How Midad Uses and Protects Personal Information.

Midad Quran Academy provides one-to-one online Quran learning services. In this Privacy Policy, “Midad”, “we”, “us”, and “our” refer to the person or organisation responsible for deciding how personal information is collected and used.

For data-protection purposes, the responsible person or organisation is the data controller.

Trading name

Midad Quran Academy

Legal owner or entity

[INSERT LEGAL OWNER OR REGISTERED ENTITY NAME]

Correspondence address

[INSERT BUSINESS OR CORRESPONDENCE ADDRESS]

Privacy email

info@midadquranacademy.com

Website

midadquranacademy.com

The information we collect depends on how you contact Midad and which services you use.

• Parent or guardian details: name, email address, telephone or WhatsApp number, country, time zone, and preferred contact method.
• Learner details: name, age, current Quran level, selected course, learning goals, confidence, availability, and relevant learning needs.
• Enquiry and trial information: information submitted through contact, pricing, registration, assessment, or free-trial forms.
• Class information: timetable, attendance, lesson content, corrections, areas requiring revision, progress notes, and next learning priorities.
• Communication records: emails, WhatsApp messages, questions, feedback, complaints, and other correspondence.
• Payment information: payment status, invoice details, transaction references, and information required to manage fees. Payment-card information is normally handled by the relevant payment provider rather than stored directly by Midad.
• Website and technical information: IP address, browser or device information, security logs, form activity, cookie choices, and analytics information where the website or its providers collect it.
• Safety or support information: information provided when a learning, welfare, safeguarding, accessibility, or complaint concern needs to be understood and managed.

Most information is provided directly by a parent, guardian, adult learner, or authorised family member.

• Website enquiry, registration, pricing, and free-trial forms.
• Email, telephone, WhatsApp, or another approved communication channel.
• Information discussed before, during, or after a trial or regular class.
• Teachers or supervisors recording attendance, corrections, progress, and information needed for the next lesson or parent update.
• Website hosting, forms, email, meeting, communication, payment, analytics, security, or other service providers used by Midad.

Where information is obtained from someone other than the person it concerns, Midad will provide or make available the relevant privacy information within the period required by applicable law.

Midad uses personal information to operate and support its online Quran learning services.

• Respond to enquiries and answer questions.
• Understand the learner’s current level, goals, and suitable starting point.
• Arrange and manage free trial classes.
• Recommend a suitable course, schedule, or learning routine.
• Deliver one-to-one Quran classes and provide teaching, correction, revision, and learning support.
• Record attendance, progress, weak areas, and next lesson priorities.
• Keep parents or guardians informed about learning and administration.
• Manage enrolment, timetables, teachers, payments, refunds, complaints, and service records.
• Protect learners, families, teachers, systems, and the website from misuse or security threats.
• Improve courses, forms, communication, teaching systems, and family support.
• Meet legal, accounting, regulatory, safeguarding, or record-keeping responsibilities where applicable.

Many Midad learners are children. Their personal information is handled with additional care.

• A parent or guardian should normally provide enrolment, contact, payment, and scheduling information for a child.
• Children’s information is used for course placement, teaching, correction, progress, scheduling, family communication, safety, and necessary administration.
• Midad does not routinely use children’s information for direct marketing to the child.
• Teachers must not privately message minors outside the approved class and parent-communication process.
• Important communication normally takes place through the parent or guardian.
• Midad does not routinely record classes. Any proposed recording must be explained separately before it takes place.
• A child may hold and exercise their own data-protection rights depending on their age, understanding, and the circumstances.

Midad does not sell or rent personal information for third-party marketing.

Information is shared only where reasonably needed with the following people or organisations:

• Teachers and supervisors who need relevant information to arrange, supervise, or deliver learning.
• Website and technology providers supporting hosting, forms, email, video meetings, messaging, cloud storage, backups, security, and analytics.
• Payment and financial providers used to process fees, refunds, invoices, and transaction records.
• Professional advisers where legal, accounting, technical, security, or operational advice is required.
• Courts, regulators, law enforcement, or other authorised bodies where disclosure is legally required or reasonably necessary to protect rights, safety, or legal interests.
• A future owner or successor if the academy is reorganised, transferred, or sold, subject to appropriate confidentiality and legal requirements.

Midad provides online services to families in the United Kingdom, while some teachers, supervisors, operational workers, or technology providers may work or process information in other countries.

This means personal information may be accessed or processed outside the United Kingdom when needed to provide teaching, communication, administration, hosting, meetings, payments, storage, security, or technical support.

Where applicable law treats this as a restricted international transfer, Midad will assess the transfer and use an appropriate lawful mechanism or safeguard where required. These may include an adequacy arrangement, approved contractual safeguards, or another recognised transfer mechanism.

Midad uses reasonable technical and organisational measures intended to reduce the risk of unauthorised access, loss, misuse, alteration, or disclosure.

• Access is limited to people who need information for an authorised educational, administrative, technical, safety, or legal purpose.
• Teachers and workers are expected to follow academy communication, confidentiality, and professional conduct procedures.
• Passwords, account controls, provider security tools, website updates, and backups are used where appropriate.
• Information collected through forms and communication channels is limited to what is reasonably needed.
• Suspected loss, misuse, or unauthorised access is reviewed and escalated where necessary.

No online service can guarantee complete security. Families should also protect their own email, WhatsApp, meeting links, passwords, and devices.

Midad keeps personal information only for as long as it is reasonably needed for the purpose for which it was collected, including learning continuity, communication, payment, complaints, safety, accounting, legal claims, and legal obligations.

Records are reviewed when an enquiry closes, when classes end, and periodically afterwards.

Enquiries and unsuccessful trials

Normally retained for up to 12 months after the last meaningful contact, unless the family enrols or a longer period is needed to manage a complaint, safety concern, or legal issue.

Learning, attendance and progress records

Retained during active enrolment and normally for up to 24 months after the final class to support continuity, queries, and service review.

Payment and accounting records

Retained for the period required by applicable tax, accounting, contractual, and legal obligations.

Complaints, disputes and legal records

Retained for as long as reasonably required to investigate, respond, protect legal rights, and meet applicable limitation or regulatory requirements.

Safeguarding or serious welfare records

Retention depends on the nature and seriousness of the concern, the child’s welfare, legal responsibilities, and any professional advice received.

Website and security records

Retained according to the relevant security purpose, provider settings, consent choices, and the period reasonably needed to investigate technical issues or misuse.

Midad does not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

Course recommendations, learner placement, teacher matching, class arrangements, and progress decisions involve human review.

If this changes, the Privacy Policy will be updated before the new processing begins, and affected individuals will be given the information and rights required by applicable law.