Last Updated: October 18, 2025
Welcome to NeoFab Academy, a premier educational platform specializing in 3D modeling, CNC milling, programming, CAD design, and digital fabrication technologies. This Privacy Policy explains how NeoFab Academy ("we," "our," or "us"), located at 22 Satpaev Street, Almaty, Kazakhstan 050013, collects, uses, discloses, and protects your personal information when you access our website, enroll in our courses, use our services, or interact with our educational platform.
By accessing or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. We are committed to protecting your privacy and ensuring the security of your personal data in compliance with applicable data protection laws, including Kazakhstan's Law on Personal Data and Its Protection. If you do not agree with any part of this policy, please discontinue use of our services immediately.
We collect various types of information to provide and improve our educational services. Personal Identification Information includes your full name, email address, phone number, postal address, date of birth, and government-issued identification numbers when required for certification purposes. We also collect Account Information such as username, password (encrypted), profile picture, educational background, professional experience, and learning preferences.
Educational Data encompasses course enrollment records, progress tracking, quiz and assignment submissions, grades and assessments, certificates earned, project files (3D models, CAD designs, CNC programs), and interaction with instructors and peers. We automatically collect Technical Information including IP address, browser type and version, device information, operating system, referring/exit pages, clickstream data, cookies and similar tracking technologies, and log files. Additionally, we may collect Payment Information (processed securely through third-party payment processors), communication records with our support team, and voluntary survey responses or feedback.
Your information serves multiple essential purposes in delivering our educational services. We use your data to provide educational services by creating and managing your account, enrolling you in courses, tracking your learning progress, evaluating your assignments and projects, issuing certificates and credentials, and facilitating communication between students and instructors. We continuously work to improve our platform by analyzing usage patterns, developing new features, personalizing your learning experience, optimizing course content, and conducting research on educational effectiveness.
For communication purposes, we send course updates and announcements, technical support responses, marketing communications about new courses (with your consent), newsletters about industry trends in 3D modeling and digital fabrication, and important administrative notices. We also use your information to ensure security and compliance by preventing fraud and unauthorized access, enforcing our terms of service, complying with legal obligations, protecting intellectual property rights, and maintaining the safety of our learning community. Additionally, we process payments securely, maintain financial records, and fulfill our contractual obligations to deliver the services you've purchased.
We process your personal data based on several legal grounds. Contractual necessity requires us to process your information to deliver the educational services you've enrolled in, including account creation, course access, progress tracking, and certification. When we rely on consent, such as for marketing communications or optional features, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We also process data to fulfill our legal obligations, including tax compliance, record-keeping requirements, and cooperation with law enforcement when legally required. Our legitimate interests include improving our educational platform, conducting analytics to enhance user experience, preventing fraud and ensuring security, and communicating about services similar to those you've already used. We carefully balance these interests against your rights and freedoms, and you have the right to object to processing based on legitimate interests at any time.
We do not sell your personal information to third parties. However, we may share your information in specific circumstances: With service providers who assist us in operating our platform (cloud hosting services, payment processors, email service providers, analytics platforms, customer support tools), all bound by strict confidentiality agreements. With educational partners including instructors who need access to student work for evaluation, accreditation bodies for certification verification, and partner institutions for joint programs (with your explicit consent).
We may disclose information to legal authorities when required by law, court order, or government regulation, to protect our rights and property, to prevent fraud or security threats, or in connection with legal proceedings. In the event of a business transfer such as merger, acquisition, or sale of assets, your information may be transferred to the successor entity with advance notice. We may also share aggregated or anonymized data that cannot identify you personally for research, marketing, or analytical purposes. Your project work may be shared in our public portfolio or showcase with your explicit permission.
We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Our technical safeguards include industry-standard encryption (SSL/TLS) for data transmission, encrypted storage of sensitive information, secure authentication protocols, regular security audits and penetration testing, firewall protection and intrusion detection systems, and secure backup procedures. We maintain organizational safeguards including access controls limiting employee access to personal data, mandatory security training for all staff, confidentiality agreements with employees and contractors, and incident response procedures for data breaches.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. Account information is retained for the duration of your active account plus 7 years after account closure for legal and regulatory compliance. Educational records including course completion data and certificates are retained permanently to verify credentials. Payment records are kept for 10 years as required by Kazakhstan tax law. Marketing communications data is retained until you unsubscribe or request deletion. Technical logs are typically retained for 12 months. You may request deletion of your data subject to our legal obligations to retain certain records, and we will respond to deletion requests within 30 days.
You have comprehensive rights regarding your personal information. You have the right to access your personal data and obtain a copy of the information we hold about you. The right to rectification allows you to correct inaccurate or incomplete personal information. You can exercise your right to erasure (right to be forgotten) by requesting deletion of your personal data, subject to legal retention requirements. The right to restrict processing enables you to limit how we use your personal data in certain circumstances.
You have the right to data portability, allowing you to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another service provider. The right to object permits you to object to processing based on legitimate interests or for direct marketing purposes. You have the right to withdraw consent at any time for processing based on consent, without affecting prior lawful processing. To exercise these rights, contact us at info@neofabacademy.com or +7 (727) 331 57 70. We will respond to your request within 30 days and may require verification of your identity before processing requests. You also have the right to lodge a complaint with the relevant data protection authority in Kazakhstan if you believe your privacy rights have been violated.
We use cookies and similar tracking technologies to enhance your experience on our platform. Essential cookies are necessary for basic website functionality, authentication, security, and session management. Performance cookies help us understand how visitors interact with our website by collecting anonymous usage statistics, identifying technical issues, and measuring page load times. Functional cookies enable enhanced functionality and personalization, including remembering your preferences, language settings, and course progress.
Targeting/advertising cookies (used only with your consent) track your browsing habits to deliver relevant educational content and measure marketing campaign effectiveness. We also use third-party cookies from services like Google Analytics, payment processors, and video hosting platforms. You can control cookies through your browser settings to block or delete cookies, though this may affect website functionality. Most browsers allow you to refuse cookies or alert you when cookies are being sent. For detailed information about our cookie practices, please see our separate Cookie Policy. By continuing to use our website, you consent to our use of cookies as described in this policy and our Cookie Policy.
Our services are primarily operated from Kazakhstan, but we may transfer your personal information to service providers located in other countries for processing purposes. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities, adequacy decisions confirming equivalent data protection standards, and your explicit consent for specific transfers. We ensure that all international data recipients maintain adequate security measures and comply with applicable data protection laws.
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. We will notify you of material changes via email or prominent notice on our website at least 30 days before the changes take effect. Your continued use of our services after the effective date constitutes acceptance of the revised policy. We encourage you to review this policy regularly to stay informed about how we protect your information. For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: NeoFab Academy, 22 Satpaev Street, Almaty, Kazakhstan 050013, Phone: +7 (727) 331 57 70, Email: info@neofabacademy.com. We are committed to resolving any privacy concerns promptly and transparently.