Privacy Policy

Privacy Policy – Hifz.co.uk | How We Protect Your Data
Privacy Policy

Your Privacy Matters to Us — Here’s Exactly How We Protect It.

At Hifz.co.uk, we believe every family trusting us with their child’s Quran education deserves to know precisely what happens with their personal information. This policy tells you everything — plainly, honestly, without legal jargon.

📅 Last updated: January 2025 🇬🇧 UK GDPR Compliant 🔒 Data Protection Act 2018 👶 Children’s Data Protected

Who We Are

Hifz.co.uk is an online Quran Hifz academy based in the United Kingdom, providing one-to-one Online Quran Hifz Courses, Tajweed Classes, and Quran memorisation programmes for students across the UK, USA, Canada, and Australia.

For the purposes of UK data protection law, Hifz.co.uk is the data controller — meaning we decide how and why your personal data is processed.

Data Controller: Hifz.co.uk

Website: https://hifz.co.uk

Email: [email protected]

WhatsApp: Message us on WhatsApp

What Personal Data We Collect

We collect only the minimum information needed to match you with the right tutor and deliver our Online Hifz Course effectively. We do not collect unnecessary data.

  • Full name — of the parent or adult student making an enquiry
  • Email address — to send lesson confirmations, progress reports, and course updates
  • WhatsApp number — for lesson scheduling, tutor communication, and support
  • Student’s name and age — to assign the most suitable Hifz tutor
  • Current Quran level — to personalise the memorisation plan from day one
  • Country and time zone — to arrange lessons across UK, USA, Canada, and Australian time zones
  • Gender preference for tutor — to assign a male or female Hafiz/Hafiza as preferred
  • Lesson progress notes — pages memorised, revision records, Tajweed correction notes
  • Technical data — basic browser/device type collected automatically when you visit our website

We do not collect payment card details directly — any payments are processed through secure third-party payment providers.

How We Collect Your Data

We collect personal data through the following channels:

  • WhatsApp enquiries — when you message us to ask about our Online Quran Hifz Classes or book a free trial lesson
  • Email contact — when you email us at [email protected]
  • Website contact or booking forms — if you submit a form on our website
  • Lesson delivery — progress notes collected by your tutor during sessions
  • Cookies and analytics — basic technical data collected automatically when you visit hifz.co.uk (see Section 8)

Why We Collect Your Data

We collect personal data for the following clear, specific purposes — and no others:

  • To respond to your enquiry about our Online Hifz Course or Tajweed Classes
  • To match you or your child with the most suitable certified Hifz tutor
  • To schedule, confirm, and manage your online Quran lessons
  • To send weekly Hifz progress reports to parents and students
  • To personalise your memorisation plan and track progress over time
  • To send important service communications (lesson changes, tutor updates, policy updates)
  • To comply with our legal obligations under UK law
  • To improve our Online Quran Hifz Classes through anonymised usage analysis

We do not use your data for advertising, profiling, or automated decision-making that significantly affects you.

How We Use Your Data

Your data is used only to provide and improve our Online Quran Hifz Classes. Specifically:

  • Your contact details are used by our team to schedule lessons and send progress reports — and by no one else
  • Your student’s Quran level and progress notes are shared with their assigned tutor only
  • Your email address may be used to send service-related updates — never unsolicited marketing without your consent
  • Your WhatsApp number is used solely for lesson scheduling and tutor communication
  • Anonymised, aggregated data (never personally identifiable) may be used to understand how students progress and improve our curriculum

Third Parties — Who We Share Data With

We never sell, rent, or trade your personal data. Full stop. The only third parties who may access your data are trusted service providers who help us operate — and they are contractually bound to protect it.

  • WhatsApp (Meta Platforms) — used for lesson communication; subject to Meta’s own privacy policy and terms
  • Google (Gmail / Google Workspace) — used for email communication and data storage; Google is GDPR-compliant
  • Video conferencing tools (such as Zoom or Google Meet) — used to deliver online Quran Hifz lessons; subject to their own privacy policies
  • Payment processors — if applicable, payments are handled by secure, PCI-DSS compliant providers; we never see or store full card details
  • Website analytics providers — anonymised traffic data only; no personally identifiable information is shared

We may also disclose data where required by UK law, a court order, or to protect the safety of a child — in which case we act in accordance with our legal obligations and, where possible, notify you first.

Cookies & Website Tracking

Our website uses cookies — small text files stored on your device — to make the site function correctly and to understand how visitors use it. We use only the categories of cookies described below.

You can control cookies at any time through your browser settings. Note that disabling essential cookies may affect how our website functions. For more on managing cookies, visit aboutcookies.org.

Children’s Privacy — Our Highest Priority

A significant number of our students are children. We take the protection of children’s personal data with the utmost seriousness, and we go beyond basic legal requirements in how we handle it.

  • We collect only the minimum data necessary for a child’s lessons — name, age, current Quran level, and lesson progress notes
  • A child’s data is shared with their assigned tutor only — never with third parties for commercial purposes
  • We do not market to children or use children’s data for profiling or advertising
  • All enquiries and enrolments for children under 16 must be made by a parent or legal guardian
  • Parents may request access to, correction of, or deletion of their child’s data at any time by emailing us
  • Our tutors are instructed never to contact students under 18 outside of scheduled lesson channels without parental awareness

If you believe we have inadvertently collected data from a child without appropriate parental consent, please contact us immediately at [email protected] and we will delete it promptly.

