Privacy Policy

1. Who we are

Deen Academy ("we", "us", "our") is an online Islamic education provider offering tuition in Arabic Language and Qur'ānic studies. We operate primarily through our website at deenacademy.co.uk.

For the purposes of data protection law, Deen Academy is the data controller responsible for your personal information.

If you have any questions about this policy or how we handle your data, you can reach us at info@deenacademy.co.uk.

2. What information we collect

Information you give us directly

When you contact us, book a lesson, or enrol in a course, we collect:

• Your name and email address
• Your phone number or WhatsApp number (if provided)
• Information about who the lessons are for (yourself or a child)
• Your preferred course, learning level, availability, and time zone
• Any additional information you include in messages or contact forms
• Payment information (processed securely — see below)

Information collected automatically

When you visit our website, we may automatically collect basic technical information such as your browser type, device type, and the pages you visit. This is used only to understand how our site is being used and to improve it. We do not use this information to identify you personally.

Information about children

If you are enrolling a child for lessons, we will collect the child's name, age, and current learning level. This information is provided by the parent or guardian and is used solely for the purpose of delivering appropriate tuition.

3. How we use your information

We use your personal information for the following purposes:

• To respond to your enquiries — when you contact us, we use your information to reply to your message.
• To arrange and deliver lessons — scheduling, confirming, and conducting your tuition sessions.
• To process payments — handling billing for enrolled students.
• To send lesson-related communications — lesson reminders, notes, progress reports, and scheduling updates.
• To improve our service — understanding what is working and what can be better.

We will never use your information for marketing to third parties, sell it to any organisation, or use it for any purpose not listed above without your explicit consent.

4. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

• Contract performance — processing necessary to deliver the lessons you have enrolled in.
• Legitimate interests — responding to enquiries and improving our service.
• Consent — where you have explicitly agreed (for example, by ticking the consent checkbox on our forms). You may withdraw consent at any time.
• Legal obligation — where we are required by law to retain certain records.

5. Sharing your information

We do not sell, rent, or trade your personal information. We share it only in the following limited circumstances:

• With your teacher — your name, level, course, and scheduling preferences are shared with the teacher delivering your lessons.
• Video conferencing providers — lessons are delivered via video call platforms (such as Zoom or Google Meet). These platforms have their own privacy policies.
• Payment processors — payment information is handled by our payment provider and is never stored by us directly.
• Legal requirements — if required by law or a court order, we may disclose information to the relevant authority.

All third parties we work with are required to handle your data securely and in accordance with applicable data protection law.

6. How long we keep your information

We retain your personal information only for as long as necessary:

• Enquiry data (contact form submissions, emails) — retained for 12 months from the date of last contact, unless you become a student.
• Student records — retained for the duration of your enrolment plus 2 years after your last lesson, to support any follow-up queries.
• Payment records — retained for 7 years as required by UK financial regulations.

You may request deletion of your data at any time (see Your Rights below).

7. Your rights

Under UK data protection law, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete information.
• Right to erasure — you can ask us to delete your personal data, subject to our legal obligations.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a commonly used format.
• Right to object — you can object to our use of your data where we rely on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please email us at info@deenacademy.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses only essential cookies necessary for basic website functionality. We do not use tracking cookies, advertising cookies, or third-party analytics that identify you personally.

You can control cookie settings through your browser. Disabling cookies may affect the functionality of certain features on our website.

9. Children's privacy

We provide tuition to children as part of our service, with lessons arranged by parents or guardians. We collect minimal information about children — only what is necessary to deliver appropriate teaching (name, age, and current learning level).

Children's personal data is treated with the highest level of care. It is never shared beyond what is necessary to deliver the lesson, and it is retained only as long as the child remains an active student.

Parents and guardians may request access to, correction of, or deletion of their child's data at any time by contacting us directly.

10. Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. These include secure communication channels, limited access to personal data, and regular review of our data handling practices.

While we take every reasonable precaution, no method of data transmission or storage is completely secure. If you have concerns about the security of your data, please contact us.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

For significant changes that affect how we use your data, we will notify current students directly by email.

12. Contact us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

• Email: info@deenacademy.co.uk
• Contact form: deenacademy.co.uk/contact

We will always respond promptly and treat your privacy with the respect it deserves.