Privacy Policy

The database controller is Omar Amer / عمر عامر, trading as Royal Academia.

For anything about your data: admissions@royal-academia.com or WhatsApp +972 54 819 0312.

When you contact us or fill in a form: your name, phone or WhatsApp number, email if you give it, study stage and destination, and anything you write yourself. We use them to reply and to arrange the chat and the meeting.

In the matching quiz on the site: we record the quiz steps and some answers (such as the average and the field) with a random session number that carries no name or phone number, to see where visitors stop. We do not know who you are unless you message us.

Once a case is opened: email, academic details, certificates, passport and the financial documents the university or the visa asks for. We use them to prepare your applications with your agreement and to follow your case.

Payments and receipts: name, amount and payment details, to issue receipts and keep the books the law requires.

Marketing messages: sent only to people who agreed to them, and you can stop them at any time by replying «إلغاء» (cancel).

Ad measurement: only if you agree, we send Meta your phone number or email in scrambled (hashed) form, to learn which ad brought you to us.

No law obliges you to give us your data; giving it depends on your own will and consent.

But your name and phone number are needed for us to reply: without them we cannot contact you. Everything else in our forms is optional.

In a case file, the documents a university or the visa asks for are needed to apply: without them the application cannot be submitted or completed.

Cloudflare — hosting and protecting the site (a global network, including the USA).

Supabase — database, sign-in and files (European Union, Frankfurt).

Resend — sending email (USA).

Google Gemini — an AI tool used only by our team to draft internal summaries and message drafts. Nothing from it reaches you without a person reviewing it, and it makes no decision about you (USA).

Meta — ad measurement, only if you agree (USA and Ireland). WhatsApp chats are also subject to WhatsApp's own terms.

Morning (Green Invoice) — payment pages and receipts (Israel).

Twilio — if we send a WhatsApp message from our system rather than from the phone, it passes through Twilio (USA).

The universities, schools and application platforms (such as UCAS) you choose, only as far as the application requires and with your agreement.

Some of these keep data outside Israel. We transfer it only as the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001 allow, and with providers whose terms oblige them to protect it.

We do not sell or rent your data, and we do not share it with anyone for their own marketing.

We keep contact requests, client case files and their documents only for as long as we need them to serve the family and to meet our legal duties.

You may ask us at any time to delete your data or the copies of your documents (such as a passport), and we will, except what the law requires us to keep.

Receipts and payment records are kept for as long as tax law requires.

Visit and quiz records are anonymous, carry no name or phone number, and are used only to understand how the site is used.

You may see the data we hold about you (section 13 of the Law) and ask us to correct or delete it if it is wrong, incomplete, unclear or out of date (section 14). We will also delete your whole file on request, except what the law requires us to keep, such as receipts.

Send your request to admissions@royal-academia.com or on WhatsApp, and we reply within 30 days.

You may withdraw your consent to marketing messages or ad measurement at any time.

You may also complain to the Privacy Protection Authority at the Ministry of Justice.

Many of our students are under 18. We ask a parent or guardian to take part: they consent to the collection and handling of the student's data, and they sign any agreement.

We collect only what the service needs about a minor, and we never publish a minor's name, words or photo without a parent's written consent.

Access to files is limited to you and the people working on your case, and documents sit in private storage that no public link opens. If a serious security incident affects your data, we will tell you and the authorities as the law requires.

The site keeps in your browser your language choice, your filters and quick-form answers so you do not type them twice, a random session number to count visits, and the portal sign-in if you have an account. We use no advertising cookies unless you agree to ad measurement.

We may update this policy; the last-updated date appears at the top of the page. If anything material changes in how we use your data, we will tell you.