Privacy Policy

Last updated: August 17, 2026

This policy explains what personal data we collect, why we collect it, and what rights you have over it.

If you have any questions, contact us at heirloomsocietyhq@gmail.com.

1. Who We Are

Heirloom Society is a career resource platform for students in the UAE, based in Dubai, UAE. Our website address is https://heirloomsociety.site.

2. What Data We Collect

When you register for an account, we collect:

  • Username
  • First and last name
  • Email address
  • Password (stored securely as an encrypted hash — we never see or store your password in plain text)
  • Area of interest (sector: Computing & Applied Technology, Law & Policy, Business & Commerce, or Creative Media & PR)
  • Education stage (Secondary, Sixth Form, Gap Year, or University)

Registration requires you to actively confirm: “I allow the website to collect and store the data I submit through this form.”

When you sign up for our mailing list (“Request Priority Membership”), we collect your email address. Subscriptions require double opt-in — you must confirm via a link sent to your inbox before you’re added to the list.

When you browse the site, we automatically collect:

  • IP address
  • Browser type and device information
  • Pages visited and time spent on site
  • General location (city/country level, inferred from IP)

When you log in, we set functional cookies to keep you signed in (see Section 5).

3. Why We Collect This Data

We use your data to:

  • Create and manage your account
  • Personalize your experience based on your sector of interest and education stage
  • Send newsletter updates and platform announcements (only if you’ve opted in)
  • Understand how visitors use the site, via Google Analytics, so we can improve it
  • Maintain the security of our platform (e.g. detecting suspicious login activity)

We do not use your data for advertising, and we do not sell your personal data to any third party.

4. Minors and Younger Users

Heirloom Society is built for students, and we recognize many of our users are under 18. Our platform is not intended for children under 13, and we do not knowingly collect personal data from anyone under 13.

If you are under 18, we recommend reviewing this policy with a parent or guardian before registering an account or submitting personal information. If we become aware that a user under 13 has registered without appropriate consent, we will delete that account and associated data.

5. Cookies

We use the following types of cookies:

Essential/functional cookies

  • Login session cookies, so you stay signed in (expire after 2 days, or 2 weeks if “Remember Me” is selected)
  • A temporary cookie on the login page to check whether your browser accepts cookies (contains no personal data, deleted when you close your browser)

Analytics cookies

  • Google Analytics cookies, which help us understand site traffic and usage patterns. These collect anonymized/aggregated data about your visit (see Section 6).

We do not use marketing or advertising cookies.

6. Third Parties We Work With

We share limited data with the following service providers, solely to operate the platform:

  • Google Analytics — collects anonymized traffic data (pages visited, time on site, general location) to help us understand and improve the platform. Data may be processed on Google’s servers outside the UAE. You can learn more via Google’s Privacy Policy.
  • Hostinger — our web hosting provider, which stores our website files and database (including registered user data) on its servers.
  • MailPoet — our newsletter plugin, which manages email subscriptions and sends newsletter emails. Subscriber data is stored within our own WordPress database, not on an external MailPoet-hosted server, though sending emails may involve MailPoet’s sending infrastructure.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. How We Store and Protect Your Data

Your data is stored in our WordPress database, hosted by Hostinger. Passwords are encrypted and never stored in plain text. Our site uses SSL encryption to protect data transmitted between your browser and our servers.

We retain your data for as long as your account remains active, or as long as needed to provide our services. If you request account deletion, we will remove your personal data except where we’re required to retain it for legal or security reasons.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or outdated data
  • Delete your account and associated personal data
  • Withdraw consent at any time (e.g. unsubscribe from our newsletter via the link in any email)
  • Export a copy of your data on request

To exercise any of these rights, contact us at [your privacy email]. We’ll respond within a reasonable timeframe.

If you registered an account, you can also view, edit, or delete most of your personal information directly from your account settings (excluding your username, which cannot be changed).

9. International Data Transfers

Some of our service providers (notably Google Analytics) process data on servers located outside the UAE. Where this happens, these providers maintain their own data protection safeguards in line with international standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at:

Email: heirloomsocietyhq@gmail.com Location: Dubai, United Arab Emirates