Privacy Policy

2. Data Controller and Contact Details

The data controller responsible for your personal data is:

If you have any questions about this Privacy Policy, how we process your personal data, or how to exercise your data protection rights, please contact us at [email protected].

3. Scope of This Privacy Policy

This Privacy Policy applies when you:

• visit the Danaa School website;
• complete a registration, booking, enquiry or contact form;
• register yourself or your child for a class, workshop or event;
• take part in online classes or educational activities;
• apply to become a tutor or work with Danaa School;
• communicate with us by email, phone, messaging apps, social media or website forms;
• subscribe to our newsletters or marketing communications;
• make payments or request invoices, refunds or support.

4. What Personal Data We Collect

Depending on how you use Danaa School, we may collect and process the following categories of personal data:

5. Why We Use Your Personal Data

We use personal data for the following purposes:

• to register students, parents, guardians and tutors;
• to provide online Persian language, Persian literature, music and other educational classes;
• to match students with suitable tutors;
• to manage bookings, schedules, attendance and class communications;
• to process payments, invoices, refunds and accounting records;
• to communicate with parents, students and tutors about classes and services;
• to provide customer support and respond to enquiries;
• to improve our website, platform, services and educational experience;
• to send newsletters or marketing communications where we have permission or another lawful basis to do so;
• to manage tutor applications, verification, onboarding and payments;
• to comply with legal, tax, accounting, safeguarding and regulatory obligations;
• to protect the safety, security and integrity of our services.

6. Lawful Basis for Processing Personal Data

We only process personal data where we have a lawful basis under UK GDPR. Depending on the situation, we may rely on one or more of the following lawful bases:

• Contract: where processing is necessary to provide our educational services, manage bookings, process payments or communicate about classes.
• Consent: where we ask for permission, such as for marketing emails, use of a child’s image or video, optional recordings or certain cookies.
• Legitimate interests: where processing is necessary for our business operations, service improvement, fraud prevention, platform security, customer support or communication with users, provided that your rights and interests do not override our interests.
• Legal obligation: where we need to comply with UK legal, tax, accounting, regulatory or safeguarding obligations.
• Vital interests: in rare cases where processing is necessary to protect someone’s life or safety.

8. Images, Videos, Class Recordings and Social Media Consent

We will not use a child’s image, video, voice, class recording, testimonial or identifiable learning content for marketing, social media, promotional or public purposes without separate consent from the parent or legal guardian.

Some online classes, workshops or events may be recorded for educational, safeguarding, quality control or internal training purposes. Where recording takes place, we will inform participants in advance and, where required, obtain appropriate consent.

Recordings are only kept for as long as necessary for the purpose for which they were collected and are not shared publicly unless separate written consent has been obtained.

Parents and legal guardians may withdraw consent for the use of a child’s image, video or recording at any time by contacting us at [email protected]. Withdrawal of consent will not affect any processing that took place before the withdrawal.

9. Marketing Communications

We may send you marketing emails, newsletters, updates, offers or educational content where you have consented to receive them or where we have another lawful basis to contact you.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in our emails or by contacting us at [email protected].

We will not sell your personal data to third parties.

10. Cookies and Website Analytics

Our website may use cookies and similar technologies to make the website work, improve user experience, understand website performance and support marketing or analytics activities.

Some cookies are necessary for the website to function. Other cookies, such as analytics or marketing cookies, should only be used where you have provided consent, unless another lawful basis applies.

For more information, please see our Cookie Policy.

11. Payments and Third-Party Payment Providers

We may use third-party payment providers to process payments, invoices and refunds. These providers may process payment information securely on our behalf.

We do not directly store full credit or debit card details on our own systems. Payment information is handled by our payment service providers according to their own security and privacy standards.

12. Tutors and Service Providers

To provide our services, we may work with tutors, contractors, technical providers, payment processors, email providers, hosting providers, analytics providers and customer support tools.

Where these third parties process personal data on our behalf, we take appropriate steps to ensure that they protect personal data and only process it for authorised purposes.

Tutors may receive limited student or parent information where necessary to provide classes, manage learning progress or communicate about educational matters.

13. International Data Transfers

Some of our service providers, tutors, contractors or technical systems may be located outside the United Kingdom.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it is protected in accordance with applicable data protection laws. This may include using recognised safeguards such as contractual protections or other lawful transfer mechanisms.

14. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to provide services, manage accounts, comply with legal obligations, resolve disputes and maintain business records.

In general:

• account and class records may be kept while the account is active and for a reasonable period afterwards;
• payment, invoice and accounting records may be kept for the period required by UK tax and accounting laws;
• marketing data is kept until you unsubscribe or object to marketing;
• children’s data is kept only for as long as necessary for educational, legal, safeguarding or contractual purposes;
• recordings, where used, are kept only for as long as needed for the specific purpose explained at the time of recording.

When personal data is no longer required, we will delete it, anonymise it or securely archive it where appropriate.

15. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

These measures may include access controls, secure systems, password protection, limited access to personal data, staff or contractor confidentiality obligations and use of trusted service providers.

However, no online system is completely secure. If you believe your personal data or account has been compromised, please contact us immediately at [email protected].

16. Data Breaches

If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will take appropriate action in accordance with applicable data protection laws.

Where required, we will notify the UK Information Commissioner’s Office, also known as the ICO, and affected individuals within the required timeframe.

17. Your Data Protection Rights

Under UK data protection law, you may have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete personal data.
• Right to erasure: to ask us to delete your personal data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your personal data in certain circumstances.
• Right to object: to object to certain processing, including direct marketing.
• Right to data portability: to request transfer of certain personal data in a structured, commonly used format.
• Right to withdraw consent: where we rely on consent, you may withdraw that consent at any time.

To exercise your rights, please contact us at [email protected].

We will usually respond within one month of receiving your request. In some cases, this period may be extended where the request is complex or where we receive multiple requests.

18. Complaints

If you are unhappy with how we handle your personal data, please contact us first at [email protected] so we can try to resolve the matter.

You also have the right to complain to the UK Information Commissioner’s Office, the UK supervisory authority for data protection matters.

19. Use of Artificial Intelligence

At present, Danaa School does not use artificial intelligence tools to make automated decisions about students, parents, guardians or tutors.

We do not currently use personal data for automated profiling or AI-based decision-making.

If we introduce AI-based tools in the future, we will update this Privacy Policy before doing so and will explain what data is used, for what purpose, which service providers are involved and what rights users have in relation to such processing.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, technology or business operations.

The latest version will always be published on our website. Where changes are significant, we may notify users by email or through the website.