Privacy Policy

Welcome to the International Aesthetic Academic Institution (IAAI). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our training platform and services.

By accessing or using IAAI's website, training programs, or services, you agree to the terms outlined in this Privacy Policy. If you do not agree with these terms, please do not use our services.

1. Personal Information

We collect personal information that you voluntarily provide when you:

• Register for an account on our platform
• Enroll in training courses or programs
• Submit inquiry forms or contact us
• Subscribe to our newsletter
• Complete course evaluations or surveys

This information may include:

• Full name, email address, phone number
• Professional credentials (medical license number, qualifications)
• Billing and payment information
• Professional practice details (clinic name, address)
• Profile photo and biographical information

2. Automatically Collected Information

When you access our website or platform, we automatically collect:

• IP address and location data
• Browser type and version
• Device information (type, operating system)
• Pages visited, time spent, and navigation patterns
• Referral source and exit pages

3. Course and Learning Data

• Course enrollment and completion status
• Quiz and assessment results
• Certificate issuance records
• Video watch time and progress tracking
• Forum posts and discussion participation

4. Payment Information

Payment details are processed securely through third-party payment processors (CCAvenue, Stripe). We do not store full credit card numbers on our servers. We retain:

• Transaction IDs and payment receipts
• Billing address information
• Payment method type (last 4 digits only)

We use the collected information for the following purposes:

• Course Delivery: Process enrollments, provide access to training materials, track progress, and issue certificates
• Communication: Send course updates, reminders, announcements, and respond to inquiries
• Payment Processing: Handle transactions, invoicing, and refunds
• Platform Improvement: Analyze usage patterns to enhance user experience and course quality
• Compliance: Verify professional credentials and meet regulatory requirements
• Marketing: Send promotional materials about new courses (with your consent - you can opt out anytime)
• Security: Detect and prevent fraud, unauthorized access, and security breaches
• Legal Obligations: Comply with applicable laws, regulations, and legal processes

We may share your information with the following parties:

1. Service Providers

• Payment Processors: CCAvenue, Stripe (for secure payment processing)
• Cloud Storage: Cloudinary (for images and videos)
• Email Service: Email delivery platforms for course communications
• Analytics: Google Analytics (anonymized data for website improvement)

2. Certification Bodies

We share your name, course completion status, and credentials with accrediting organizations to verify your certifications.

3. Instructors and Training Partners

Course instructors may access your enrollment information, progress, and assessment results to facilitate training delivery.

4. Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our legal rights and safety.

5. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Depending on your location, you may have the following rights under GDPR (Europe) and CCPA (California):

To exercise your rights, contact us at: info@iaa-i.com with "Privacy Rights Request" in the subject line.

IAAI operates training centers in multiple countries, including Turkey, UAE, and Italy. Your personal data may be transferred to, stored, and processed in these locations or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adherence to applicable data protection frameworks
• Security measures equivalent to those required in your home country

We implement industry-standard security measures to protect your information:

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Limited access to authorized personnel only
• Secure Servers: Protected infrastructure with firewalls and monitoring
• Regular Audits: Periodic security assessments and updates
• Password Protection: Encrypted password storage using bcrypt

While we strive to protect your data, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality (login sessions, security)
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Preference Cookies: Remember your settings and choices

You can control cookie settings through your browser. Note that disabling cookies may affect website functionality.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Active Accounts: Data retained while your account is active
• Course Records: Enrollment and certification data retained for 7 years (for verification purposes)
• Payment Records: Financial data retained for 7 years (tax and legal compliance)
• Marketing Data: Deleted upon opt-out request
• Inactive Accounts: May be deleted after 3 years of inactivity (with notice)

IAAI's services are intended for healthcare professionals aged 18 and above. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected data from someone under 18, we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our platform

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.