Privacy

Last Updated: 04/08/25

1. Introduction

MyMadrasa.ca (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information, in compliance with Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and other applicable privacy laws.

2. Scope

This Policy applies to all visitors and users of our website and online services (“Services”) provided via MyMadrasa.ca. It covers personal information collected from students, parents/guardians, and other users.

3. Information We Collect

We may collect the following:

• Contact information: name, email address, telephone, residential address

• Account credentials: user ID, encrypted password

• Student profile info: parent name, student nickname, program enrollment (e.g. Tajweed, Hifz)

• Usage and technical data: IP address, device type, browser, pages visited, time spent

• Payment and billing info (through third-party provider): transaction details, card metadata (not full card data)

• Communications: messages sent via contact forms or chats

4. How We Use Your Information

We use personal information to:

• Provide, maintain, and personalize our Services

• Enroll students and administer classes

• Process payments and manage subscriptions

• Communicate updates, promotions, or account notices (unless opted out)

• Analyze platform usage and improve performance and content

5. Disclosure of Personal Information

We do not sell personal data. We may share information with:

• Service providers (e.g. payment processors, hosting, analytics, email platforms)

• Legal authorities, if required by law

• Affiliates or partners, only as needed and governed by confidentiality agreements

• Third-party platforms, if you log in through them (e.g. social media), for authentication or data exchange with your consent

6. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies for:

• Session authentication

• Saving user preferences (like language or page choices)

• Website analytics and usage tracking

You may disable or clear cookies via your browser settings, although some features may not fully work.

7. Data Retention

We retain your personal information only as necessary, including:

• To fulfill service expectations

• To meet legal, tax, or auditing obligations

• To handle support or dispute resolution

When no longer required, data is securely destroyed or anonymized.

8. Security Safeguards

We implement reasonable technical, organizational, and physical security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Examples: encrypted storage, access controls, secure communication channels.

9. Children’s Information

Our Services are intended for children under parental supervision. We do not knowingly enroll children under 13 without verifiable parental consent. Parents or guardians can request access, correction, or deletion of their child’s data at any time.

10. Your Rights Under PIPEDA

As a Canadian resident, you have the right to:

• Access or obtain copies of your personal information

• Request correction or updates

• Withdraw consent, request deletion, or restrict use of your data (subject to legal requirements)

• Ask questions or file a privacy complaint

Requests can be submitted via the “Contact Us” channel below. We will respond within the timelines mandated by law.

11. Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date will reflect the new effective date. Significant changes will be notified through email or banner notice on the website before becoming effective. Continued use of our Services constitutes acceptance.

12. Contact Us

For privacy-related concerns, questions, or to exercise your rights:

• Email: info@mymadrasa.ca

• Phone/WhatsApp: +1 (289) 687‑8726

• Mail: 777 Goldstream Avenue, Victoria, BC, Canada

---

⚖️ Legal & Best Practices Reminder

MyMadrasa.ca serves users globally. Depending on your jurisdiction, you may need additional disclosures or opt-in/opt-out mechanisms—for example under:

• European GDPR

• California CCPA/CPRA (for California residents)

• UK Data Protection Act

Also, if you process sensitive categories (e.g. children’s profiles), consider enhanced consent frameworks.