Privacy Policy

How we handle your data when you use our website and guardian portal — written in plain English, not legalese.

1Who we are

Al Huffaz Education System is a private Islamic educational institution in Karachi, Pakistan. We're accredited by Wafaq-ul-Madaris Al-Arabia Pakistan and registered with the Federal Board of Revenue (FBR). For the purposes of this policy, we are the "data controller" — meaning we decide how your personal data is handled.

2What we collect

From guardians & parents

• Name, CNIC, and relationship to the student
• Address, mobile number, and email
• Emergency contact details
• Occupation (optional)

From or about students

Since our students are minors, we're extra careful here. With guardian consent, we keep:

• Basic identity — name, date of birth, gender
• Academic records — grade, attendance, performance, behavior reports
• Health information relevant to care (allergies, medical conditions)
• A photo for portal identification (never shared publicly)

From sponsors

• Name, contact info, country of residence
• Sponsorship and payment history

Payment info

Technical data

Standard stuff: IP address, browser type, device info, pages visited — used for security and site improvement.

3How we use it

We use your information to:

• Keep enrollment, attendance, and academic records
• Process fee payments and send receipts
• Run recurring monthly auto-debit (only if you've authorized it)
• Communicate about your child's progress and school notices
• Match sponsors with students they choose to support
• Meet our tax and accounting obligations under Pakistani law
• Prevent fraud and keep the portal secure

4Who we share it with

We do not sell, rent, or trade your data. We share it only with:

• Bank Alfalah — to process your fee payments (their own privacy policy applies during payment)
• Our hosting provider — to run our website and database (under strict confidentiality)
• Authorized school staff — who need access to do their jobs
• Regulatory authorities — only when legally required

5How we keep it safe

• HTTPS/TLS encryption on every page
• Role-based access controls — staff only see what they need
• Regular security updates and backups
• Payment processing handled entirely by Bank Alfalah (PCI-DSS certified)
• Staff trained on student data confidentiality

No system is 100% bulletproof, so please use a strong password and don't share your account credentials with anyone.

6How long we keep it

• Student records: while enrolled, plus 7 years
• Financial transactions: 7 years (required by FBR)
• Sponsor records: active sponsorship + 5 years
• Inactive accounts: archived after 3 years, deletable on request

7Your rights

You can ask us at any time to:

• See the data we hold about you or your child
• Correct anything that's inaccurate
• Delete your data (where not legally required to keep)
• Cancel recurring auto-debit authorizations
• Download your transaction history

Email info@alhuffazeducationsystem.com — we'll respond within 30 days.

8Children's data

Students don't create accounts or provide data themselves. Everything about a student is entered, reviewed, and managed by their guardian. We treat minors' data with the highest level of care.

9Cookies

We use essential cookies for login sessions and security, plus basic analytics to understand site usage. You can disable cookies in your browser, though some features may not work properly.

10Changes to this policy

If we update this policy, we'll change the "Last updated" date at the top. Big changes will be emailed to account holders or posted on the portal.

11Governing law

This policy is governed by the laws of Pakistan, including the Prevention of Electronic Crimes Act 2016 (PECA). Any disputes fall under the jurisdiction of the courts of Karachi, Sindh.