Privacy Policy

Introduction

Minhaj Academy (“we,” “our,” or “us”) is committed to protecting the personal information of every family who places trust in us. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you hold over your data. By accessing or using our website and services, you agree to the practices described in this policy. If you do not agree, please do not use our platform.

Who We Are

Minhaj Academy is an online Islamic education platform offering live, small-group classes in Quran, Arabic Language, and Islamic Studies for Muslim children aged 5 to 18. Our services are available to families in the United Kingdom, United States, Canada, Australia, and Ireland. For any data-related queries, please contact us at: privacy@minhaj.kids

Information We Collect

We collect personal information in the following categories:

Account and Identity Information

• Parent or guardian full name
• Email address and password
• Phone number
• Child's name, age, and learning level

Payment Information

• Billing name and address
• Payment card details (processed securely through our third-party payment provider; we do not store full card numbers on our servers)

Technical and Usage Data

• IP address and browser type
• Pages visited and session duration
• Device type and operating system
• Cookies and similar tracking technologies (see Section 7)

Communications

• Messages sent to our support team
• Feedback, reviews, or survey responses you provide

How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account
• To enrol your child in classes and deliver our educational services
• To process payments and send receipts
• To communicate with you about your account, bookings, and class updates
• To send service-related notifications (class reminders, schedule changes)
• To respond to your enquiries and provide customer support
• To improve our platform, content, and user experience
• To comply with our legal and regulatory obligations
• To protect the safety of children using our platform in line with our safeguarding policy

We do not use your personal information to make automated decisions that significantly affect you.

Legal Basis for Processing (UK and EU Users)

For users in the United Kingdom and European Economic Area, we process your personal data on the following legal grounds:

• Contractual necessity — to deliver the education services you have signed up for
• Legitimate interests — to improve our platform and communicate relevant updates
• Legal obligation — to comply with applicable laws including safeguarding requirements
• Consent — where you have explicitly agreed, such as for marketing emails

You may withdraw consent at any time by contacting us or updating your communication preferences.

Payment Information

All payment transactions are processed through a certified third-party payment processor. We do not store your full credit or debit card number on our servers. Your payment data is encrypted and handled in accordance with PCI-DSS standards. Your billing address and transaction history are retained for tax and legal compliance purposes.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform. The types of cookies we use include:

• Essential Cookies — required for the platform to function (login sessions, account access). These cannot be disabled.
• Analytics Cookies — help us understand how visitors use our site so we can improve it (for example, Google Analytics). These are only set with your consent.
• Preference Cookies — remember your settings and preferences across visits.

You can manage or withdraw cookie consent at any time through the cookie settings banner on our website or through your browser settings. Disabling non-essential cookies will not prevent you from using our core services.

How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

• Service Providers — trusted third-party companies who assist us in operating our platform, processing payments, sending emails, or analysing usage. These providers are contractually bound to protect your data and use it only for the services they provide to us.
• Tutors — our teachers receive only the information necessary to deliver classes to your child, such as your child's name and learning level. Tutors do not receive your payment or contact details.
• Legal Requirements — we may disclose your information if required by law, court order, or governmental authority, or where necessary to protect the safety of children or others.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you prior to such a transfer taking effect.

Children's Privacy and Safeguarding

The safety and privacy of children is our highest priority. Our platform is designed for use by parents and guardians on behalf of their children. We do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent.

Our safeguarding measures include:

• All classes are conducted in a supervised, structured environment
• Tutors are vetted and trained in child safeguarding procedures
• Session recordings may be retained for quality assurance and safeguarding review purposes
• Any safeguarding concerns are reported to the relevant authorities in accordance with applicable law

If you believe your child's information has been collected without your consent, please contact us immediately at privacy@minhaj.kids.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services.

• Upon account deletion, your personal data is removed from our active systems within 90 days, unless we are required by law to retain it longer
• Payment records and transaction history are retained for a minimum of 7 years for tax and legal compliance
• Safeguarding-related records may be retained for longer periods in line with applicable child protection regulations

Data Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures, including:

• Encrypted data transmission (SSL/TLS)
• Secure password storage using industry-standard hashing
• Access controls limiting data to authorised personnel only
• Regular security assessments of our platform

No online service can guarantee absolute security. If you become aware of any security vulnerability or breach, please notify us immediately at privacy@minhaj.kids.

Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to correct inaccurate or incomplete information
• Right to erasure — to request deletion of your personal data, subject to legal obligations
• Right to restrict processing — to limit how we use your data in certain circumstances
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — at any time, where processing is based on your consent

To exercise any of these rights, please contact us at privacy@minhaj.kids. We will respond within 30 days.

If you are in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you may contact your national data protection authority.

International Data Transfers

Minhaj Academy serves families across multiple countries. If your data is transferred outside your country of residence, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the relevant regulatory authority.

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will notify you by email or by displaying a prominent notice on our website. The “Effective Date” at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us:

Minhaj Academy
Email: privacy@minhaj.kids
Website: www.minhaj.kids