Privacy policy
Last updated: 5 November 2026
This policy explains what personal data Second Draft collects, why, and what you can ask us to do with it. We follow the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
What we collect
- The student's name, school, course and application deadline
- A parent or guardian's name, where the student is under 18
- WhatsApp number and email address
- Drafts of the personal statement, and the messages and files you send us
- Confirmation that payment has been received. We never collect card details.
Why we use it
Only to deliver the service you asked for: to review your drafts, contact you about them, arrange payment and keep basic business records. We do not use your data for advertising, and we never sell or share it for marketing.
Students under 18
If the student is under 18, a parent or guardian must complete or approve the enquiry form and agree the service and payment.
Services that process your data for us
- Netlify, which hosts this website and receives the enquiry form
- Zoho Mail, for email
- WhatsApp, for messages
- AI tools our editors may use to organise feedback. We use these only under settings that do not allow your content to be used to train AI models, and AI never writes any part of your statement.
How long we keep it
We delete drafts, feedback and messages within 12 months of the end of the admissions cycle you applied in. We keep payment records for as long as UAE law requires.
Your statement stays private
We never reuse, publish or share your statement. We will only quote your feedback or name you in a testimonial with your written permission.
Your rights
You can ask us to show you the data we hold, correct it or delete it, and you can withdraw your consent at any time. Email hello@seconddraft.ae and we will respond within 30 days.