Privacy Policy

Who we are

Nahla Learning provides online Islamic studies courses for children aged 7–15 at nahlalearning.com. We are the data controller for the information described on this page.

You can reach us at nahlalearning@gmail.com.

What we collect

We deliberately collect as little about a child as we can while still running the course.

About your child

• A username — this does not need to be their real name
• Their age group or year group, so we show the right key stage

We do not ask for a child’s full name, date of birth, address, photograph or phone number.

About you, the parent or guardian

• The details you give when you sign up — your name and email address
• Any message you send us

Created as your child learns

Using the course necessarily creates a record of it. This is how progress bars and badges work, and it is stored against the child’s account:

• Which lessons and activities have been opened, and when
• Quiz attempts — the answers given, the score, and how long each attempt took
• Grades, and whether each topic and subject is complete
• Badges earned and the date they were awarded
• Anything typed or uploaded into an activity

Kept by the learning platform

Our site runs on Moodle, an open-source learning platform. Like any log-in system, it keeps some housekeeping data about every account:

• The password, stored encrypted — we cannot see it, and neither can anyone else
• When the account was created, first accessed and last accessed
• An access log of each page viewed, with the date, time and IP address used
• The browser and device type recorded alongside those log entries
• Site preferences, such as language, notification choices and how the pages are displayed
• A record of emails and notifications we have sent to the account
• Messages sent through the site’s messaging, if messaging is used
• A session cookie, so the login lasts from one page to the next

What we do not do

Why we collect it

• To create the account and let your child log back in
• To show progress and award badges, and to let you see how they are getting on
• To keep the site secure and working
• To reply when you contact us

Our legal basis

For running the course we rely on contract — providing the service you signed up for. For keeping the site secure we rely on legitimate interests.

Under UK data protection law a child can only agree to an online service on their own from the age of 13. Accounts here are opened by a parent or guardian, who agrees on the child’s behalf.

Who can see it

• You, the parent or guardian who holds the account
• Us, to run the site and answer support requests

Our hosting provider stores the data on our behalf on servers in the United Kingdom under a data processing agreement. Nobody else has access.

How long we keep it

• Account details and learning progress — kept for as long as the account exists. We do not delete accounts for inactivity, and a child never loses what they have earned by taking a break. The account and everything in it is deleted when you ask us to delete it.
• Access logs — 12 months from the date of each entry, then deleted automatically.
• Messages you send us — 24 months, so we can look back at a previous conversation about your account.
• Backups — kept on a rolling 30-day cycle and then overwritten. A copy of deleted data may therefore persist in a backup for up to 30 days after deletion.

You are in control of the account itself: it stays until you ask us to remove it. See Your rights below.

Your rights

You can ask us to show you what we hold about your child, correct it, delete it, or send it to you in a portable file. Email nahlalearning@gmail.com and we will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

We use a cookie to keep your child logged in and to remember their preferences. These are essential to the site working, so there is no cookie banner to click through — there is nothing optional to refuse.

Keeping children safe

• There are no public comments, no forums and no open chat
• There is no leaderboard and no comparing children against one another
• There is no advertising anywhere on the site
• Accounts are created and controlled by a parent or guardian

Changes to this policy

If we change this policy we will update the date at the top, and for anything significant we will email account holders.