01
Who we are
NoorQuran teaches the Quran and Islamic learning one to one, online, to families anywhere in the world. It is strictly not-for-profit and held as a waqf, and its registration as a UK trust is underway.
We decide how the information on this page is used, so under UK data protection law, the UK General Data Protection Regulation and the Data Protection Act 2018, we are responsible for it. Questions about it come to contact@thenoorquran.com.
02
What we hold
We hold only what teaching, safeguarding and running your account need.
- Families and learners
- Name, age, country, contact details and programme, and which parent or guardian holds a learner’s account.
- Classes
- Video and audio recordings, attendance, and the Scholar’s teaching notes; transcripts too, once we start transcribing Classes.
- Progress
- How a learner’s reading, memorisation, attention and engagement are coming along.
- Messages
- When messaging between a family and a Scholar arrives, the messages, which will be checked for safeguarding concerns and for contact details being shared.
- Safeguarding
- Concerns raised, the decisions made about them, and any referral to an authority. We treat these as the most sensitive information we hold.
- Scholars
- Identity documents, qualifications, references, criminal record checks and training records.
- Payments
- We never hold your card details. They go straight to our payment provider.
03
Why we use it
The law asks us to name the reason, or lawful basis, for each use.
- Teaching, booking and running your account
- Our contract with you, or our legitimate interests where a learner’s place is funded by donations.
- Recording Classes, and screening them once we do
- Our legitimate interests, and the substantial public interest of keeping learners safe for anything sensitive a recording reveals.
- Keeping safeguarding records
- The substantial public interest of keeping learners and adults at risk safe.
- Checking a Scholar’s criminal record
- The substantial public interest of keeping learners safe.
We do not rely on your consent for safeguarding. If we did, withdrawing it could stop us protecting a learner, so we tell you plainly rather than ask you to agree to something we would have to override.
04
Class recordings
An adult alone with a learner on a screen needs more care than almost any other kind of teaching. Recording every Class is how we make it safe enough to offer at all.
30 days
then the recording is deleted
Never
watched by the Scholar
Admin
only, for now, can watch a recording
- A Class is recorded from the moment a family member enters the room. Every family and every Scholar accepts this before their first Class, and a family that does not want Classes recorded cannot use NoorQuran.
- A recording is kept for 30 days, then deleted.
- For now only a NoorQuran administrator can watch it, never the Scholar. We plan to let a learner’s parent or guardian watch one if there is a dispute about that Class, and will update this policy when we do.
- We will soon transcribe Classes and check the transcripts automatically for signs of a safeguarding concern. A person will review anything flagged: within four hours where a learner may be at immediate risk, and within 24 hours otherwise.
- No decision about a learner or a Scholar will ever be made by an automated check alone, and a concern anyone raises is acted on whether or not it was flagged.
- A learner can tell us something is wrong by writing to our safeguarding address, outside any Class. It reaches our safeguarding lead directly, and the Scholar is never told.
05
Who can see it
- Access is given by role, and we will log every access.
- A Scholar sees what they need to teach their own learners. They never receive your email address or phone number from us, never watch a recording, and never see a safeguarding record.
- Only the parent or guardian on a learner’s account can join their Classes or see their reports, and we, not the Scholar, keep that list. We will add checks that each adult holds parental responsibility, and ask at enrolment whether a court order or restriction affects who may know about the learner.
- The companies that provide our video, hosting and payments, and, once we add them, transcription and screening, handle information only on our instructions, each under a written agreement, and we record where each one stores it.
- We share information without consent only where a learner may be at risk of significant harm, where anyone is at risk of serious harm, or where the law requires it. Where it is safe to, we tell you first.
06
Outside the UK
Many of our Scholars live outside the United Kingdom, some in countries the UK has not recognised as protecting data adequately, Pakistan among them. When they teach your learner, that is a transfer of information, and the law asks for safeguards.
- Before anyone outside the UK can see a learner’s information, we sign an International Data Transfer Agreement, or the UK Addendum to the standard contractual clauses, and assess the risks of that country.
- They see only their own learners, cannot download or keep recordings, may not record or screenshot a Class, and lose access the day their work with us ends.
- Where the risks of a country cannot be brought low enough, we do not engage Scholars there.
07
How long we keep it
- Class recordings
- 30 days, then deleted.
- Safeguarding records
- For as long as protecting a learner requires. They are not deleted on request while that need lasts.
- Payment records
- Seven years, as UK accounting law requires.
- Everything else
- Until you ask us to delete it.
08
Learners under eighteen
A learner’s information needs more care than an adult’s, and we treat it that way.
- A learner under eighteen signs in with a code their parent gives them, not an email address or password of their own, and the parent can replace it at any time.
- No Scholar can send a message to a learner under eighteen.
- A parent can join their learner’s Class once the learner is in, and stay in the room with them.
09
Your rights
Parents, carers and adult learners can ask us:
- what information we hold about them, and for a copy of it;
- to correct anything that is wrong;
- to delete it;
- to stop using it for a particular purpose.
Write to contact@thenoorquran.com and we answer within one month. Where a request would get in the way of protecting a learner, we refuse it and record why.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
10
Keeping it safe
Information is protected by role-based access, and we will log every access. If information is ever lost or exposed, our safeguarding lead and trustees are told at once. Where it could put anyone’s rights at risk we tell the Information Commissioner’s Office within 72 hours, and where the risk to you is high, we tell you too.
11
Changes to this policy
When this policy changes, we update this page and the date at the top of it.
12
Contact us
A learner’s safety
Write straight away. It reaches our safeguarding lead before anything else.