Table of contents 10 sections
Information
Data We Process
- Account and contact data: name, email, WhatsApp number, and authentication credentials.
- Identity and profile data: photo, place/date of birth, address, identity details, and program documents.
- Service data: program choice, schedule, test results, certificates, bookings, and support history.
- Transaction and delivery data: amount, payment method/status, transfer proof, destination account, address, and shipment status.
- Technical data: IP address, device, browser, security logs, cookies, and required activity records.
Information
Why We Process Data
Data is used to create and protect accounts, process registrations, provide services, record results, handle payments and documents, send transactional notices, provide support, prevent misuse, and meet legal obligations.
- Marketing messages require separate optional consent that may be withdrawn.
- Withdrawing marketing consent does not stop transactional messages required for the service.
Information
Data Managers and Recipients
English Versity and Al Azhar Center Pare jointly manage core platform and TENAFL program data according to operational responsibilities. For TOEFL ITP® Online registration and delivery, required data may be shared with CIE (Central International Education), an IIEF-authorized test center.
- Payment, hosting, email, security, delivery, or technical providers receive only data required for their function.
- Data may be disclosed to competent authorities when legally required.
- Personal data is not sold.
Information
Retention Periods
- Account data: while active and up to 2 years after the last activity.
- Identity or registration documents: up to 2 years after service completion, subject to legal, dispute, or authority exceptions.
- Transaction and accounting data: 10 years.
- Security logs: up to 2 years.
- Minimum certificate-verification data may be retained while the document still needs validation.
Information
Data Security
Access is limited by task. Participant passwords are stored as one-way hashes. Reasonable safeguards, logs, and reviews are used, but no internet service can guarantee zero risk.
- Protect your account, email, password, OTP, and device.
- Contact official support promptly if you notice unfamiliar access or changes.
Information
Public Certificate Verification
A verification page may show the minimum information relevant to document authenticity according to the certificate publication status. Participants may request restricted public visibility, while minimum data may be retained for validation or legal obligations.
Information
Participants Under Legal Age
A minor must obtain parent or guardian consent before creating an account, submitting documents, or using a paid service.
Information
Participant Rights
Participants may request access, correction, restriction, marketing-consent withdrawal, or eligible deletion/anonymization. A validated request is processed within no more than 30 calendar days, except where data must be retained for transactions, accounting, disputes, document verification, security, or legal duties.
- Send a request to sayhello@tenafl.com or WhatsApp 08135757829.
- Identity verification may be required before processing.
Frequently asked questions
Privacy Policy FAQ
Who manages TENAFL data?
English Versity and Al Azhar Center Pare jointly manage core platform and TENAFL program data according to operational responsibilities.
Is TOEFL ITP® data shared with another party?
Required data may be shared with CIE (Central International Education), an IIEF-authorized test center, for TOEFL ITP® Online registration and delivery.
How long does an eligible deletion request take?
Up to 30 calendar days after identity and request validation, subject to required-retention exceptions.
May minors register?
Yes, with parent or guardian consent.
References