Your details, looked after.

An-Nakhlah Institute runs the Academy (a weekend Islamic school for children) and the Alimiyyah Programme (for adults). We decide how the details you give us are used, and we are responsible for looking after them.

Questions about your details? Email info@an-nakhlah.com or call +44 7763 891546.

Academy application: your child's name, date of birth, gender, school year, Qurʾān and madrasah background, any medical information and allergies, brothers and sisters at the Academy, and your name, relation to the child, email, phone number, address, post code and an emergency contact.

Alimiyyah application: your name, title, gender, date of birth, marital status, email, phone number, address, post code, an emergency contact, your chosen route and how you will pay, your study background, what you hope to gain from the course, any medical information, how you heard about us and any family member studying with us.

Our contact form (on the Contact, Academy and Alimiyyah pages): your name, email, phone number if you give it, what your message is about, and your message.

When you contact us: whatever you choose to send by email, phone or Instagram.

To consider your application, arrange classes, keep in touch with you, contact your emergency contact if we need to, and manage fees and family or sibling discounts.

Medical information and allergies are used only to keep you or your child safe, and are shared only with the staff who need to know.

A contact form message goes to the inbox for the topic you choose (for example the Academy, Alimiyyah or fees). Our office staff who look after our inboxes can see it, and reply by email.

A message about a worry for a child's safety goes to our safeguarding inbox. Only our office admins can read it. If a child may be at risk, we may have to share it with the people whose job is to keep children safe, such as the local council or the police.

We never sell your details or use them for advertising.

Under UK data protection law (UK GDPR), we use your details to take the steps you ask for before enrolment and to run the place you accept (contract), and to run the Institute safely and well (legitimate interests).

When you write to us, we use your message to answer you (legitimate interests).

Medical information is special category data. We use it with your explicit consent, given when you send it to us, or where it is needed to protect someone's vital interests in an emergency.

Only trusted services that store or send information for us: our database and app provider (Supabase), our website host (Cloudflare) and our email providers. They act on our instructions and may not use your details for anything else.

We share details with others only if the law requires it, or to protect someone from harm.

Applications go straight into our apps over a secure connection. Only staff who need them can open them.

We keep your details only for as long as we need them for the reasons above, and to meet our legal duties. In practice:

An application that does not lead to a place is deleted as soon as we have decided and told you.

A child at the Academy: we keep their record while they attend and for 6 years after they leave. Fees and accounts are part of this, and the law asks us to keep them.

Safety notes and incident reports about a child are kept until the child is 25.

Contact form messages and emails are deleted as soon as we have dealt with them, unless they are about a child's safety or are a record we must keep.

A parent's app login is removed when you delete your account, or about a year after your last child leaves.

You can ask to see the details we hold about you, ask us to correct or delete them, or object to how we use them. Email us and we will reply within one month.

If you are unhappy with how we handle your details, please tell us first. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The An-Nakhlah Academy app is for the parents of children at the Academy and for our staff. Children do not have accounts. The Academy office makes each parent's login; you cannot sign up in the app.

What the app holds: your name, email and phone number; your children's details from their application (see above); their class, attendance, homework, progress and term reports; the fees owed and paid at the office; messages between you and the Academy; and notes staff write when something happens at school. For staff: name, email, role and classes, and for paid staff the days and hours worked.

Who sees it: a parent sees only their own children. A teacher sees the children in their classes. Our office admins see what they need to run the Academy.

Notifications: if you allow them, the app gives your phone's notification address to Google Firebase Cloud Messaging (and, on an iPhone, Apple's push service), only so we can send you school notifications. You can turn them off in the app (Profile) or in your phone's settings.

The app has no advertising, no tracking and no analytics. We never sell your details. The app is run for us by our database provider (Supabase) and our email provider (Resend), as described below.

In the app: Profile → Delete my account, then confirm. Your login is removed straight away, and your name, email and phone number are wiped. Notifications to your phone stop.

Without the app: email info@an-nakhlah.com from the email address on your account, with the subject “Delete my Academy app account”. We will delete it within one month.

What we keep: your children's school records (attendance, reports, fees and safety notes) stay with the Academy, because the school needs them. Messages you sent stay in the school's records, shown as from a former parent. If you want these removed too, ask us and we will tell you what we can delete and what the law asks us to keep.

This website uses no advertising or tracking cookies and no analytics. The forms send what you type into them, plus the spam check below.

To stop spam, our forms use Cloudflare Turnstile, a quick check that you are a person. It looks at your browser, your device and your internet address while you fill in the form. Cloudflare uses this to run the check and to improve its spam protection, not for advertising (Cloudflare's Turnstile privacy notice).

To stop floods, the contact form counts how many messages come from the same internet address within one minute. The count is not kept after that.

The map on our Home and Contact pages is loaded from OpenStreetMap, which can see your device's internet address when the map loads.