Legal
Privacy Policy
Al-Haneeph Academy Ltd · RC 9194408 · Incorporated in Nigeria
Last updated: 9 August 2026
Quick contents
1. Who we are
This Privacy Policy explains how Al-Haneeph Academy Ltd (Company Registration Number RC 9194408), a company incorporated in Nigeria ("Al-Haneeph Academy", "we", "us", or "our"), collects, uses, stores, shares, and protects personal data when you visit our website, enrol in classes, communicate with us, or otherwise interact with our online Islamic education services.
Correspondence address: No. 2, Shosanya, Gbagada, Lagos State, Nigeria.
Privacy / data enquiries: info@alhaneephacademy.com (please mark the subject "Privacy"). Admissions: admissions@alhaneephacademy.com. Telephone: +234 802 237 6756.
We process personal data in accordance with applicable Nigerian law, including the Nigeria Data Protection Act, 2023 (NDPA) and related regulations, and other laws that may apply to individuals outside Nigeria.
2. Scope
This Policy applies to:
- Website visitors at alhaneephacademy.com and related pages;
- Prospective and enrolled Students and their parents/guardians;
- Individuals who contact us by email, phone, WhatsApp, or chat widgets;
- Payment and enrolment flows linked from our site.
It should be read together with our Terms & Conditions. Capitalised terms not defined here have the meaning given in the Terms where relevant.
3. Information we collect
3.1 Identity and contact data
Name, date of birth, gender, email address, telephone number, country, time zone, parent/guardian name, relationship, and parent contact details.
3.2 Enrolment and academic data
Course interest (Arabic, Quranic, Islamic studies, or combination), self-reported level, learning goals, preferred days and time slots, schedule notes, referral codes, special requests, age bracket, billing plan, and subsequent progress notes, attendance records, and communications with Tutors.
3.3 Payment and transaction data
Amount paid, currency (typically NGN), payment reference, payment status, plan selected, and related metadata submitted with checkout. Full card numbers and CVV are handled by our payment processor (for example Paystack) and are not stored by us on our own servers.
3.4 Technical and usage data
IP address, approximate location derived from IP, browser type, device information, pages visited, referral source, and similar analytics or security logs.
3.5 Communications data
Messages you send via forms, email, SMS, WhatsApp, live chat (including Brevo Conversations where enabled), and records of support interactions.
3.6 Marketing preferences
Consent choices for reminders, updates, and promotional communications, and how you heard about us.
3.7 Special category / sensitive data
We do not seek to collect special category data (such as health information or detailed religious belief beyond what is inherent in requesting Islamic education). If you voluntarily disclose health, disability, or safeguarding information to help us teach safely, we process it only for that purpose with heightened care.
4. How we collect data
- Directly from you via registration, contact forms, email, phone, or chat;
- Automatically via cookies, analytics, geo-IP tools, and similar technologies when you use our website;
- From payment providers confirming transaction success or failure;
- From Tutors documenting attendance and educational progress as part of service delivery;
- From marketing or CRM tools (for example Brevo) when you interact with tracked events such as registration submission.
5. How we use data
We use personal data to:
- Create and manage enrolments and student records;
- Match Students with suitable Tutors and schedule Sessions;
- Process tuition payments, issue confirmations, and handle refunds;
- Deliver classes, materials, progress tracking, and certificates where offered;
- Communicate about schedules, Tutor matching, billing, and policy updates;
- Improve our website, curriculum, and teaching quality;
- Detect fraud, abuse, and security incidents;
- Comply with legal, regulatory, tax, and accounting obligations;
- Send marketing where permitted (with an easy opt-out);
- Establish, exercise, or defend legal claims.
