Privacy Policy

OnlineMadrassa.pk ("we", "us", "the platform") is a community platform that connects teachers of Quran, Islamic studies, languages and modern subjects with parents, guardians and adult learners worldwide. For the purposes of the EU/UK General Data Protection Regulation (GDPR), we act as the data controller for the account and profile information processed on this platform.

We only collect the information you provide and the minimal data needed to operate the service:

• Account data: name, email address, password (stored only as a secure one-way hash), role (parent/guardian or teacher) and city.
• Teacher profile data: bio, country/city, languages, subjects, hourly rate, availability, qualifications, experience, school of thought, optional photo/video link and optional WhatsApp number.
• Activity data: reviews you write, in-app messages you send, classes you create (teachers), and any reports you submit.
• Payment data: if a teacher upgrades to Featured, payments are handled by Stripe. We never see or store your full card details.
• Technical data: basic request information used for security and rate-limiting (e.g. IP address) and your saved preferences (language, currency) stored in your browser.

• To create and operate your account and display teacher profiles.
• To verify your email address and, where requested, manually verify a teacher's qualifications.
• To enable messaging, reviews, the teacher map and the LMS.
• To process Featured subscription payments via Stripe.
• To investigate reports and keep the community safe.
• To send essential service emails (e.g. email verification). We do not send marketing emails or sell your data.

We process your data on the following lawful bases:

• Consent — you explicitly consent at sign-up to us storing and processing the information you provide. You may withdraw consent at any time by deleting your account.
• Contract — to provide the platform features you request.
• Legitimate interests — to keep the platform secure, prevent fraud and investigate safeguarding reports.

OnlineMadrassa.pk is intended for adults. Accounts for learners are created and managed by parents or guardians, and at sign-up every user confirms they are 18 years or older. We do not knowingly collect or store personal data of anyone under 18. If you believe a child's data has been provided to us, contact us and we will delete it promptly.

We do not sell your personal data. Information is shared only where necessary to run the service:

• Public profile: teacher profile details (name, city, subjects, rates, reviews, badges) are publicly visible by design so students can find teachers.
• Stripe — payment processing for Featured subscriptions.
• Email delivery — our managed email provider sends transactional emails such as verification links.
• OpenStreetMap / Nominatim — used to show teachers on the map and suggest cities.

Importantly, OnlineMadrassa.pk is only a connecting platform. Any lesson, fee or arrangement is made directly between the teacher and the student/parent, and we take no responsibility for those financial transactions.

We keep your data for as long as your account is active. If you delete your account, we remove your profile and personal data, except where we must retain limited records for legal, security or fraud-prevention reasons. Safeguarding reports may be retained to protect the community.

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (you can edit your profile and account at any time).
• Delete your data ("right to be forgotten").
• Restrict or object to certain processing.
• Data portability — request a copy of your data.
• Withdraw consent at any time.

To exercise any of these rights, contact us using the details below.

We apply reasonable technical and organisational measures to protect your data, including hashed passwords, encrypted connections (HTTPS), input sanitisation to guard against cross-site scripting and injection, security response headers, and rate-limiting on sensitive actions. No system is perfectly secure, but we work to keep your information safe.

For any privacy question, data request or complaint, please contact our team:

You also have the right to lodge a complaint with your local data protection authority.