Skip to main content

Privacy Policy

Last updated: March 16, 2026

1. Introduction

CSB Academy ("we", "us", or "our") operates the website csbacademy.com and the associated CRM platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us through social media platforms (Facebook, Instagram, LinkedIn).

We are a licensed training institute (License No. 2017-142) registered under the Lebanese Ministry of Education and Higher Education.

2. Information We Collect

Personal Information You Provide

  • Full name (English and Arabic)
  • Phone number and WhatsApp number
  • Email address
  • Date of birth
  • Address and city
  • Educational background and course interests
  • Official documents (National ID, passport) for government registration
  • Payment information for tuition and fees

Information Collected Automatically

  • Browser type and version
  • Pages visited and time spent on our website
  • Referring website or ad campaign (UTM parameters)
  • IP address and approximate geographic location
  • Device type and operating system

Information from Third Parties

  • Facebook and Instagram: public profile information, comments on our posts, ad interactions
  • LinkedIn: profile information when you connect via OAuth
  • WhatsApp: messages you send to our business number

3. How We Use Your Information

  • Process your enrollment and manage your student account
  • Communicate with you about courses, schedules, and payments
  • Send you relevant updates, newsletters, and course recommendations
  • Generate certificates and official academic documents
  • Fulfill government reporting requirements for licensed education
  • Improve our website, services, and marketing effectiveness
  • Manage and respond to social media interactions
  • Run targeted advertising campaigns on Meta platforms (Facebook/Instagram)
  • Analyze campaign performance and lead attribution
  • Provide customer support via WhatsApp and email

4. Meta (Facebook/Instagram) Platform Data

We use Meta Platform APIs to:

  • Publish educational content and course promotions to our Facebook Page and Instagram account
  • Read and respond to comments on our posts
  • Run advertising campaigns and track their effectiveness
  • Send conversion events (Conversions API) to improve ad targeting

We do not sell or share your data with third parties for their own marketing purposes. All data collected through Meta platforms is used solely for CSB Academy's educational services and marketing.

Data sent to Meta via the Conversions API is hashed (SHA-256) before transmission and is used only for ad measurement and optimization in compliance with Meta's data policies.

5. Data Storage and Security

  • All data is stored on secured servers with encrypted connections (HTTPS/TLS)
  • Access to personal data is restricted to authorized staff only (role-based access control)
  • Official documents are stored with UUID-based filenames — original filenames are never exposed
  • All forms are protected against CSRF attacks
  • Passwords are hashed using industry-standard algorithms
  • Database backups are maintained securely

6. Data Sharing

We may share your information with:

  • Lebanese Ministry of Education: for official registration of BT, TS, and BP programs as required by law
  • Certification Bodies (EC-Council, etc.): to register you for exams and issue professional certifications
  • Meta Platforms: hashed data for advertising measurement and optimization
  • Email Service Provider (Brevo/Sendinblue): to deliver transactional and marketing emails
  • WhatsApp/Twilio: to send messages via our business communication channel

We do not sell your personal data to any third party.

7. Cookies and Tracking

Our website may use:

  • Essential cookies: required for the website to function (session management)
  • Meta Pixel: tracks website visits and conversions for advertising optimization (can be disabled)
  • UTM parameters: URL parameters that help us understand which marketing channels are effective

8. Your Rights

You have the right to:

  • Access your personal data we hold
  • Correct any inaccurate information
  • Request deletion of your personal data (subject to legal retention requirements)
  • Opt out of marketing communications at any time
  • Request a copy of your data in a portable format

To exercise any of these rights, contact us at the details below.

9. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our educational services to you
  • Comply with legal obligations (Lebanese education law requires record keeping)
  • Resolve disputes and enforce our agreements

Academic records may be retained indefinitely as required by the Ministry of Education.

10. Children's Privacy

Our BT (Brevet Technique) programs accept students aged 15+. For minors, we require parental consent and store parent/guardian contact information. Parents can access, modify, or delete their child's data by contacting us directly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:

  • Phone: +96171555611
  • WhatsApp: +96171555611
  • Address: Daoud Ammoun Street, Bachoura, Beirut, Lebanon
  • Website: csbacademy.com
Chat with us