Privacy Policy

1. Who We Are

Al-Quran Academy provides live, one-to-one online Quran and Arabic tuition to students worldwide. This policy explains what we collect, why we collect it, how we protect it, and the rights you have over it.

The data controller responsible for the personal information described in this policy is:

If you have any questions about how we handle your personal information, you can contact us using the details above or in section 14 below.

2. Information We Collect

Personal Information

When you register for our services or contact us, we may collect:

• Full name and contact details (email, phone/WhatsApp number)
• Country and timezone, so classes can be scheduled correctly
• Educational background and learning preferences
• Communication records, class attendance and course progress
• Billing records — such as your plan, invoices, payment dates and amounts
• Technical information (IP address, device information, browser type)

Automatically Collected Information

We automatically collect certain information when you visit our website, including usage data, cookies, and analytics information to improve our services.

3. Payment Information

Please note carefully how card payments are handled:

• Card payments are processed by a third-party payment provider that is certified to the PCI-DSS security standard.
• Your full card number, expiry date and security code are entered directly with that provider. We never see, receive or store your full card details on our own systems.
• Payments are made monthly. Automatic renewal is optional — your payment method is only stored for future use by the payment provider if you have explicitly opted in to automatic renewal, and you can switch that off at any time.
• We keep only limited billing records — for example the plan you chose, invoice amounts and dates, payment status, and the last four digits and card type where our provider makes these available to us for support purposes.

Full details of how and when you are charged are set out in our Terms of Service.

4. How We Use Your Information

We use your personal information to:

• Provide and improve our online Quran learning services
• Process payments, issue invoices and manage your account and subscription
• Communicate with you about courses, schedules, renewals and updates
• Match you with appropriate teachers and customize your learning experience
• Send educational content and newsletters (with your consent)
• Ensure platform security and prevent fraudulent activities
• Comply with legal obligations and resolve disputes

5. Our Legal Bases for Processing

Where data protection law requires us to identify a legal basis, we rely on the following:

• Performance of a contract: to deliver the classes you have enrolled in, schedule lessons, and take payment for your subscription.
• Legitimate interests: to operate, secure and improve our services, prevent fraud and misuse, and communicate with you about your account.
• Consent: for marketing emails, newsletters and non-essential cookies. You may withdraw consent at any time.
• Legal obligation: to meet accounting, tax and other regulatory requirements.

6. Information Sharing

We do not sell your personal information. We may share your information only in these circumstances:

• With Teachers: We share necessary information with your assigned teachers to facilitate lessons
• Payment Provider: With our PCI-DSS certified payment provider, solely to take payment and manage your subscription
• Service Providers: With trusted providers who help us operate our services, such as hosting, email delivery and video-class platforms, under contracts that require them to protect your data
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfer: In connection with a merger, acquisition, or sale of assets

7. Data Security

We implement appropriate security measures to protect your personal information:

• SSL/TLS encryption for data transmission
• Secure data storage with regular backups
• Card data handled exclusively by a PCI-DSS certified payment provider
• Limited access to personal information on a need-to-know basis
• Regular security reviews and updates
• Staff training on data protection practices

8. How Long We Keep Your Information

We keep personal information only for as long as we need it:

• Account and learning records: for as long as your account is active, and for a reasonable period afterwards in case you return.
• Billing and invoice records: for the period required by applicable accounting and tax law.
• Marketing preferences: until you withdraw your consent or unsubscribe.
• Technical and analytics logs: for a limited period, after which they are deleted or anonymised.

When information is no longer needed, we securely delete or anonymise it.

9. Your Rights

Depending on where you live, you have the right to:

• Access and review your personal information
• Request corrections to inaccurate or incomplete information
• Request deletion of your personal information (the right to erasure)
• Object to or restrict processing of your information
• Withdraw consent for marketing communications at any time
• Request a copy of your data in a portable format (data portability)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law, normally within one month. Exercising your rights is free of charge.

10. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and keep you signed in
• Analyze website usage and improve user experience
• Provide personalized content
• Enable social media features and third-party integrations

Essential cookies are required for the website and your account to work. Non-essential cookies are used only with your consent. You can control cookies through your browser settings, though this may affect website functionality.

11. Children's Privacy

We warmly welcome young learners, and we take their privacy seriously.

• The account holder and payer must be 18 years of age or older.
• A parent or legal guardian must register, provide consent and pay on behalf of any student under 18.
• We do not knowingly create accounts for children directly, and we do not send marketing to children.
• Parents and guardians can review, correct or request deletion of their child's information at any time by contacting us.

If we become aware that we have collected information from a child without appropriate consent, we will delete it promptly.

12. International Data Transfers

We serve students in many countries, so your information may be transferred to and processed in a country other than your own — including by our teachers and service providers. Where information is transferred internationally, we put appropriate safeguards in place, such as standard contractual clauses or transfers to countries recognised as providing an adequate level of protection, so that your information continues to be protected in line with applicable data protection laws.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice. Your continued use of our services after changes constitutes acceptance of the updated policy.