العربية

Privacy policy.

Effective date: April 23, 2025 · Last updated: November 2026

The American International School of Jeddah (AISJ) is committed to protecting the privacy and personal data of students, families, staff, and visitors to this website. This policy explains what data we collect, why we collect it, how we use it, and the rights you hold over your information.

1. Data we collect

We collect personal data through the following channels:

  • Admissions: name, contact details, nationality, date of birth, academic records, family information.
  • Health services: immunization records, emergency contacts, individual health plans where applicable.
  • Employment: CV, references, background check results, employment contract data.
  • Website: IP address, device type, browser, pages visited and referral source, collected by the analytics and advertising tools described in section 3. Cookies and advertising identifiers are used only if you accept cookies.
  • Inquiry forms: the parent's name, email and phone, the child's name and grade, and any message you write. We use these details to respond to your admissions inquiry, and they are stored in the school's Google Workspace. If you tick the optional advertising box on the form, we also share the inquiry with Google and Meta, with your email and phone hashed (see section 3).
  • Photography and video: images and video captured at school events, in classrooms, and around campus, used on this website and in AISJ marketing materials only with consent obtained through enrollment, employment, or on-site visitor agreements.

2. How we use your data

AISJ uses personal data to:

  • Process and manage student enrollment and ongoing academic records.
  • Communicate with families about their children's education and wellbeing.
  • Manage employment relationships with faculty and staff.
  • Comply with Saudi Ministry of Education reporting requirements.
  • Measure how our website is used and how our online advertising performs, as described in section 3.
  • Respond to inquiries submitted through our contact forms.

3. Cookies and tracking

We keep one functional setting in your browser's local storage to remember your cookie choice. If you arrived from one of our ads, we also keep the ad's tracking parameters (such as utm_source or gclid) in this browser tab's session storage. They leave your browser only inside an inquiry you submit, and they are deleted when you close the tab or select Decline.

If you select Decline, no analytics or advertising tool loads and none sets cookies.

Before you make a choice, Google Tag Manager loads Google's tags in a restricted mode (Google Consent Mode): they set no cookies and use no advertising identifiers, and send Google only basic, cookieless signals (for example that a page was viewed or an inquiry was sent, with your browser's IP address and device details as part of the request) that Google uses to estimate overall results in aggregate. No other provider's tool runs before you accept.

After you select Accept, these tools run fully through Google Tag Manager:

  • Google Analytics (Google): measures how visitors use the site, including pages visited, device, browser, approximate location and referral source. Google signals is turned on, so Google may associate this data with visitors who are signed in to a Google account, for demographic and cross-device reports.
  • Google Ads (Google): measures which of our ads lead to visits and inquiries, and builds audiences for our ads (remarketing).
  • Microsoft Advertising (Microsoft Universal Event Tracking): measures visits and conversions from our Microsoft Bing ads.
  • Snap Pixel (Snap Inc.): measures visits from our Snapchat ads. It also triggers an identity-matching request to Tapad, a third-party data company.
  • Meta Pixel (Meta Platforms): measures visits and enquiries from our Facebook and Instagram ads.

These tools set cookies on this site such as _ga, _gcl_au, _uetsid, _uetvid and _scid, and the providers may set cookies on their own domains. Each provider handles this data under its own privacy policy.

Changing or withdrawing consent: select Cookie settings at the bottom of any page to reopen the cookie banner. Choosing Decline stops these tools from loading, removes the cookies they set on this site, and reloads the page. Cookies that providers set on their own domains can be cleared in your browser settings.

Optional advertising box on inquiry forms: separately from cookies, our inquiry forms have an unticked box. Only if you tick it, we share that inquiry with Google (enhanced conversions) and Meta (Conversions API) so they can tell us which ads lead to inquiries. Your email address and phone number are converted to an irreversible SHA-256 hash before they are sent, together with the inquiry's reference number, the page, any ad-click parameters described above and, for Meta, your browser's user agent. Your child's details and your message are never shared. Not ticking the box does not affect your inquiry.

4. Third-party sharing

AISJ does not sell personal data. We share data only with:

  • Accreditation and school membership bodies, including MSA and CIS, as required for school membership.
  • Technology service providers operating under data processing agreements (Google Workspace, school management systems).
  • Analytics and advertising providers (Google, Microsoft, Meta and Snap, and Tapad through the Snap Pixel), which receive website usage data as described in section 3, and Google and Meta, which receive hashed inquiry details only if you tick the optional advertising box on an inquiry form.
  • Saudi government authorities when legally required.

5. Data retention

  • Student enrollment records are retained for a minimum of 10 years after graduation or departure.
  • Admissions inquiry data for non-enrolled applicants is retained for up to 3 years.
  • Employment records are retained for 7 years after the end of employment.
  • Website analytics and advertising data is kept according to the school's standard practice and each provider's retention settings.

6. Security

Personal data is stored on systems protected by access controls, SSL encryption, and regular security audits. Access to personal data is restricted to authorised personnel with a legitimate operational need.

7. KSA Personal Data Protection Law (PDPL) compliance

AISJ operates in the Kingdom of Saudi Arabia and is subject to the Saudi Personal Data Protection Law (Royal Decree No. M/19 dated 9/2/1443H). We process personal data only with a lawful basis, inform individuals of their rights, and maintain records of processing activities as required by the PDPL.

You have the right under the PDPL to: access your personal data; request correction of inaccurate data; request deletion (subject to legal retention obligations); and file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

8. Contact

Questions about this policy or your personal data should be directed to:
Data Protection contact: dpo@aisj.edu.sa
School address: American International School of Jeddah, Al Mohammadiyah District, PO Box 127328, Jeddah 21352, Kingdom of Saudi Arabia

This policy is reviewed annually. The current version supersedes all previous versions. Material changes will be communicated to enrolled families via the school newsletter.