Effective Date: April 4, 2026 | Last Updated: April 4, 2026
Rahman School (“we”, “us”, “our”) is an online Quran and Arabic school based in Cairo, Egypt. We provide live one-to-one online classes to students worldwide, including children.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. It applies to everyone who uses our website (rahmanschool.com), books a class, or communicates with us.
We take data protection seriously. We follow the principles of the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA). Where our students are children, we also follow the Children’s Online Privacy Protection Act (COPPA) and the UK Age Appropriate Design Code.
1. Who We Are
Data Controller: Rahman School
Address: Building no.13, Saqr Korayesh, Sheraton Al Matar, El Nozha, Cairo Governorate 11799, Egypt
Email: info@rahmanschool.com
Phone: +20 102 831 1257
If you have any questions about this policy or your data, contact us at info@rahmanschool.com with the subject line “Privacy Request”.
2. What Data We Collect
2a. Data you give us directly
| Data | When we collect it | Why we need it |
|---|---|---|
| Parent/guardian full name | When you book a trial or sign up | To create your account and contact you about classes |
| Student first name and age | When you book a trial or sign up | To match the student with the right teacher and course level |
| Email address | When you book a trial, sign up, or contact us | To send class links, schedules, progress reports, and respond to your messages |
| Phone number / WhatsApp number | When you book a trial or sign up | To send class reminders and communicate about scheduling |
| Payment information (card details) | When you purchase a class plan | To process your payment |
| Country and time zone | When you sign up | To schedule classes at times that work for you |
| Student’s current Quran level | During the free trial or intake | To create a personal learning plan |
2b. Data we collect automatically
| Data | How we collect it | Why |
|---|---|---|
| IP address and approximate location (country level) | When you visit our website | Website security and analytics |
| Browser type and device | When you visit our website | To make sure the site works properly on your device |
| Pages visited and time spent | Through cookies and Google Analytics | To understand which pages are useful and improve the site |
2c. Data we do NOT collect
- We do not record video or audio from classes unless we have your written permission.
- We do not collect biometric data.
- We do not collect precise GPS location.
- We do not require students to create social media accounts.
- We do not collect data from children directly. All data is provided by the parent or guardian.
3. Children’s Privacy
3a. Parental consent
We do not knowingly collect personal data from children under 13 (USA) or under 13 (UK) without the consent of a parent or legal guardian. When a parent signs up a child for classes, the parent provides all personal information on the child’s behalf.
By signing up your child, you (the parent or guardian) confirm that:
- You consent to us collecting and using the data described in this policy.
- You are the child’s parent or legal guardian.
- The information you provide is accurate.
3b. What data we hold about children
For child students, we hold only:
- First name (we do not require a surname for children)
- Age or age range
- Current Quran/Arabic level
- Class schedule
- Progress notes written by their teacher
We do not hold children’s email addresses, phone numbers, photos, or payment details. All contact and payment is through the parent or guardian.
3c. How we protect children’s data
- Children’s data is stored separately and flagged as requiring additional protection.
- Only the assigned teacher and school administrators can access a child’s learning records.
- We never share, sell, or use children’s data for marketing or advertising.
- We never display children’s names, photos, or testimonials on our website without written parental consent.
- Classes take place on Zoom with waiting rooms enabled. Only the teacher and student (with parent present if desired) are in the session.
3d. Parental rights
As a parent or guardian, you have the right to:
- Review all data we hold about your child.
- Request correction of any inaccurate data.
- Request deletion of your child’s data at any time.
- Withdraw consent for data collection at any time.
To exercise any of these rights, email info@rahmanschool.com with the subject line “Child Data Request”. We will respond within 7 days.
4. How We Use Your Data
We use your data only for the following purposes:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing and managing your classes | Performance of contract |
| Sending class links, schedules, and reminders | Performance of contract |
| Processing payments | Performance of contract |
| Sending progress reports to parents | Performance of contract |
| Responding to your enquiries | Legitimate interest |
| Improving our website and services | Legitimate interest |
| Sending promotional emails (only if you opt in) | Consent |
| Complying with legal obligations | Legal obligation |
We never sell, rent, or trade your personal data to anyone.
