1. Introduction

This Privacy Policy explains how Areta Aramak Research Services Organization (“Areta Aramak,” “we,” “us,” or “our”), operator of the CROWN platform (crown.a2r-af.com), collects, uses, discloses, and protects information when you use the Platform. CROWN is committed to protecting the privacy of its learners, particularly given its focus on serving public health professionals and learners across low- and middle-income countries.

By using the Platform, you consent to the data practices described in this Policy.

2. Information We Collect

2.1. Information You Provide Directly

Account Registration Data: name, email address, and any additional profile fields requested at registration (e.g., country, professional affiliation, occupation).
Course Activity Data: enrollment records, course progress, quiz/assessment responses, and completion status, used to issue certificates and track learning outcomes.
Communications: information you provide when contacting us directly (e.g., via email or a contact form), including the content of your inquiry.
Newsletter Subscription: if you opt in, your email address is collected and processed through our email service provider (Mailchimp) to send course updates and announcements.

2.2. Information Collected Automatically

Analytics Data: We use Google Analytics (or a similar analytics service) to collect information about how visitors use the Platform, including pages visited, time on site, browser type, device type, approximate location (derived from IP address), and referral source.
Cookies: The Platform uses cookies and similar technologies for session management (e.g., keeping you logged in), remembering preferences, and analytics. See Section 6 below.

2.3. Information We Do Not Collect

We do not knowingly collect sensitive personal data (such as health status, national ID numbers, or financial information) through the Platform. We do not currently process payments for CROWN platform, and no payment card information is collected. However, other services beyond the scope of CROWN provided by Areta Aramak could possess financial procedures.

3. How We Use Your Information

We use collected information to:

Create and manage your account;
Deliver course content and track your learning progress;
Issue and verify certificates of completion;
Send administrative communications (e.g., password resets, course notifications);
Send newsletter communications, where you have opted in, which you may unsubscribe from at any time;
Analyze Platform usage to improve course content, site functionality, and user experience;
Maintain the security and integrity of the Platform;
Comply with legal obligations, where applicable.

4. Legal Basis for Processing

Where applicable law requires a legal basis for processing (for example, for users located in the European Economic Area or United Kingdom), we rely on:

Consent — for newsletter subscriptions and non-essential cookies;
Performance of a contract — for account registration and course delivery, since providing these services requires processing your registration and progress data;
Legitimate interests — for analytics and Platform security, balanced against your privacy rights.

5. How We Share Your Information

We do not sell your personal information. We may share information with:

Service Providers: third-party processors that support Platform operations, currently including Google Analytics (usage analytics) and Mailchimp (email/newsletter delivery). These providers process data according to their own privacy and security policies and may process data outside your country of residence.
Partners and Funders, in aggregated or de-identified form only (e.g., for reporting learner reach and outcomes to donors or academic partners), unless you have separately consented to identified data sharing.
Legal and Compliance Purposes: where required to comply with applicable law, legal process, or to protect the rights, safety, or property of Areta Aramak, CROWN, or its users.

6. Cookies

The Platform uses the following categories of cookies:

Essential Cookies: required for core functionality, such as maintaining your login session (set by WordPress).
Analytics Cookies: used by Google Analytics to understand aggregate usage patterns.

You can control or disable cookies through your browser settings; note that disabling essential cookies may affect your ability to log in or track course progress.

7. Data Retention

We retain account and course activity data for as long as your account remains active, and for a reasonable period thereafter to preserve certificate records and academic history. You may request deletion of your account and associated personal data at any time, subject to Section 9 below.

8. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you;
Request correction of inaccurate or incomplete data;
Request deletion of your account and associated data;
Withdraw consent for newsletter communications or non-essential cookies at any time;
Object to or request restriction of certain processing activities.

To exercise any of these rights, contact us at info@crown.a2r-af.com. We will respond within a reasonable timeframe.

10. International Data Transfers

Because the Platform uses service providers such as Google Analytics and Mailchimp, your information may be processed on servers located outside your country of residence, including in jurisdictions with different data protection standards. By using the Platform, you acknowledge this transfer and processing.

11. Children’s Privacy

The Platform is not directed at, and is not knowingly used to collect personal information from, children under the age of 16. If we become aware that we have inadvertently collected personal information from a child under this age, we will take steps to delete such information.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or Platform features. Material changes will be reflected in the “Last Updated” date above. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Areta Aramak Research Services Organization

CROWN Platform

Pol-e-Sorkh, Kabul, Afghanistan

Email: info@crown.a2r-af.com

Phone: +93(0)784555955