Privacy Policy

1. Introduction

AtTartil Quranic Institute ("AtTartilQI", "we", "us") respects the privacy of every student, parent, donor, volunteer and website visitor.

This policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have under Singapore's Personal Data Protection Act (PDPA).

By using this website, registering for a programme, submitting an enquiry, attending an event or making a donation, you consent to the practices described here.

2. Data we collect

We collect only what we need to deliver our Qur'anic education and services.

3. How we use your data

• Processing programme registrations, class placement and waitlists.
• Sending registration confirmations, class reminders, Zoom links, learning materials and certificates.
• Responding to enquiries submitted via the contact form, email or WhatsApp.
• Processing payments, donations and infaq, issuing receipts and handling refunds.
• Managing event participation, attendance, seating and refreshments logistics.
• Sending newsletters, programme updates and tarbiyah content to those who have consented.
• Improving our website content, programmes and user experience through aggregate analytics.
• Meeting our legal, accounting and audit obligations in Singapore.

4. Programme registrations and enquiry forms

Registration and enquiry forms on this website submit your details to our student management system and CRM so that our registration team can follow up with you.

Registration information is shared internally only with the teachers and programme coordinators responsible for your class, for teaching and student support purposes.

You may ask us to correct or update your registration details at any time.

5. Events and programme participation

For seminars, masterclasses, Umrah trips, Qurban and community events, we may collect attendance records, dietary preferences, emergency contacts and, where a trip requires it, passport or travel details.

Travel-related data is shared only with the relevant travel or logistics partner for that specific trip, and is deleted once the trip and its reporting obligations are complete.

6. Payments, donations and infaq

Card payments are processed by Stripe, a PCI DSS compliant international payment provider. We do not store full card numbers or CVV codes.

For PayNow and bank transfers, we retain the payment proof you upload solely for verification and financial record-keeping.

Donation and infaq records are kept for accounting, audit and regulatory reporting where required by law.

7. Student and children's data

For participants under the age of 18, registration must be made by a parent or legal guardian, who provides consent on the child's behalf.

Learning progress, attendance and assessment data are used solely to guide the student and to update parents on their development.

Parents may request access to, correction of, or deletion of their child's data by contacting us.

8. Newsletters and marketing communications

We send newsletters and programme updates only to people who have given consent or who have previously registered with us.

Every email includes an unsubscribe link, and you may withdraw consent at any time by writing to info@attartilqi.com.

Withdrawing marketing consent does not affect essential communication about a programme you are enrolled in.

9. Cookies and analytics

This website uses cookies that are necessary for basic functionality, along with analytics cookies that help us understand which pages are most useful to visitors.

Analytics data is reviewed in aggregate and is not used to identify individual visitors.

You can block or delete cookies in your browser settings, though some parts of the site may not function fully.

10. Photography, video and media usage

Photographs and video may be captured during classes, events and graduation ceremonies for documentation and for promoting our programmes on our website and social media.

If you prefer that your image, or your child's image, is not used in promotional material, please inform our team before or after the event and we will honour that request.

11. Third-party tools and disclosure

We do not sell your personal data. We share it only with service providers that help us operate:

• Payment providers (Stripe) for programme fees and donations.
• CRM and marketing automation providers for registrations and follow-up.
• Transactional email providers for confirmations and reminders.
• Online learning platforms such as Zoom for virtual classes.
• Website analytics and cloud hosting providers.
• Singapore authorities where disclosure is required by law.

12. Data retention and security

Data is stored on secure cloud servers with access restricted to authorised staff, and is transmitted over encrypted connections.

We retain personal data only for as long as it is needed for the purposes described above or as required by law, after which it is deleted or anonymised.

In the unlikely event of a data breach that poses significant harm, we will notify affected individuals and the PDPC as required.

13. Your rights under the PDPA

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent for specific uses or disclosures of your data.
• Request deletion of data that is no longer required.
• Raise a privacy complaint with our Data Protection Officer.

14. Miscellaneous

Our website may link to external sites (for example partner or payment pages). We are not responsible for the privacy practices of those sites.

Some of our service providers process data outside Singapore. Where this happens, we require a comparable standard of protection to the PDPA.

We may update this policy from time to time. The latest version will always be published on this page with a revised effective date.

15. Contact our Data Protection Officer