5. Who We Share Your Data With
We share your data only with the following parties, and only to the extent necessary:
| Who | What they receive | Why |
|---|---|---|
| Your assigned teacher | Student first name, age, level, schedule | To conduct and prepare for classes |
| Payment processor (Stripe / PayPal) | Payment card details | To process payments securely. We never see or store your full card number. |
| Zoom | Email address (for class links) | To host live video classes |
| Google Analytics | Anonymised browsing data | To understand how visitors use our website |
| Email service provider | Name and email | To send class reminders and communications |
We do not share data with advertisers, data brokers, or social media platforms.
6. Payment Data
All payments are processed through secure third-party payment processors (such as Stripe or PayPal). These processors are PCI-DSS Level 1 certified, which is the highest level of payment security certification.
We do not store your full credit card number, CVV, or bank account details on our servers. We only store a transaction reference number for our records.
7. Cookies
Our website uses cookies. A cookie is a small text file stored on your device when you visit a website.
Cookies we use:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| Session cookie | Essential | Keeps you logged in while you browse | Until you close the browser |
| Google Analytics (_ga, _gid) | Analytics | Helps us understand how visitors use the site | Up to 2 years |
| Cookie consent | Essential | Remembers your cookie preference | 1 year |
You can disable cookies in your browser settings at any time. The website will still work, but some features may not function as expected.
8. How We Protect Your Data
- All data is transmitted over HTTPS (encrypted connection).
- Access to student records is restricted to authorised staff only.
- Payment data is handled entirely by PCI-DSS certified processors.
- We use strong passwords and two-factor authentication on all admin accounts.
- We review our security practices regularly.
No system is 100% secure. If we ever discover a data breach that affects your personal information, we will notify you and the relevant authorities within 72 hours as required by GDPR.
9. How Long We Keep Your Data
| Data type | How long we keep it |
|---|---|
| Active student records | For as long as you are enrolled |
| Records after cancellation | 12 months, then deleted |
| Payment records | 6 years (required by tax and accounting law) |
| Free trial data (if you did not sign up) | 90 days, then deleted |
| Website analytics | 26 months (Google Analytics default) |
You can request early deletion of your data at any time (except where we are legally required to keep it).
10. Your Rights
If you are in the UK or EU (GDPR):
- Right of access: You can ask for a copy of all data we hold about you.
- Right to correction: You can ask us to fix any inaccurate data.
- Right to deletion: You can ask us to delete your data.
- Right to restrict processing: You can ask us to stop using your data in certain ways.
- Right to data portability: You can ask for your data in a machine-readable format.
- Right to object: You can object to us using your data for marketing.
- Right to withdraw consent: You can withdraw consent at any time.
If you are in California, USA (CCPA):
- Right to know: You can ask what data we collect and why.
- Right to delete: You can ask us to delete your data.
- Right to opt out of sale: We do not sell personal data, so this does not apply.
- Right to non-discrimination: We will not treat you differently for exercising your rights.
To exercise any right, email info@rahmanschool.com with the subject line “Privacy Request”. We will respond within 30 days (or 7 days for children’s data requests).
If you are not satisfied with our response, you have the right to complain to:
- UK: Information Commissioner’s Office (ICO) — ico.org.uk
- EU: Your local Data Protection Authority
11. International Data Transfers
Rahman School is based in Egypt. If you are in the UK, EU, or USA, your data is transferred to and stored in Egypt. We protect international transfers by:
- Using encrypted connections (HTTPS/TLS) for all data in transit.
- Restricting access to authorised personnel only.
- Using third-party processors (Stripe, Zoom, Google) who maintain their own GDPR-compliant data processing agreements and standard contractual clauses.
12. Changes to This Policy
We may update this policy from time to time. When we make significant changes, we will:
- Update the “Last Updated” date at the top of this page.
- Notify active students and parents by email.
We encourage you to review this page occasionally.
13. Contact Us
If you have any questions about this Privacy Policy or how we handle your data:
Rahman School
Email: info@rahmanschool.com
Phone: +20 102 831 1257
Address: Building no.13, Saqr Korayesh, Sheraton Al Matar, El Nozha, Cairo Governorate 11799, Egypt