Wherever you live, you have a say over the information Islam Academy holds about you. If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) gives you the rights below; in the United Kingdom, the UK GDPR gives you the same rights; and in Australia, the Privacy Act 1988 and its Australian Privacy Principles give you the right to see and correct your information and to complain. We extend these rights to everyone who uses the site. What we collect and who helps us run the site is set out in our Privacy Policy.
Your rights
- Access. You can ask for a copy of the information we hold about you, and how we use it.
- Rectification. You can ask us to correct information that is wrong or incomplete, such as your name or email address.
- Erasure. You can ask us to delete your account and the information linked to it: your progress, your email choices, your reviews and your sign-up records. We may keep a record that you asked, and anything the law requires us to keep.
- Restriction. You can ask us to pause using your information while a question about it, such as its accuracy, is settled.
- Portability. You can ask for the information you gave us, with your course progress, in a common machine-readable form (JSON or CSV), to keep or to take elsewhere.
- Objection. You can object to any use of your information that rests on our legitimate interests (listed below). You can object to direct marketing at any time, and we will stop. That includes the one-off “share with a friend” email and any news emails. You can also object to your visit or sign-up being used to measure our advertising, and we will stop sending your information to Meta and Google for that purpose.
- Withdraw consent. Where we rely on your consent, such as for news about new courses, you can withdraw it at any time, as easily as you gave it. Withdrawing does not affect what was done before.
- Complain. If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to a data protection authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in the EU or EEA, the supervisory authority in the country where you live or work; in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).
We do not make decisions about you by automated means that have legal or similarly significant effects.
Why we are allowed to use your information
Data protection law asks us to name the lawful basis for each thing we do with your information. These are ours.
To provide the service you signed up for (contract). Creating and running your account, signing you in (including with Google), saving and showing your progress and your place in a narration, and sending the emails the service needs: the welcome email, password-reset links and the notice when your password changes.
With your consent. Emails about new courses and lessons, if you ticked the box when you signed up or subscribed in the site’s footer. The box is never ticked for you.
For our legitimate interests, which we have weighed against your rights, and to which you can object at any time:
- Security and preventing abuse. reCAPTCHA checks on sign-up and password-reset forms, limits on how many accounts or messages can come from one internet address, and records of password-reset requests.
- Understanding how the site is used. Google Analytics and our own simple page-view count, so we can see which courses help people and improve them.
- Measuring our own advertising. The Meta Pixel, Meta’s Conversions API and Google’s advertising tag, together with our first-touch cookie that remembers how you first reached the site, tell us whether our adverts on Facebook, Instagram and Google lead to people signing up and learning. We do not sell your information, and there are no advertisements on the site. For visitors in the European Economic Area, the UK and Switzerland, this relies on your consent, given through the cookie banner, and stays off until you accept; elsewhere it relies on our legitimate interest in measuring our own adverts, and you can refuse it at any time with “Cookie settings” at the foot of every page.
- Growing the site by word of mouth. A single “share Islam Academy with a friend” email the day after you sign up, with an unsubscribe link, and recording who invited whom when someone joins through a friend’s link.
- Answering you and running the community features. Keeping the messages you send through the contact form so we can reply, and showing the course reviews you choose to post, after we have checked them.
International transfers
The companies that help us run Islam Academy process information in several countries, so your information may be handled outside the country where you live. Hostinger hosts the site and its database; SendPulse delivers our emails; Google (Sign in with Google, Analytics, reCAPTCHA and its advertising tag) and Meta (the Pixel and Conversions API) are based in the United States and process information there and elsewhere. Where information about someone in the EU, EEA or UK leaves those areas, the transfer relies on safeguards the law recognises, such as the EU–US Data Privacy Framework and its UK extension where the company is certified, or the European Commission’s standard contractual clauses in that company’s data processing terms.
How long we keep it
Your account, progress, email choices and reviews are kept while your account exists, and deleted when you ask us to delete it. The first-touch cookie in your browser expires after 90 days. Password-reset records and sign-up addresses are kept only as long as they are needed to prevent misuse. Contact messages are kept while we deal with them and as a record of the conversation, and deleted on request. Analytics and advertising information held by Google and Meta is kept under their own retention settings and policies.
How to make a request
Use our contact form, or write to contact.islam.academy@gmail.com. Please send it from the email address on your account, or tell us that address, so we can be sure the request comes from you; if we cannot confirm it, we may ask for something more before acting. Say which right you want to use. There is no charge. We will answer within one month; if a request is unusually complex we may take up to two further months, and we will tell you so within the first month.
You can also act for yourself without writing to us: change your cookie choice with “Cookie settings” at the foot of every page; use the unsubscribe link in any email we send; block or delete cookies in your browser settings; manage how Meta and Google use information for advertising in your Meta ad preferences and Google My Ad Center; install Google’s Analytics opt-out add-on; and, if you sign in with Google, remove Islam Academy’s access from your Google Account.
Who is responsible
Islam Academy (islam.academy) decides how your information is used, and is responsible for it. Contact: contact.islam.academy@gmail.com.