1. Who is responsible
ZN CHOICE LAW HOUSE, Republic of Maldives, TIN 1043350NWT001, operates LEAGAS and is responsible for the personal information described in this notice. Privacy requests may be sent to support@leagas.org or made by telephone at +960 7783630.
We limit collection to what the service needs, use it for stated purposes, apply access and security controls, and do not use checkout information for targeted advertising.
2. Scope
This notice covers the LEAGAS website, checkout, authenticated study application, support communications, payment verification, subscription administration, and related operational records. It does not govern websites or services you visit independently through an external link.
3. Information we collect
| Category | Examples and source |
|---|---|
| Account identity | Name, verified Google email, Google account identifier, and profile details returned by Google sign-in. We do not receive your Google password. |
| Checkout and billing | Verification email, billing name, billing address, optional TIN, selected plan, amount, payment reference, payment slip, verification decision, receipt number, and access dates. |
| Learning activity | Study progress, answers, attempts, scores, timestamps, mock-exam activity, saved preferences, and source interactions needed to provide the product. |
| Support and communications | Messages, error reports, feedback, and records of service emails. |
| Technical and security | Session identifiers, IP address, browser and device information, request timestamps, security events, and diagnostic logs. |
Please upload only the payment slip needed to confirm the transfer. Remove unrelated account balances, transactions, identification numbers, or personal information where your bank allows it.
4. Why we use information
Authenticate your account, verify payment, activate access, deliver learning features, issue records, and provide support.
Prevent misuse and fraud, troubleshoot errors, protect accounts, maintain audit trails, and secure the service.
Maintain financial and tax records, respond to lawful requests, resolve disputes, and establish or defend legal claims.
Use aggregated or limited usage information to understand reliability and improve study features. We do not currently use advertising trackers.
Where consent is required for an optional activity, you may withdraw it prospectively. Core account, payment, and access processing is necessary to perform the service or meet legal duties and cannot always be deleted immediately on request.
6. Processing outside Maldives
Some service providers may process or store information outside Maldives. We assess providers, limit the information supplied, use contractual and technical safeguards where available, and require protection appropriate to the nature of the information. You may ask support@leagas.org for current provider-location information.
8. Retention
| Record | Normal retention |
|---|---|
| Account and learning records | While the account is active and normally up to 24 months after the last activity, unless you request earlier deletion or a longer period is needed for a dispute or legal duty. |
| Uploaded payment slip | Normally up to 12 months after the verification decision, then securely deleted unless it is needed for a payment dispute, fraud investigation, audit, or legal requirement. |
| Transaction, invoice, receipt, and tax records | At least 5 years from the end of the relevant taxable period, or longer where Maldives tax or other law requires. |
| Support and security logs | Normally up to 24 months, with longer retention for an active security investigation, complaint, or legal claim. |
When information is no longer required, it is deleted, de-identified, or isolated until secure deletion is possible. Backup copies may remain for a limited recovery cycle and are not used for ordinary business purposes.
9. Security
We use measures appropriate to the information and risk, including authenticated access, role-based administration, private payment-slip storage outside the public site, limited file types and size, audit records, secure session controls, provider access restrictions, backups, and encrypted transport on the production service. No online service can promise absolute security. See our Data Protection & Security page for more detail.
10. Your choices and requests
You may ask us to confirm whether we hold information about you, provide a copy, correct inaccurate information, delete information no longer needed, restrict or object to a use, or explain a decision. You may also ask about service providers and international processing.
Send the request from your account or verification email to support@leagas.org. We may need to verify identity and may retain information where required for tax, fraud prevention, dispute resolution, security, or another lawful reason. We aim to acknowledge requests within 2 business days and respond within 30 days.
11. Age limitation
LEAGAS is intended for adults preparing for a professional examination and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
12. Security incidents
If a personal-data incident occurs, we will contain and investigate it, preserve necessary evidence, assess the likely impact, take corrective action, and notify affected people or authorities where required by law or where notification is reasonably necessary to reduce a serious risk.
13. Questions, complaints, and changes
Contact support@leagas.org with the subject “Privacy request”. If you are not satisfied with our response, you may use any complaint route available under Maldives law. We may update this notice when providers, features, or legal requirements change. Material changes will be highlighted in the service or sent to the account email where appropriate.