Privacy policy

Information we handle

• Website visits: technical information such as IP address, browser, requested pages and error logs may be processed by our hosting services. Your chosen website language is saved in your browser.
• Portal records: information supplied by students, parents, guardians and authorised staff, including names, student identifiers, contact details, date of birth, address, photographs where supplied, enrolment, attendance, lessons and other educational or administrative records entered in the portal. Staff account details and access permissions support secure administration.
• WhatsApp: your phone number, messages and selections sent to our service, subscription choices and consent records, message identifiers, delivery status and temporary conversation state. Records submitted by authorised teachers, such as attendance and lesson notes, are saved in the student portal.
• Requests for help: information you provide when contacting us, including requests about your information.

How we use information

We use information to operate the website and portal, manage education and attendance, respond to requests, provide prayer times, deliver updates you subscribe to, manage staff access, and investigate errors or misuse. Access to student records is restricted according to staff roles, permissions and assignments.

WhatsApp choices

Our WhatsApp service provides information when you request it. Send MENU to choose prayer times, monthly timetables, announcements or contact details. Subscriptions and automatic updates are disabled.

If you previously subscribed, automatic updates will not be sent. You can still send STOP to record an opt-out. Previous consent and delivery records may remain until reviewed under the deletion process below.

Authorised staff may use the service for permitted student administration. Avoid sending unnecessary sensitive information in messages.

Service providers and sharing

Our services use Vercel for hosting, Supabase for database and authentication services, and Meta/WhatsApp for WhatsApp communication. These providers process information needed to operate their services and may process it outside Pakistan. WhatsApp messages are also subject to WhatsApp’s own privacy policy.

Information may be accessed by authorised masjid staff for their responsibilities, by service providers supporting the service, or disclosed where required by law or necessary to address security incidents. We do not sell personal information or provide subscriber lists to advertisers.

Browser storage and external links

The website stores preferences such as language locally. Portal authentication uses browser storage to keep you signed in. Clearing browser storage can remove preferences or sign you out. Links to third-party services open services with their own privacy practices.

Retention and security

Information is kept for the operation of the service, educational administration, consent and delivery records, security, and applicable record-keeping needs. Retention depends on the kind of record and its purpose; records are not automatically erased when you unsubscribe. Deletion requests are reviewed as described below.

We use authentication and access controls to limit access. No online system can guarantee absolute security. Keep account credentials private and tell us if you suspect unauthorised access.

Children and student records

Our educational services include children. Parents, guardians and authorised staff should provide only information needed for those services. A parent or guardian may contact us about a child’s records, subject to verification of their authority. Student records are not intended for public display.

Access, correction and data deletion

You can ask us to explain, correct or delete information held by the masjid, including information obtained through our Meta/WhatsApp integration.

1. Email info@masjidfarooqeazam.org with the subject Data deletion request (or explain your access or correction request).
2. Include the WhatsApp number with country code or the portal email/student identifier involved, and tell us which records you want removed. Do not send passwords, access tokens or identity documents unless we request a necessary verification step.
3. We may ask you to verify ownership of the account or your authority to act for a student. We will review the request and reply with the outcome or any further information needed.

A request can cover your WhatsApp subscription, conversation state, associated message records and staff phone mapping, where applicable. Student records require separate review. If some information must be retained for applicable legal, educational or security reasons, we will explain the reason and scope. Copies may remain in backups until those backups expire. Deletion from our systems does not delete copies held independently by WhatsApp or on another person’s device.

Contact and changes

For privacy questions, contact info@masjidfarooqeazam.org or the masjid administration in Bewal, Tehsil Gujar Khan, District Rawalpindi, Pakistan.

We may update this policy as our services change. The date above identifies the latest revision.