Privacy Policy

This Privacy Policy (the “Policy”) applies to the falcon-academy.com website (the “Website”), operated by Falcon Academy (“we”, “us”), part of the Falcon Security ecosystem.

The processing of personal data is governed by the Law of the Republic of Uzbekistan “On Personal Data” and other applicable legislation.

Learning accounts, courses, payments and the learning process are provided on a separate platform (account.falcon-academy.com and platform.falcon-academy.com), which has its own terms of use and privacy policy. This Policy does not cover the platform; the Website only links to it. The Website itself has no registration, user accounts or payments.

You can use the form on the Website to join an offline course, request corporate training, propose a partnership or ask another question. We use the data you submit only to reply to your request, to enrol you in a course and to prepare a proposal for you.

Each request is forwarded to our team’s service chat using the Telegram Bot API, which means it passes through Telegram’s servers. Telegram is a third-party service that processes data under its own privacy policy, and its servers may be located outside the Republic of Uzbekistan.

By submitting the form, you consent to the processing of the data you provide for the purposes described in this Policy. Please do not include in the comment field any personal data that the form does not ask for.

Depending on the request type you choose, the form asks for:

• your name (your full name when joining a course)
• a phone number or e-mail address
• when joining a course: the chosen track, the branch and, optionally, your experience
• if the student is under 18: the name and phone number of a parent or legal guardian and confirmation of their consent
• for corporate and partnership requests: your organisation; for corporate requests also the number of employees and the programme
• the text of your comment, proposal or question

On the certificate verification page, a visitor enters a certificate ID. The Website uses this ID to query the Falcon Academy platform and displays the matching certificate. For speed, the result is kept in server memory for a few minutes and is not stored anywhere.

Certificates are verifiable by design, so that employers and other interested parties can confirm that a certificate is genuine. If you are a certificate holder and have questions about the verification of your certificate, you can contact us through the channels listed in the Contact section below.

For a valid ID, the following is displayed:

• the certificate holder’s name
• the certificate title, its type and the course, module or learning path it was awarded for
• the date of issue
• the certificate status: valid, revoked or expired
• for a certificate in force, its PDF copy and QR code

When you visit the Website, our servers automatically record technical data: your IP address, the time of the request, the page requested and your browser’s user agent. We use these logs only to keep the Website secure and to troubleshoot problems, and we keep them for no longer than 90 days.

We do not currently use analytics or advertising trackers on the Website, and we do not set tracking cookies. Only technically necessary means may be used for the Website to work; for example, your chosen language is reflected in the page address (URL) rather than stored in a cookie.

If we decide to add analytics in the future, we will update this Policy before enabling it.

We keep personal data only for as long as needed for the purposes described in this Policy, and delete it when the relevant period ends:

• Requests submitted through the form: until the request has been handled and for up to 12 months afterwards. If a contract is concluded as a result, for the term of the contract and the periods required by law.
• Server logs: up to 90 days.

We do not sell personal data and do not share it with third parties for marketing purposes. Data may be disclosed to, or become available to, third parties only in the following cases:

• Telegram: requests from the form pass through Telegram’s servers on their way to our service chat (see the section on requests sent through the form).
• Hosting and content delivery (CDN) providers: the Website may be delivered through such providers, which may process technical data, such as IP addresses, in order to deliver the pages.
• Authorised state bodies: where disclosure is required by the legislation of the Republic of Uzbekistan.

No method of transmitting or storing data over the internet is completely secure, so we cannot guarantee absolute security. We do, however, take organisational and technical measures to protect personal data, including:

• encrypting the connection to the Website with HTTPS
• restricting access to the service chat that receives requests to authorised team members
• regularly updating the software used to run the Website

Under the Law of the Republic of Uzbekistan “On Personal Data”, you have rights in relation to your personal data. To exercise them, contact us through the channels listed in the Contact section below.

We respond within a reasonable period, as a rule within 10 working days of receiving your request. Before acting on a request, we may ask you to confirm your identity.

In particular, you have the right to:

• know whether we hold personal data about you and what that data is
• ask us to correct inaccurate or incomplete data
• ask us to delete your data, except where the law requires us to keep it
• withdraw your consent to processing; this does not affect processing carried out before the withdrawal
• apply to the authorised state body or to a court in accordance with the law

Falcon Academy also teaches cybersecurity to students under 18. We process their personal data only with the consent of a parent or other legal guardian.

If the student is under 18, the course enrolment form asks you to indicate this and to give the name and phone number of a parent or legal guardian. The request is sent by the parent or legal guardian, or with their consent, which is confirmed separately in the form. We contact the parent or legal guardian to confirm their consent.

The study contract for a student under 18 is concluded on the student’s behalf with their parent or legal guardian.

If consent is not confirmed, the request is not processed and its data is deleted. A parent or legal guardian may at any time ask to see, correct or delete their child’s data through the channels listed in the Contact section below.

If you believe that someone under 18 has sent us their data without the consent of a parent or legal guardian, please let us know and we will delete it.

We may update this Policy. The date of the current version is shown at the top of the page.

We will announce material changes on the Website.