Privacy policy

Nurul Qalam Academy is an online Quran and Islamic education institution. We are responsible for this website and for the information you give us through it.

When you create or use an account:

• Your name, email address and mobile number
• Your country, city, time zone and preferred language
• For students: gender, date of birth, current level and learning goals
• For a student under 18: a guardian's name, phone and email
• How you sign in (Google, Facebook, Apple, a mobile number or email) and the name, email and profile photo that service shares with us

When you buy a course or ask for a class:

• Order details: the course, the amount, payment status and dates
• For a manual payment, the transaction details and receipt you send us
• What you tell us in a free trial class request

We never store your card or bank details. Online payments happen on the payment provider's own pages.

• To sign you in and keep your account secure
• To arrange the right course, teacher and class times
• To take and check payments and keep a record of orders
• To contact you about classes, schedules or your account
• To keep a guardian informed about a student under 18

We do not sell your information or share it with anyone for advertising.

We use a few trusted services to run the site. Each receives only what its job needs:

• Google Firebase: to verify your sign-in
• Google, Facebook and Apple: if you choose to sign in with them
• SSLCommerz: to take online payments
• Our hosting and database providers: to run the site and store its data

We may share information with the authorities where the law requires it.

We only use cookies the site needs to work: to keep you signed in and to remember the language you chose. We do not use advertising or tracking cookies.

Whatever you type into the appointment form on the ruqyah support page is saved in your browser (localStorage), so you don't have to type it again after a refresh or a visit to another page. This includes:

• Your name, age, gender, mobile number and area
• For someone under 18, a guardian's name, relationship and number
• What you write about your health and state of mind, including your main concern, any earlier treatment or ruqyah, and your answer to the safety question
• Your preferred date, time and way of talking

The consent ticks are not saved; you give them afresh each time. If you are signed in, the form fills itself from your account's name, age, gender, number, city and guardian details, and each account's answers are kept apart from each other and from answers given while signed out.

This information has no expiry: it stays in that browser until you remove it. Anyone who uses the same device can see these answers. If someone else uses the device, press the form's “Clear form” button when you are done, or clear the browser's site data.

What reaches us: if you are signed in, your answers are saved to our server as a draft on your account while you type, so you can carry on from another device; “Clear form” deletes that draft. When you press “Send”, signed in or not, the whole request comes to us and is given a case ID. Only our administrators can see sent requests, and every time one is opened it is written to an audit log. If you are signed in, you can see a list of your own requests on the “My ruqyah bookings” page. How long sent requests and drafts are kept has not been decided yet; it will be written here once it is.

We keep your information while your account is open. If you ask us to delete your account, we delete it, except for payment records the law requires us to keep.

Everything on the site travels encrypted (HTTPS). We never store passwords ourselves, and only the staff who need your information can see it.

Many of our students are children. A student under 18 needs a guardian's details on their account, and the guardian can ask to see, change or delete the child's information at any time.

• Ask what information we hold about you
• Correct anything that is wrong: most of it you can change yourself on your profile page
• Ask us to delete your account and information

How to ask for deletion is set out on the data deletion page.

If this policy changes, we will update this page and the date at the top. If the change is significant, we will email account holders.