Data Storage & Security

We take reasonable and appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration.

  • All email communication is handled through Google’s secure Gmail infrastructure, which uses TLS encryption in transit
  • WhatsApp messages are end-to-end encrypted by default
  • Student progress records are stored in password-protected, access-controlled systems accessible only to authorised staff and the assigned tutor
  • We do not store full payment card details on our own systems
  • Access to student data is granted on a need-to-know basis only

No method of electronic transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. In the unlikely event of a data breach affecting your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by UK GDPR.

How Long We Keep Your Data

We keep your personal data only for as long as is necessary for the purposes it was collected, or as required by law. Our standard retention periods are:

  • Active student records — kept for the full duration of enrolment, plus 2 years after the last lesson
  • Enquiry records (non-enrolled) — kept for 12 months from the date of last contact, then securely deleted
  • Payment records — kept for 7 years to comply with UK tax and accounting obligations (HMRC requirement)
  • Email correspondence — kept for 3 years, then reviewed and deleted unless legally required to retain
  • Website analytics data — anonymised and aggregated; retained for up to 26 months

When data is no longer needed, it is securely deleted or anonymised. You can request early deletion at any time (see Section 12 — Your Rights).

Your Rights Under UK GDPR

Under the UK General Data Protection Regulation and the Data Protection Act 2018, you have the following rights regarding your personal data. These rights apply to you and, where relevant, to data held about your child.

📋 Right to Access

Request a copy of all personal data we hold about you, free of charge, within 30 days.

✏️ Right to Rectification

Ask us to correct any inaccurate or incomplete data we hold about you or your child.

🗑️ Right to Erasure

Request deletion of your personal data where there is no compelling reason for us to keep it.

⏸️ Right to Restriction

Ask us to pause processing your data while a dispute or objection is being resolved.

📦 Right to Portability

Receive your data in a structured, machine-readable format to transfer to another service.

🚫 Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

🤖 Automated Decisions

Not be subject to solely automated decisions that significantly affect you without human review.

↩️ Withdraw Consent

Withdraw consent for optional processing (e.g., marketing) at any time without penalty.

To exercise any of these rights, email [email protected] with the subject line stating your request (e.g., “Data Access Request” or “Data Deletion Request”). We will respond within 30 days. We do not charge a fee for reasonable requests.

International Data Transfers

Hifz.co.uk serves students across the UK, USA, Canada, and Australia. As a result, some personal data may be accessed by tutors or team members located outside the UK.

Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

  • Using service providers (Google, WhatsApp/Meta) who maintain Standard Contractual Clauses or equivalent protections under UK GDPR
  • Transferring data to countries with UK adequacy decisions where applicable
  • Ensuring tutors in other countries handle student data under confidentiality agreements consistent with this policy

If you have questions about international data transfers affecting your personal data, email us at [email protected].

Changes to This Privacy Policy

We review and update this Privacy Policy periodically to reflect changes in our services, legal obligations, or data processing practices. The date at the top of this page always shows when it was last updated.

If we make significant changes that affect how we handle your personal data, we will notify you directly by email before the changes take effect. For minor updates, we will update this page and revise the date accordingly.

We encourage you to review this policy occasionally to stay informed about how we protect your information.

How to Contact Us — and How to Complain

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how we have handled your personal data, please contact us directly:

Email: [email protected] — please include “Privacy” in the subject line

WhatsApp: Message us directly on WhatsApp

Response time: We aim to respond to all privacy-related requests within 72 hours and resolve them fully within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

ICO Website: ico.org.uk

ICO Helpline: 0303 123 1113

ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We always prefer to resolve concerns directly first — please give us the chance to put things right before escalating to the ICO.

Privacy FAQ — Quick Answers

What personal data does Hifz.co.uk collect?

We collect your name, email, WhatsApp number, the student’s age and Quran level, and your country and time zone — only what’s needed to deliver lessons and match you with the right tutor.

Does Hifz.co.uk sell my personal data?

No. We never sell, rent, or trade your personal data to any third party for commercial purposes. Your data is used solely to deliver your Online Hifz Course and communicate about lessons.

Is my child’s data safe?

Yes. We collect only the minimum data necessary for lessons, share it only with your child’s assigned tutor, never use it for advertising, and handle it in full compliance with UK GDPR and the Data Protection Act 2018.

How do I request deletion of my data?

Email [email protected] with the subject line “Data Deletion Request”. We will confirm within 72 hours and complete deletion within 30 days.

Do you use cookies on your website?

Yes — essential cookies for site function, and optional analytics cookies (anonymised) to understand how visitors use our site. You can manage cookie preferences via your browser settings at any time.

Can I withdraw my consent for marketing emails?

Yes, at any time. Every marketing email includes an unsubscribe link, or you can email us directly at [email protected] and we will remove you immediately.

Questions About Your Privacy? We’re Here.

Our team responds personally to every privacy-related question. No automated replies — just a real answer from the people who run Hifz.co.uk.

Or start your Quran Hifz journey — free trial lesson, no commitment required.