Last updated: 4 August 2026

This policy explains what personal data iSchool collects when you use our self-learning courses website, why we collect it, who we share it with and what rights you have. iSchool is the data controller for the personal data described here.

The terms on which we sell and you use our courses are set out separately in our Terms & Conditions, shown to you when you register.

1. Who we are and how to contact us

iSchool provides online self-learning Islamic courses for children and young people. We are based in Sunderland, United Kingdom.

• Email: [email protected]
• Telephone: 075333 44425
• Address: Sunderland, United Kingdom

If you have a question about your personal data, or you want to exercise any of the rights in section 7, email us at the address above.

2. The personal data we collect

• Account details — first name, last name, email address, telephone number and your password (stored in encoded form, never in plain text).
• Purchase records — which courses you bought, when, the amount paid, the payment method and the payment provider's transaction reference. Not your card number, expiry date or security code, which we never receive.
• Learning activity — the lessons and topics you have opened or completed, your progress through a course, and your quiz, exam and assessment results, including any certificates or awards issued.
• Support correspondence — messages you send us and our replies.
• Technical data — information your browser sends when you visit, and information stored in cookies (see section 8).

3. Children's data and parental consent

We know that most of our learners are children, and we treat their data accordingly.

Accounts for learners under 16 must be created and managed by a parent or legal guardian, who provides the registration details and consents to our handling of the child's data as described here. We do not knowingly collect more information about a child than we need to deliver the course and record progress: we do not ask children for their address, date of birth, photograph or any special category data as part of storefront registration, and we do not build advertising or marketing profiles of children.

A parent or guardian can ask us at any time to show them, correct or erase their child's data by emailing [email protected]. If you believe a child has given us personal data without a parent's involvement, tell us and we will remove it.

4. Why we use your data, and our lawful basis

• To provide the service you bought — creating your account, giving access to courses, saving progress, marking quizzes and issuing certificates. Lawful basis: performance of our contract with you.
• To take payment and keep financial records — processing the transaction and retaining the record. Lawful basis: performance of our contract, and our legal obligation to keep accounting records.
• To support you — answering questions and resolving problems. Lawful basis: performance of our contract, and our legitimate interest in running the service well.
• To keep the site secure — detecting misuse, preventing unauthorised access and protecting other users, particularly children. Lawful basis: our legitimate interest in security and safeguarding.
• To send optional updates about new courses — only if you have asked to receive them. Lawful basis: consent, which you can withdraw at any time.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.

5. Who we share it with

We share personal data only where we need to:

• Worldpay, our payment provider, which processes card payments and refunds.
• Hosting and email providers that operate the infrastructure the site runs on and deliver our transactional emails.
• Professional advisers such as accountants, where required.
• Authorities, where we are legally required to disclose, or where disclosure is necessary to protect the safety of a child or another person.

These providers act on our instructions and are not permitted to use your data for their own purposes. Where data is transferred outside the UK, we rely on UK adequacy regulations or standard contractual clauses.

6. How long we keep it, and closing your account

We keep account and learning data for as long as your account is open. We keep financial and transaction records for six years after the relevant tax year, as UK tax law requires, even after an account is closed.

7. Your rights

Under UK data protection law you have the right to ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• erase your data, where we have no continuing lawful reason to keep it;
• restrict or object to how we use it;
• transfer your data to another provider in a portable format;
• withdraw consent, where we relied on consent.

To exercise any of these, email [email protected]. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.

8. Cookies

We use cookies that are necessary for the site to work — keeping you signed in, remembering the contents of your basket and protecting forms against cross-site request forgery. These are required for the service to function and cannot be switched off within the site.

Where we use any non-essential cookies, such as analytics, we will ask for your consent first. You can also block or delete cookies through your browser settings, though the site may not work correctly if you block the essential ones.

9. Changes to this policy

We may update this policy as the service changes or the law requires. The version published on this page is the version that applies, and the "last updated" date above tells you when it last changed. Where a change is significant we will bring it to your attention rather than relying on you to re-read the page.