie-related information
Supporting Documentation
Any information contained within scanned, uploaded, photographed, or electronically submitted documents may also be processed where relevant to verification activities.
The collection of certain information may be mandatory in order for Validate Group to perform requested verification services. Failure to provide required information may impact our ability to process or complete a verification request.
03. How We Collect Personal Information
Validate Group may collect information through various methods including:
- Candidate registration through the verification portal
- Online forms and application submissions
- Uploaded documentation
- Email communications
- Telephone conversations
- Customer support interactions
- Verification authorization forms
- Cookies and tracking technologies
- Third-party verification partners
- Educational institutions
- Employers and licensing authorities
- Publicly available records where legally permissible
We may also receive information from third parties where the applicant has provided authorization or where disclosure is legally permitted.
04. Purposes for Processing Personal Information
Validate Group processes personal information for legitimate operational, contractual, compliance, security, and regulatory purposes including:
- Conducting verification and screening activities
- Confirming authenticity of submitted credentials
- Identity authentication
- Fraud prevention and investigation
- Maintaining verification records
- Regulatory and legal compliance
- Risk management activities
- Client reporting
- Customer support
- Operational administration
- Service enhancement and system improvement
- Audit and quality assurance activities
- Security monitoring and access management
We only process personal information where we have an appropriate legal or operational basis to do so.
05. Legal Basis for Processing
Depending on the nature of the processing activity and applicable legal requirements, Validate Group may process personal information based on:
- Applicant consent
- Contractual necessity
- Legal and regulatory obligations
- Legitimate business interests
- Verification authorization provided by the applicant or client
- Fraud prevention and security obligations
Where sensitive or special-category information is processed, Validate Group will implement additional safeguards and protections as required under applicable laws and regulations.
06. Disclosure & Sharing of Information
For the purposes outlined in this Privacy Policy, Validate Group may disclose or share personal information with authorized third parties including:
- Educational institutions and universities
- Employers and former employers
- Licensing and regulatory authorities
- Government agencies
- Clients and authorized organizations
- Verification partners and service providers
- Legal and professional advisors
- Auditors and compliance reviewers
- Technology and hosting providers
Information sharing is limited to what is reasonably necessary for verification, compliance, operational, legal, or security purposes.
Validate Group does not sell personal information to third parties.
07. International Transfers of Personal Information
As part of our verification operations, information may be transferred to or accessed from countries outside the United Arab Emirates where educational institutions, verification sources, technology providers, or operational partners are located.
Where international transfers occur, Validate Group implements reasonable technical, contractual, and organizational safeguards to help ensure personal information remains adequately protected.
08. Information Security & Data Protection
Validate Group maintains security measures designed to protect personal information against unauthorized access, misuse, alteration, disclosure, destruction, or accidental loss.
Security safeguards may include:
- Secure hosting infrastructure
- Encryption protocols
- Role-based access controls
- Authentication procedures
- Secure document management systems
- Audit logging and monitoring
- Security assessments and reviews
- Confidentiality obligations for staff and service providers
Access to personal information is restricted to authorized personnel and service providers with a legitimate business need.
While we implement reasonable safeguards, no electronic transmission or storage method can be guaranteed to be completely secure.
09. Data Retention
Validate Group retains personal information only for as long as reasonably necessary to:
- Complete verification services
- Maintain verification records
- Meet legal and regulatory obligations
- Support audit and compliance activities
- Resolve disputes or claims
- Enforce contractual rights
- Maintain operational continuity
Retention periods may vary depending on:
- Applicable laws and regulations
- Client or regulator requirements
- Nature of the verification activity
- Operational and compliance needs
Following expiration of applicable retention periods, information may be securely deleted, archived, anonymized, or otherwise disposed of in accordance with internal retention procedures.
10. Cookies & Website Technologies
Validate Group may use cookies, analytics tools, and related technologies to:
- Maintain secure sessions
- Improve portal functionality
- Monitor system performance
- Remember user preferences
- Analyze website usage
- Detect suspicious or unauthorized activity
Additional details regarding cookies and tracking technologies are available in the Validate Group Cookie Policy.
11. Your Rights
Subject to applicable laws and regulations, individuals may have rights relating to their personal information including the right to:
- Request access to personal information
- Request correction of inaccurate information
- Request deletion where legally permissible
- Request restriction of processing
- Withdraw consent where applicable
- Object to certain processing activities
- Request transfer of personal information where applicable
Validate Group may request identity verification before responding to certain requests.
Certain rights may be restricted where retention or processing is required for:
- Legal obligations
- Regulatory requirements
- Fraud prevention
- Verification integrity
- Audit and compliance purposes
12. Third-Party Websites & Services
Validate Group websites or portals may contain links to third-party websites, applications, or external services.
Validate Group is not responsible for:
- Third-party privacy practices
- External website content
- Independent security measures
- Third-party data collection activities
Users are encouraged to review the privacy policies of external platforms before sharing personal information.
13. Digital Platform & Device Access
Where applicable, Validate Group applications or portals may request limited device permissions in order to support verification services and improve user experience.
Such permissions may include:
- Camera access for document capture
- Storage access for document upload
- Network connectivity status
- OTP and authentication support
- Notification services
- Location access where specifically required
Validate Group will only utilize such permissions for legitimate operational and verification-related purposes.
14. Changes to This Privacy Policy
Validate Group reserves the right to revise or update this Privacy Policy periodically to reflect:
- Operational changes
- Regulatory developments
- Security enhancements
- Technology updates
- Service modifications
Updated versions will be published on the Validate Group website or portal together with the revised effective date.
15. Contact Us
For questions, requests, complaints, or concerns regarding this Privacy Policy or the processing of personal information, please contact:
Compliance Department
Validate Group
Dubai, United Arab Emirates
Email: compliance@validategroup.com
Website: www.validategroup.com