Privacy Notice

Little Muslims Academy is the data controller for personal information it processes to provide and administer its educational services. This means we decide why and how that information is used. Paddle acts as a separate controller for information it processes as reseller and Merchant of Record.

This notice covers the academy’s website and learning services. Account and child-profile features are not yet active; the descriptions below explain how information will be used when those features become available. We do not claim to collect account or child-profile information through features that are currently disabled.

Parent contact and account information: name, email address, account identifiers and securely managed login credentials, when account services are enabled. We use these to create accounts, communicate about enrolment and provide purchased services, based on contract performance. Security-related processing is based on our legitimate interest in protecting families and the service.

Child learning information: only a first name or chosen display name, age group, enrolments and lesson progress when child profiles are enabled. Parents provide and control this information. We use it to deliver age-appropriate learning and track progress as necessary to perform our service contract with the parent, subject to any additional parental-consent requirements under applicable law. Do not submit unnecessary sensitive information about children.

Support information: your contact details and the information you choose to share in an enquiry, used to respond and resolve problems based on contract performance or our legitimate interest in providing support. The current website contact form validates entries locally but does not send a message to the academy.

Technical information: IP address, browser or device information, request logs and error information may be processed by hosting and technical service providers to deliver the website, prevent abuse and diagnose faults, based on legitimate interests. Any optional analytics or marketing tracking requires consent where applicable. We do not sell personal information or use children’s information for targeted advertising.

Order information: purchase references, purchased items and payment or subscription status may be shared by Paddle to administer purchases, fulfil services and meet record-keeping duties, based on contract performance and legal obligations. Card details are handled by Paddle, not stored by the academy. We use consent for optional marketing where required, and you may withdraw it at any time.

We share only what is necessary with service providers supporting hosting, secure accounts, learning delivery, technical diagnostics and support, subject to appropriate confidentiality and data-protection terms. Staff and educators receive access only as needed for their duties.

Paddle receives and processes purchase information for sales, subscription management, payments, tax compliance and invoicing as Merchant of Record. Its own privacy notice describes that processing. We may also disclose necessary information to professional advisers such as legal and accounting advisers, or authorities where required by law. We do not sell or rent personal data.

Paddle Privacy Notice

Account and child learning data is kept while the account is active and needed to provide learning services. When an account or child profile is deleted, we delete or anonymise information no longer needed, except information that must be retained for legal obligations, disputes or security. Those exceptions last only as long as their purpose or the applicable legal requirement requires.

Support records are retained for the duration of the enquiry and any related complaint or dispute. Technical logs are retained only for the operational or security investigation they support, then deleted or anonymised under the hosting provider’s retention cycle. Transaction and accounting records are retained for the period required by the applicable tax and accounting laws. Backup copies expire according to the relevant provider’s backup cycle and are not used for ordinary ongoing processing. Paddle determines retention for records it controls under its own privacy notice.

Parents manage child profiles and may request correction or deletion. We do not invite children to create independent purchasing accounts. If unnecessary child information is received, we will take steps to delete it or obtain the required parental authorisation.

Depending on your location, you may have rights to access, correct or erase personal data; restrict or object to processing; receive portable data; and withdraw consent without affecting earlier lawful processing. You may complain to your local data-protection authority. Where UK or EEA GDPR applies, we respond to rights requests within one month, subject to lawful extensions notified to you. We may need proportionate identity verification to protect your family’s information. Some data must be retained where law requires it.

We are committed to appropriate technical and organisational measures, including encrypted connections, restricted access, secure credential handling through authentication providers when enabled, and limiting access to children’s information. Providers are selected with regard to their security safeguards. No internet service can guarantee absolute security; do not share passwords or submit payment-card details in enquiries.

The site stores your chosen English or Arabic language in browser local storage to remember that preference. Hosting, security services and Paddle checkout may use essential cookies or similar technologies needed to operate the site and complete a purchase. Paddle explains its own technologies in its privacy notice.

The academy does not currently enable optional advertising or analytics cookies. If introduced, optional cookies will be explained and consent obtained before use where required. You can clear local storage and manage cookies in your browser; blocking essential technologies may affect checkout or account access. Where a consent control is provided, you can change optional preferences there.

Hosting and other service providers, including Paddle, may process information outside your country. Where UK or EEA data-protection law applies to a transfer, we require appropriate safeguards, such as an adequacy decision or approved Standard Contractual Clauses and any necessary additional measures. Paddle describes its own transfer arrangements in its privacy notice.

For information held by Paddle about a purchase, use Paddle’s privacy contact options in its Privacy Notice or purchase support at paddle.net. For academy-specific privacy questions, consult the Contact page for available contact options. The website enquiry form currently does not deliver messages, so it must not be used to submit a rights request or sensitive information. A direct academy privacy contact must be made available before account and child-profile collection is enabled.

We will update this notice as services or processing change, show the updated date, and provide any additional notice required by law.

Paddle privacy contacts