What we collect, and what we do with it.

Basira is an independent research and training group in Jeddah. For anything on this page, write to contact@researchbasira.com.

What we collect

If you apply. Your name, email address, university and subject, year of study, and your written answers. If we invite you to interview, a phone number and a CV.

If you enrol. Your attendance, the assignments you submit, the marks we give them, your quiz scores, and any files you upload.

If you send feedback. Your message, and your name and email if you choose to give them. Students may send feedback anonymously, in which case no identifier is stored with it.

Why

To assess your application, run the programme, mark your work, and issue and verify your certificate.

Where it is stored

Some of this is held outside Saudi Arabia.

• Netlify — applications and public feedback. Servers in the United States.
• Supabase — the student portal: accounts, submitted files, attendance and marks. Servers in Frankfurt.
• Google — our email and the interview scheduling.

Who can see it

Aroob Gomosani and Haneen Marghalani.

Inside the portal the database enforces this: a student can read their own submissions, attendance and marks and no one else’s. There is one exception, by design — for the peer-review assignment, the person paired with you can read that one submission of yours.

How long we keep it

• Unsuccessful applications — deleted within three months of the cohort starting.
• Student records — three years, so that we can verify a certificate or write a reference if you ask.
• The certificate register — indefinitely. Name, certificate identifier, and what it certifies, so that anyone can check it.
• Feedback — while it is useful.

What you can ask for

A copy of everything we hold about you, correction of anything wrong, or deletion. Email us and we will act within thirty days.

Deletion includes your certificate entry, which means the certificate will no longer verify. We will say so before doing it.

Version 1.0 · July 2026