Privacy Policy

The Indian Institute of Management Ahmedabad - Dubai Campus ("IIMA Dubai", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. We comply with the UAE Personal Data Protection Law (PDPL), the EU General Data Protection Regulation (GDPR), and other applicable data protection laws.

We may collect the following types of personal information: • **Contact Information**: Name, email address, phone number, mailing address • **Academic Information**: Educational background, transcripts, test scores (GMAT, GRE, IELTS, TOEFL) • **Professional Information**: Employment history, current employer, job title • **Application Data**: Program preferences, statements of purpose, recommendation letters • **Technical Data**: IP address, browser type, device information, cookies • **Communication Data**: Inquiries, feedback, and correspondence with us

We use your personal data for the following purposes: • Processing program applications and admissions decisions • Communicating about programs, events, and opportunities • Providing educational services and student support • Improving our website and user experience • Complying with legal obligations • Sending marketing communications (with your consent) • Conducting research and analytics

We process your personal data based on: • **Consent**: When you have given explicit consent for specific purposes • **Contract**: When processing is necessary for enrollment or service delivery • **Legal Obligation**: When required by applicable laws and regulations • **Legitimate Interest**: For improving our services and communicating with prospective students

We may share your information with: • IIM Ahmedabad (parent institution) for academic coordination • Third-party service providers (payment processors, IT services) • Government authorities when required by law • Accreditation bodies for quality assurance For international data transfers, we implement appropriate safeguards including Standard Contractual Clauses and ensure adequate protection levels.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Application data is typically retained for 3 years; enrolled student records are retained for 7 years after graduation.

Under applicable data protection laws, you have the right to: • **Access**: Request a copy of your personal data • **Rectification**: Correct inaccurate or incomplete data • **Erasure**: Request deletion of your data ("right to be forgotten") • **Restriction**: Limit how we process your data • **Portability**: Receive your data in a portable format • **Objection**: Object to certain processing activities • **Withdraw Consent**: Revoke previously given consent To exercise these rights, please contact our Data Protection Officer.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure data storage, and regular security assessments.

For privacy-related inquiries or to exercise your data protection rights, please contact: **Data Protection Officer** IIMA Dubai Dubai International Academic City Dubai, UAE Email: privacy@iimadubai.ae Phone: +971 4 XXX XXXX