1. Who we are
Al Dirayah is an Islamic educational initiative providing advanced post-seminary learning, scholarly content and related student services. For the purposes of UK data protection law, Al Dirayah is responsible for deciding how personal information collected through this website and its services is used.
2. Information we may collect
Depending on how you interact with us, we may collect information such as your name, email address, telephone number, course and application details, enrolment records, Student ID, attendance information, portal account information, correspondence, Open Day registration information and technical information needed to operate and secure the website.
Payment card details are processed through our payment provider and are not intended to be stored directly by Al Dirayah.
3. Why we use personal information
We use personal information to respond to enquiries, administer applications, process enrolments, provide courses and portal access, maintain academic and attendance records, communicate about services you have requested, manage payments and refunds, protect the security of our systems, meet legal and accounting obligations, and operate the website effectively.
4. Our lawful bases
Depending on the activity, we may process personal information because it is necessary to take steps at your request before entering into an agreement or to perform our educational agreement with you; because we have a legal obligation; because we have a legitimate interest in administering and securing Al Dirayah and responding to appropriate enquiries; or because you have given consent where consent is the appropriate basis.
Where we rely on consent, you can withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
5. Payments and service providers
We use trusted service providers to operate parts of our service. These may include website hosting and email providers, payment processors such as Stripe, and technology providers used to deliver online teaching or communications. They may process personal information only as needed to provide those services and subject to their own legal and contractual obligations.
6. International processing
Some service providers may process information outside the United Kingdom. Where this occurs, we expect appropriate safeguards required by applicable data protection law to be used. You may contact us if you would like more information about the safeguards relevant to a particular service.
7. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including academic administration, safeguarding the integrity of student records, resolving enquiries or disputes, and meeting legal, tax and accounting requirements. Retention periods may differ depending on the type of record and our legal or operational needs.
8. Your data protection rights
Depending on the circumstances and the lawful basis being used, you may have rights to request access to your personal information, ask for inaccurate information to be corrected, request erasure, request restriction of processing, object to certain processing, and request data portability. You may also withdraw consent where processing is based on consent.
To exercise a data protection right, email admin@aldirayah.org. We may need to verify your identity before completing a request.
Your right to object
You have the right to object to processing in certain circumstances, including some processing based on legitimate interests and processing for direct marketing.
9. Complaints
If you have a concern about how your personal information has been handled, please contact us first so that we can try to resolve it. You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO).
10. Cookies and similar technologies
Al Dirayah uses strictly necessary cookies or similar technologies for core functions such as website security, login sessions, portal access and remembering your privacy preferences. These technologies are required for the service to function and are not switched off through the cookie controls.
We also use Google Analytics 4 to generate website usage statistics and help us understand how visitors use Al Dirayah. Analytics is enabled unless you choose to decline it through the website notice or Cookie settings control.
If you decline analytics, Al Dirayah disables Google Analytics for subsequent activity in your browser and removes the first-party Google Analytics cookies that it can identify. You can change your analytics preference at any time using the Cookie settings control available on the website. Your preference is stored locally in your browser so that we can remember it on future visits.
11. Security
We use reasonable technical and organisational measures intended to protect personal information against unauthorised access, loss, misuse or alteration. No online service can guarantee absolute security, so users should also protect their account credentials and never share passwords by email.
12. Changes to this notice
We may update this Privacy Policy as Al Dirayah develops or when legal, technical or operational requirements change. The latest version will be published on this page.