Privacy Policy

1. Description of Service

This privacy policy is intended to inform you about the information and data gathered by Al-Madrasatu Ar-Rahmaniyyah ("AMAR," "us," "we") when you use our online Islamic education platform, how we store your information, and to what degree your information may be used.

AMAR takes your privacy seriously. We do not rent, sell, or share your personal information with third parties, except as outlined in this policy. We may update this Privacy Policy from time to time. If you are a registered AMAR user, we will notify you of any material changes by email. Otherwise, please check this page regularly for the latest privacy policy.

AMAR provides you with the opportunity to review, remove, and modify any personal information you have provided. Please contact us directly by email or update your details through your account settings.

2. Data Collection and Use

We only collect the personal data you choose to provide during your registration and use of our Services. As part of the registration process, you need to provide us with:

• Full name
• Email address
• Password (stored securely using industry-standard hashing)
• Billing information for purchases

All data is stored securely on servers located in the United States and European Union through our service providers. You may elect not to provide certain information, but you will then not be able to use AMAR Services or certain features.

Important: Your payment card details are processed directly by Stripe, our payment processor. We do not store your complete card number, CVV, or other sensitive payment data on our servers.

3. Analytics and Usage Data

We may collect and store certain information about your interaction with the AMAR website and services, including:

• Cookies and session data
• IP addresses and general location data
• Browser type and device information
• Operating system
• Entry and exit pages
• Time/date stamps and session duration
• Course progress and video viewing patterns

AMAR uses this information only to improve the quality of our services and products. If you choose to decline cookies via your browser, you may have some limitations in using AMAR services.

4. Third-Party Services

We work with trusted third-party services to operate our Platform. These providers have access to your information only as needed to perform their services:

• Stripe: Payment processing (billing info, transaction data)
• Mux: Video hosting and streaming (viewing behaviour)
• Resend: Email delivery (email address, name)
• Convex: Database and backend (account and usage data)
• Vercel: Website hosting (access logs, IP addresses)

Each third-party service has its own privacy policy governing their handling of your data.

5. Email Communications

When you register to use AMAR services or make a purchase, your email will be added to our mailing list. You will receive:

• Welcome and account information
• Course updates and new content notifications
• Transactional emails (purchase confirmations, password resets)
• Marketing communications (with your consent)

You may choose to opt out of marketing emails at any time using the unsubscribe link in any email or through your account settings. However, you will continue to receive essential transactional and account-related communications.

6. Data Storage and Security

We employ SSL encryption and other security measures to ensure your data is protected and safe. Our security measures include:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Only authorised personnel have access to personal data
• Password Security: Passwords are hashed using industry-standard algorithms
• Regular Reviews: We regularly review and update our security practices

However, please be advised that while we take extra measures to protect your data and the integrity of your information, we cannot guarantee that our security measures will prevent all unauthorised access. Please take proper steps to maintain the security of your account information, including setting a strong password.

7. Data Retention

We retain your personal data for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law. Analytics data is anonymised after 2 years and no longer linked to individual users.

8. Business Transitions

In the event that AMAR goes through a business transition, such as a merger, acquisition by or with another company, including partial or all assets, any personally identifiable information we have on record will likely be transferred with the transition. We will notify you of any such change in ownership or control of your personal information.

9. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update your account information through your profile settings or contact us to correct inaccuracies
• Deletion: Request deletion of your account and personal data
• Data Portability: Request an export of your data in a commonly used format
• Marketing Opt-Out: Unsubscribe from marketing emails at any time
• Cookies: Control cookie preferences through your browser settings

To exercise any of these rights, please contact us at enquiries@rahmaniyyah.com.

10. Children's Privacy

Our Platform welcomes learners of all ages. For users under 18 years of age, we require parental or guardian consent and supervision. Parents and guardians are responsible for managing their child's account and ensuring appropriate use of the Platform.

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe we have collected information from a child under 13 without proper consent, please contact us immediately and we will take steps to delete such information.

11. International Data Transfers

Your data may be processed in countries other than your own, including the United States and European Union, where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or other approved transfer mechanisms.

12. Changes to This Policy

Any changes we may make to our privacy policy in the future will be posted on this page. For material changes, we will notify registered users via email. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

13. Additional Information for EEA/UK Residents

If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on contractual necessity, legitimate interests, consent, and legal obligations
• Right to Object: You can object to processing based on legitimate interests
• Right to Complain: You can lodge a complaint with your local data protection authority

14. Contact Information

If you have any questions or concerns about this policy, or wish to exercise any of your rights, please contact us:

• Email: enquiries@rahmaniyyah.com
• Website: rahmaniyyah.com