Privacy Policy

1. Data Controller & Organization Details

This website and online educational service are operated by Quran Classes Academy (“we”, “us”, or “our”). For the purposes of the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and relevant international data protection laws, the Data Controller is:

2. Categories of Information We Collect

We collect only the minimum personal data necessary to schedule, conduct, and support online Quran lessons:

• Intake & Registration Data: Parent or student name, email address, WhatsApp telephone number, student age group (Child, Teenager, Adult), and approximate timezone or country of residence.
• Educational Preferences: Target course (Noorani Qaida, Nazirah, Tajweed, Hifz), current reading proficiency, teacher gender preference (male or female certified tutor), and preferred class schedule.
• Communications & Notes: Inquiries submitted via intake forms, WhatsApp placement conversations, lesson attendance logs, and academic progress notes documented by assigned tutors.
• Technical & Log Data: Anonymized server logs, IP addresses (anonymized prior to processing), browser type, and cookie consent preferences stored locally in your browser.

3. Protection of Children’s Privacy (COPPA & GDPR Art. 8)

We provide Quranic instruction to children aged 4 and above. Protecting the privacy and dignity of minor learners is our paramount responsibility:

• Direct Parental Consent: We never knowingly collect personal contact details directly from children under 16 without prior parental or legal guardian consent. All enrollment forms, account creation, and financial agreements must be completed by a parent or guardian.
• Restricted Communications: Tutors are strictly prohibited from engaging in private, unscheduled communications with minor students outside academy-administered digital classrooms.
• Parental Supervision: Parents are welcome and encouraged to observe live virtual classes at any time.

4. Live Class Privacy & Recording Policy

We adhere to the highest Islamic standards of modesty (Haya) and personal boundaries:

• Video Camera Usage Is Fully Optional: Students, particularly sisters and young girls, are never required to turn on their cameras. Lessons can be conducted with audio-only and interactive screen sharing of the Mus’haf or Qaida primer.
• Strict Prohibition on Unconsented Recording: Neither tutors nor administrative staff may record video or audio of live lessons without prior express written consent from the student or guardian.
• Student Recording Rights: Students or parents wishing to record sessions solely for personal recitation revision must obtain mutual agreement from their instructor. Unauthorized distribution on social media is strictly prohibited.

5. Legal Bases for Processing (GDPR / UK DPA)

Under European and UK data protection regulations, we process personal information under the following lawful grounds:

• Performance of Contract (Art. 6(1)(b)): To deliver scheduled classes, assign compatible tutors, process tuition payments, and coordinate lesson timetables.
• Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent fraudulent abuse, and improve the quality of our educational curriculum.
• Explicit Consent (Art. 6(1)(a)): For optional analytics cookies (Google Analytics 4), marketing pixels (Meta Pixel), and publishing verified student testimonials.

6. Third-Party Service Providers & Data Processors

We never sell, rent, or trade your personal data. We disclose information only to vetted service providers acting under strict confidentiality and data protection agreements:

• Hosting & Edge Infrastructure: Cloudflare Pages (global CDN, edge caching, and serverless compute).
• Direct Messaging & Support: WhatsApp / Meta Platforms Ireland Ltd. (for scheduling reminders and admissions).
• Transactional Email: TODO: Email Service Provider Name (e.g. Resend, SendGrid, or Cloudflare MailChannels).
• Analytics & Tags: Google Analytics 4 (Google Ireland Ltd.) and Meta Pixel, activated only after affirmative user consent via our Cookie Banner.

7. International Data Transfers

As a global educational academy serving students in the USA, UK, Canada, Australia, Germany, and the GCC, your data may be processed on secure servers located outside your country of residence. Where transfers occur from the UK or EEA to third countries, we ensure appropriate safeguards are implemented, including Standard Contractual Clauses (SCCs) approved by the European Commission or the UK International Data Transfer Addendum.

8. Data Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Trial Request Inquiries: Retained for 6 months if enrollment does not proceed, then securely deleted.
• Active Student Accounts: Retained for the duration of the student’s enrollment plus 2 years for academic record verification.
• Financial & Invoicing Records: Retained for 6 years to comply with statutory accounting and tax regulations.

9. Your Data Protection Rights

Depending on your jurisdiction (such as under GDPR, UK DPA, or California CCPA), you possess the following rights:

• Right of Access: Request a copy of the personal information we hold about you or your child.
• Right to Rectification: Request correction of inaccurate or incomplete contact or scheduling details.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal information where no statutory retention requirement applies.
• Right to Restrict Processing & Object: Restrict or object to the processing of your data under specific conditions.
• Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Withdraw cookie or marketing consent at any time via our Cookie Preferences modal or by contacting support.

To exercise any of these rights, please contact our privacy desk at privacy@quranclassesacademy.com. We respond to all verified requests within 30 calendar days.

10. Right to Lodge a Complaint

If you reside in the United Kingdom or the European Union and believe our data processing violates applicable law, you have the right to lodge a complaint with your local supervisory authority:

• United Kingdom: Information Commissioner’s Office (ICO) • ico.org.uk
• Germany: Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) oder die zuständige Landesdatenschutzbehörde.
• European Union: Find your national data protection authority via the European Data Protection Board (edpb.europa.eu).