6. Legal bases
Depending on the context, we rely on one or more of the following:
- Contract — processing necessary to enrol you, deliver paid tutoring, and manage the student–academy relationship;
- Consent — for optional marketing, non- essential cookies where required, and certain disclosures you choose to provide;
- Legitimate interests — improving services, securing systems, preventing fraud, and basic analytics, balanced against your rights;
- Legal obligation — retaining transaction records, responding to lawful requests, and meeting regulatory duties;
- Vital interests / safeguarding — in rare cases involving serious risk to a child or individual.
8. International transfers
We serve students worldwide. Personal data may be processed in Nigeria and in other countries where our Tutors, cloud providers, or tools operate. Where data is transferred outside Nigeria, we take steps consistent with the NDPA to ensure appropriate safeguards (such as contractual protections and reputable vendor standards).
9. Retention
We retain personal data only as long as needed for the purposes above, including:
- Active enrolment records for the duration of the student relationship and a reasonable period afterward for continuity and disputes;
- Payment and invoicing records for periods required by tax and accounting rules (often several years);
- Marketing contacts until you opt out or the list is routinely cleaned;
- Security and server logs for shorter operational periods unless needed for investigations.
When retention is no longer necessary, we delete or irreversibly anonymise data where feasible.
10. Security
We implement reasonable technical and organisational measures to protect personal data, including encrypted transport (HTTPS), access controls, reputable payment gateways, and staff/Tutor expectations of confidentiality. No method of transmission or storage is 100% secure; you also play a role by protecting devices and not sharing classroom links.
If we become aware of a personal data breach likely to result in a risk to your rights, we will notify relevant authorities and affected individuals as required by law.
11. Children's privacy
Our services are designed for learners including children (typically from about age 5) under parental/guardian enrolment. We do not knowingly market directly to children in a way that bypasses parental involvement.
- Parents/guardians provide and control contact information for minors and may request access, correction, or deletion of the child's data subject to legal retention needs;
- Live Sessions with minors should take place in an appropriate setting; parents may be present or nearby as they deem fit;
- Recording of Sessions involving minors requires our prior written approval and parental consent;
- Safeguarding concerns should be reported immediately to info@alhaneephacademy.com.
12. Your rights
Subject to the NDPA and other applicable law, you (or a parent/guardian for a minor) may have the right to:
- Access personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion, restriction, or objection to certain processing, subject to exceptions (for example legal retention of payment records);
- Withdraw consent where processing is consent-based;
- Opt out of marketing communications;
- Request data portability where technically feasible and legally applicable;
- Lodge a complaint with the relevant Nigerian data protection authority.
To exercise rights, email info@alhaneephacademy.com with sufficient detail to verify your identity and locate your records. We will respond within the timeframes required by law.
14. Marketing
If you opt in (or where soft opt-in is permitted for existing clients), we may send tips, offers, and academy news. Every marketing email includes an unsubscribe mechanism. Service messages about your enrolment are not marketing and may continue while you are an active client.
15. Payments
Tuition checkout is typically processed in NGN through Paystack or another designated gateway. When you pay, enrolment information may be attached as payment metadata so we can reconcile your registration with the transaction. Paystack's own privacy notice applies to data it processes as a payment institution. We receive confirmation details such as amount, reference, status, and customer email.
16. Third-party sites
Our website may link to third-party sites or embed third-party tools. We are not responsible for their privacy practices. Review their policies before providing data to them.
17. Changes
We may update this Privacy Policy periodically. The "Last updated" date will reflect the latest version. Material changes will be highlighted on the website and/or communicated by email where appropriate. Continued use after changes take effect constitutes acknowledgment of the updated Policy, except where consent is required.
18. Complaints
If you have a privacy concern, contact us first so we can try to resolve it. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC) or any successor supervisory authority under Nigerian law.
19. Contact
Al-Haneeph Academy Ltd (RC 9194408)
Data / privacy contact: info@alhaneephacademy.com
No. 2, Shosanya, Gbagada, Lagos State, Nigeria
Phone: +234 802 237 6756
This Policy is intended to explain our practices clearly. It is not a substitute for personalised legal advice.