Privacy Policy

1. Who We Are We are Mishkat Online Academy (referred to as "we", "us", or "our"). We provide online one-to-one Quran classes. If you have any questions about this Privacy Policy or how we handle your data, you can contact us at mishkaatonlineacademy@gmail.com.

2. Information We Collect We collect personal data to provide our educational services. This includes:

Student & Parent Names: To identify students and address communication. Age: Specifically to ensure appropriate course assignment and to comply with children's privacy regulations. Country & Time Zone: To schedule classes appropriately across global time zones. Contact Details: WhatsApp number and email address to coordinate lessons, send updates, and reply to enquiries. Course Preferences: Preferred timing and courses of interest (e.g. Tajweed, Hifz, Nazra). Communications: Message contents sent via our contact forms or booking requests. Technical Data: Basic browser analytics, IP address, and technical information collected when visiting our website. No Payment Card Data: We do not collect or store credit/debit card information on this website. All financial transactions and fee payments are handled directly and securely through external services.

3. How We Use Your Information We process personal data for the following purposes:

To schedule, coordinate, and deliver our online classes. To communicate booking confirmations, schedules, and progress updates. To respond to user enquiries, feedback, and support requests. To maintain compliance with safeguarding and safety standards. To analyze website usage and improve our platform functionality. 4. Legal Basis for Processing (UK & EU GDPR) Under the UK and EU General Data Protection Regulation (GDPR), we process your data based on:

Consent: Where you have given explicit consent, particularly for free trial bookings or contact requests. Contractual Necessity: Where processing is required to perform or enter into an agreement with you. Legitimate Interests: To run our academy safely, manage student progress, and ensure efficient coordination. 5. Children's Privacy & Safeguarding Because we teach children, we maintain the highest standards of privacy and safety:

Parental Consent Required: Bookings for students under the age of 18 must be submitted by a parent or legal guardian. We do not knowingly collect personal data from children without parental consent. Data Minimization: We only collect minimal information (such as name and age) necessary to teach and schedule the child's classes. Parental Control: Parents and guardians have the right to review their child's personal data, request corrections, or instruct us to delete it at any time. 6. How We Share Your Information We protect your personal data. We do not sell, rent, or trade your data. We only share information with:

Our Teachers: Shared only to the extent necessary to deliver the lessons. Service Providers: Secure platform providers (such as hosting servers, email delivery services, and WhatsApp messaging APIs) that enable our academy to function. Legal Authorities: Only when required by law or to ensure the safeguarding and safety of our students. 7. International Data Transfers As an international academy serving students globally, your information may be transferred to or stored on servers outside of the UK or European Economic Area (EEA). We use appropriate safeguards, including encryption, to ensure your data remains protected.

8. Data Retention We retain your personal data only as long as necessary to fulfill the educational services agreed upon or to comply with legal, accounting, or safeguarding requirements.

9. Your Rights If you are in the UK or the European Union, you have the following rights under GDPR:

The right to access and receive a copy of your personal data. The right to rectify incorrect or incomplete information. The right to request the erasure of your data ("right to be forgotten"). The right to restrict or object to the processing of your data. The right to data portability. The right to withdraw consent at any time. To exercise any of these rights, please contact us at mishkaatonlineacademy@gmail.com.

10. Security We implement standard technical and organizational security measures, including SSL encryption, to safeguard your personal data from unauthorized access, loss, or alteration.

11. Third-Party Links Our website may contain links to external sites (such as WhatsApp). We do not control these third-party platforms and are not responsible for their privacy policies.

12. Changes to This Policy We may update this Privacy Policy periodically. We will post any changes on this page and update the "Last updated" date above.

13. Contact Us If you have questions, feedback, or data privacy requests, you can email us at mishkaatonlineacademy@gmail.com.