What we collect, and what we do not.

What we collect

Only what is needed to arrange a class and answer you. There is no account to create on this site and nothing is collected before you choose to send it.

When you request a free trial

The trial form asks for four things, of which two are optional:

• Your name — so a coordinator can address you.
• Your email address — where the class confirmation is sent.
• A WhatsApp number (optional) — an alternative way to confirm.
• A preferred time (optional) — free text, so we can match a tutor.

When you message or call us

Opening WhatsApp or tapping the hotline hands you to WhatsApp or to your phone's dialler. We then hold whatever you send in that conversation. WhatsApp's own handling of the message is governed by their privacy policy, not ours.

Automatically, as you browse

The page you landed on, the page that referred you, and any campaign tags already in the link you clicked (utm_source, gclid and similar). This is how we tell which advert produced an enquiry. It carries no name and no contact detail.

What we never collect

We do not collect or store card numbers. Payments are taken by Stripe on hidaya.online — see Payments below. We do not ask for a date of birth, a national ID, or anything about your religion beyond which course you want.

How we use it

• To schedule your trial class and send you the joining link.
• To match you with a tutor — including a female tutor where you ask for one.
• To reply to you on email or WhatsApp about your classes.
• To measure which adverts and pages produce enquiries, in aggregate.

We do not sell personal information, and we do not send marketing to people who only asked for a trial class. If you enrol you will receive messages about your own classes and invoices; you can ask us to stop at any time.

Who else sees it

Your enquiry goes into the Hidaya Online portal, where coordinators and your assigned tutor can see it. Beyond that, these are the only third parties involved:

Stripe

Card payments, taken on hidaya.online. Your card details go to Stripe directly and never reach us or this website.

Google (Tag Manager, Analytics 4, Ads)

Anonymous usage measurement and advert attribution. See Cookies below, including how to refuse them.

Google Meet

Where classes are taught. You join by link; no account is required.

WhatsApp

Only if you choose to open a conversation with us there.

Staff and contractors who handle your information are bound to keep it confidential. We will disclose information if the law requires it, and not otherwise.

Cookies and tracking

This site uses Google Tag Manager to load Google Analytics 4 and Google Ads conversion tracking. These set cookies that recognise a returning browser and let us see that an advert click later became an enquiry.

We run Google Consent Mode v2. If you are in the EEA, the UK or Switzerland, no analytics or advertising cookie is set until you accept — the tags are held in a denied state from the first moment of page load, not switched off afterwards. Everywhere else the default is to allow them, and the banner lets you opt out. Your choice is remembered in this browser and you can change it at any time from the banner.

Refusing cookies does not restrict the site. Every page, the trial form and every contact route work identically either way.

How long we keep it

Enquiries that do not become enrolments are kept for up to 24 months, so that a parent who returns a year later is not starting from nothing. Student records are kept for as long as you are enrolled and for seven years afterwards, which is what tax and accounting rules require of the company. Analytics data expires on Google's own schedule, currently 14 months.

How it is protected

The site is served over HTTPS only. The portal holding student records is password-protected and reachable by a limited number of staff. Records are backed up regularly.

No transmission over the internet can be guaranteed completely secure, and we will not claim otherwise. What we can say is that card details never pass through our systems at all, which removes the most damaging thing there is to lose.

Your rights

You can ask us to:

• Send you a copy of what we hold about you.
• Correct anything that is wrong.
• Delete your details — we will, unless we are legally required to keep them.
• Stop messaging you.

Email admin@hidaya.online and we will respond within 30 days. There is no charge.

Children

Most of our students are children, and we teach from about age four. A parent or guardian books the class, and the information we hold is theirs, not the child's: a first name, and the progress notes their tutor writes. We do not ask children for contact details, and we do not advertise to them.

Changes and contact

We may update this policy. The review date at the top of this page is the one to check, and material changes will be announced on the site.

Questions about this policy, or a request under Your rights, go to admin@hidaya.online or through the contact page.