How we look after your family's information

The short version: we hold only what we need to teach your child well. Recordings you send us are private to your family, your child's teacher and the school office. We never publish them, never sell anything, never advertise with your child, and we delete them whenever you ask.

1. Who we are

Shajaratun Tayyibah is an online Islamic school teaching Qur'an, Tajweed, Arabic and Islamic Studies to children. The school was founded by, and is run by, Ikram Azom, trading as Shajaratun Tayyibah.

Ikram Azom is the data controller for the information described here — meaning he decides what is collected and what happens to it, and is responsible for looking after it.

You can reach us about anything in this notice at shajaratuntayyibah@gmail.com.

2. What we collect

We do not use analytics, advertising trackers or cookies to follow you around the internet. There are none on this website. We do not ask for payment card details through this site.

3. The recordings — the part that matters most

Recordings are made by you, at home, and normally show you together with your child rather than your child on their own. That is deliberate: it keeps a parent present throughout, and it is what turns the recording into a genuine witness to what your child has done.

Because you usually appear as well, your consent covers your own image and voice alongside your child's. These are still the most sensitive things we hold, so they have their own rules:

• Only a parent or guardian can make and upload one, and only of their own child. Teachers cannot, and we never ask a child to record themselves alone. The system refuses anyone else.
• They are private by default. A recording can only be played by that child's parents, that child's teachers, and the school office. Signed out, or signed in as another family, it cannot be opened at all.
• They are never made public. Not on this website, not on social media, not in advertising, not shared with other families. We will never ask you to allow that.
• You are asked to consent each time, in words shown to you on the screen. We store those exact words alongside your consent, so it is always clear what you agreed to.
• You can withdraw consent and have a recording deleted at any time, without giving a reason and without it affecting your child's place.

4. Our lawful basis

Under UK data protection law we must have a lawful reason for holding information. Ours are:

• Contract — account details and lesson records, because we cannot teach your child without them.
• Consent — recordings from home and the statements that go with them. This is always your choice, and you may withdraw it.
• Legitimate interests — keeping the service secure, and keeping backups so a child's record is not lost.

Because these are children, we treat consent as the parent's or guardian's to give.

5. Who can see it

Inside the school: your child's own teachers, and the school office. No other family can see your child's record, and no teacher can see a child who is not assigned to them.

Outside the school, these companies handle parts of it for us, and only for us:

We do not sell your information to anybody, and we do not share it for advertising. We would only ever hand information to somebody else if the law required us to, or to protect a child from harm.

6. Where it is kept, and for how long

Your family's information is stored on a server in Manchester, England. Written records — accounts, lesson logs, milestones and consents — are also copied to a secure off-site backup each night so that nothing is lost. Recordings themselves are not sent off-site; they stay on the school's own server.

We keep information for as long as your child is enrolled with us, and then:

• Recordings from home — deleted twelve months after your child leaves, or sooner if you ask.
• Lesson records and progress — kept for three years after your child leaves, so we can confirm what they achieved if you ever need it, then deleted.
• Account details — deleted when you close your account.

You do not have to wait. Ask us to delete something and we will.

7. How we protect it

• Passwords are stored scrambled, never as text. Nobody at the school can read your password.
• Every page and every recording travels encrypted between your device and our server.
• Recordings are checked against who is asking for them before a single byte is sent.
• Parents self-registering see nothing at all until the school office links their child to them.
• The assistant on our public pages is an AI. It answers questions about the school and has no access whatsoever to pupil accounts, lesson records or recordings. No artificial intelligence is used to process your child's information.

8. Your rights

You can ask us to:

• Show you everything we hold about you and your child.
• Correct anything that is wrong.
• Delete what we hold, including any or all recordings.
• Give you a copy to take to another school.
• Stop using it in a particular way, or withdraw a consent you gave.

Email shajaratuntayyibah@gmail.com and we will respond within one month, free of charge.

If you are unhappy with how we have handled your information, you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

9. Children

Our pupils are children, so accounts belong to parents and guardians, not to the children themselves. A child never uploads anything. Where the law asks for consent, we ask the parent.

10. Changes

If we change how we handle your information we will update this page and change the date at the top. If the change is significant, we will email you rather than expect you to notice.