MIDAD Quran Academy provides one-to-one online Quran and Islamic learning services. In this policy, “MIDAD”, “we”, “us”, and “our” refer to MIDAD Quran Academy.

This policy applies when you visit midadquranacademy.com, contact us, request course guidance, book free trial classes, enrol a learner, attend online classes, make a payment, or communicate with our team.

MIDAD is responsible for deciding how the personal information described in this policy is used. Where another organisation processes information for us, it acts under its own terms or as a service provider supporting our work.

The information we collect depends on how you use our website and services.

Information that may be more sensitive

Some information you voluntarily provide may reveal religious beliefs, health information, accessibility needs, or other sensitive circumstances. We ask for this only when relevant to learner support or the service, and use it with explicit consent or another lawful condition where required.

We may use personal information to:

• respond to questions and provide course guidance;
• arrange and deliver three free trial classes;
• assess the learner’s level and recommend a suitable starting point;
• enrol the learner and arrange teachers, times, and lesson links;
• deliver one-to-one classes and maintain continuity between lessons;
• record attendance, corrections, progress, and practice direction;
• send parents or guardians lesson and progress updates;
• manage fees, payment status, refunds, and financial records;
• maintain safeguarding, supervision, quality, and professional standards;
• prevent misuse, fraud, security incidents, and technical problems;
• improve our website, forms, courses, and service experience;
• send service messages and, where permitted, relevant marketing messages;
• meet legal, accounting, regulatory, or dispute-resolution obligations.

The legal basis depends on the purpose and information involved.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Many learners are children, so their privacy requires additional care. Our forms and enrolment process are intended to be completed or supervised by a parent or legal guardian.

• Children should not submit enquiry, trial, enrolment, or payment information without a parent or guardian.
• We aim to collect no more child information than is reasonably needed for guidance, teaching, progress, communication, safety, and administration.
• We do not sell children’s personal information or use it for behavioural advertising.
• We do not require a child to provide unnecessary information as a condition of participating in a class.
• Parents or guardians may ask to review, correct, delete, or stop further collection of their child’s information, subject to legal and safeguarding requirements.
• Parents may join the class link in line with our learning and supervision arrangements.

Children under 13 in the United States

Where the US Children’s Online Privacy Protection Act applies, we will provide the required notice and obtain verifiable parental consent before collecting personal information directly from a child under 13, unless a legal exception applies.

Children in the United Kingdom

Where UK children’s data-protection rules apply, we aim to use clear language, privacy-protective settings, data minimisation, and age-appropriate safeguards.

Live classes and recording

Online lessons may involve real-time audio and video through a video-conferencing service. MIDAD does not routinely record classes. If a specific class ever needs to be recorded, we will explain the reason and obtain any required permission before recording.

Our website may use cookies and similar technologies to keep the site working, remember preferences, understand website performance, protect forms, and measure how visitors use the site.

You can manage non-essential cookies through the cookie banner or browser settings. Blocking some technologies may affect parts of the website.

We do not sell personal information. We may share limited information with people and organisations that need it to provide or protect the service, including:

• authorised teachers, supervisors, and administrative staff;
• website hosting, WordPress, database, backup, and security providers;
• email, WhatsApp, telephone, and communication providers;
• video-conferencing and online-class platforms;
• payment, billing, and accounting providers;
• analytics and technical-service providers;
• professional advisers, such as legal or accounting advisers;
• regulators, courts, law-enforcement bodies, or safeguarding authorities where lawful and necessary;
• a successor organisation if the academy is reorganised or transferred, subject to appropriate protections.

We expect service providers to handle information only for the agreed purpose and to use appropriate confidentiality and security measures.

MIDAD serves families internationally and may use teachers, staff, hosting, communications, payment, or technology providers located in different countries. Personal information may therefore be accessed or processed outside the country where you live.

Where data-protection law requires transfer safeguards, we will use an available lawful mechanism, such as an adequacy regulation or decision, approved contractual terms, or another legally recognised safeguard.

You may contact us to ask for more information about safeguards relevant to your information.

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, and for any additional period required by law, safeguarding duties, financial recordkeeping, dispute resolution, or legal claims.

When deciding how long to keep information, we consider:

• whether the enquiry resulted in a trial or enrolment;
• the duration of the learner’s relationship with MIDAD;
• the need to maintain learning continuity and progress records;
• legal, tax, accounting, safeguarding, and contractual duties;
• complaint, refund, payment, or dispute time limits;
• the sensitivity and risk associated with the information;
• whether the information can be securely deleted or anonymised.

When information is no longer required, we delete it, anonymise it, or restrict access until secure deletion is possible.

We use reasonable administrative, technical, and organisational measures designed to protect personal information against accidental loss, misuse, unauthorised access, alteration, or disclosure.

• role-based and limited access;
• password protection and account-security controls;
• secure hosting, backups, updates, and malware protection;
• confidentiality expectations for teachers and staff;
• review of service providers and access permissions;
• incident response and escalation procedures;
• secure deletion or anonymisation when information is no longer needed.

No internet service can guarantee absolute security. Please protect meeting links and passwords, and contact us promptly if you suspect unauthorised access.

Depending on where you live and the law that applies, you may have some or all of the following rights.

Marketing choices

You can unsubscribe from optional marketing by using the method in the message or contacting us. We may still send necessary service messages about trials, classes, payments, security, or changes affecting an active service.

How to make a request

Contact us using the details below and explain the request. We may ask for information needed to verify identity and authority, especially when a parent or guardian makes a request for a child.

Additional regional rights

Residents of some US states, including California where the relevant law applies to us, may have additional rights. MIDAD does not sell personal information or share it for cross-context behavioural advertising.

Contacting MIDAD

Contact us if you have a privacy question, want to exercise a right, or believe information has been handled incorrectly.

Complaints

We ask that you contact us first so we can review the concern. If you are in the United Kingdom, you may also complain to the Information Commissioner’s Office. People elsewhere may contact the data-protection or consumer-protection authority responsible for their area.

Third-party websites and platforms

Our website or communications may link to other websites, payment services, messaging services, or video platforms. Their handling of information is governed by their own privacy notices.

Changes to this policy

We may update this policy when our services, technology, providers, or legal obligations change. The updated version will be posted here with a revised “Last updated” date. Where a change materially affects how we use information, we will take reasonable steps to bring it to affected families’ attention before the new use begins.