Privacy Policy
Effective date: July 15, 2026
This Privacy Notice for Zaytoon Academy Educational Trust ('we', 'us', or 'our') describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you:
- Visit our website at https://zaytoon.uk/ or any website of ours that links to this Privacy Notice.
- Engage with us in other related ways, including any marketing or events.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@zaytoonacademy.co.uk.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the links or using the table of contents below.
- What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the features you use.
- Do we process any sensitive personal information? We do not process sensitive personal information.
- Do we collect any information from third parties? We do not collect any information from third parties.
- How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We only process your information when we have a valid legal reason to do so.
- In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.
- How do we keep your information safe? We have organizational and technical processes in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed 100% secure.
- What are your rights? Depending on your geographical location, you have certain rights regarding your personal information.
- How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us.
TABLE OF CONTENTS
- What Information Do We Collect?
- How Do We Process Your Information?
- What Legal Bases Do We Rely On To Process Your Personal Information?
- When And With Whom Do We Share Your Personal Information?
- Do We Use Cookies And Other Tracking Technologies?
- How Long Do We Keep Your Information?
- How Do We Keep Your Information Safe?
- Do We Collect Information From Minors?
- What Are Your Privacy Rights?
- Controls For Do-Not-Track Features
- Do We Make Updates To This Notice?
- How Can You Contact Us About This Notice?
- How Can You Review, Update, Or Delete The Data We Collect From You?
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
- In Short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide to us when you register on the Services, express interest in our products and Services, participate in activities, or contact us.
The personal information we collect depends on the context of your interactions and choices, and may include:
- Names
- Phone numbers
- Email addresses
- Mailing addresses
- Usernames
- Passwords
- Contact preferences
- Contact or authentication data
- Billing addresses
- Debit/credit card numbers
Sensitive Information: We do not process sensitive information.
Payment Data: We may collect data necessary to process your payment if you make purchases. All payment data is handled and stored by Stripe. You can find their privacy notice here: stripe.com.
All information you provide must be true, complete, and accurate, and you must notify us of changes.
Google API: Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. HOW DO WE PROCESS YOUR INFORMATION?
- In Short: We process your information to provide, improve, and administer our Services, communicate with you, prevent fraud, and comply with law. We may also process it for other purposes with your consent.
We process your personal information for reasons including:
- To facilitate account creation and authentication: To manage user accounts and keep them in working order.
- To deliver and facilitate delivery of services: To provide you with the requested service.
- To respond to user inquiries and offer support: To solve potential issues with the service.
- To send administrative information: To send details about products, services, or policy updates.
- To fulfil and manage your orders: To process payments, returns, and exchanges.
- To request feedback: To contact you about your use of our Services.
- To send marketing and promotional communications: In accordance with your marketing preferences (you can opt out at any time).
- To deliver targeted advertising: To display personalised content tailored to your interests or location.
- To protect our Services: For fraud monitoring and prevention safety efforts.
- To identify usage trends: To understand how our services are used so we can improve them.
- To determine campaign effectiveness: To understand which promotional campaigns are most relevant.
- To save or protect vital interests: To prevent harm to an individual.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
- In Short: We only process your personal information when we have a valid legal reason under applicable law, such as your consent, contract fulfilment, legal compliance, or legitimate business interests.
Under the GDPR and UK GDPR, we rely on the following bases:
- Consent: If you have given clear permission for a specific purpose (withdrawable at any time).
- Performance of a Contract: When necessary to fulfil our contractual obligations or take pre-contractual steps.
- Legitimate Interests: Reasonably necessary to achieve business interests that do not outweigh your rights, such as:
- Sending offers and discounts
- Developing relevant advertising
- Analysing usage to improve experience
- Supporting marketing and preventing fraud
- Legal Obligations: For compliance with law enforcement, regulatory agencies, or litigation.
- Vital Interests: To protect safety or address potential threats to any person.
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
- In Short: We may share information in specific situations or with specific third parties.
We may share your information in these situations:
- Business Transfers: During mergers, sales of assets, financing, or acquisitions.
- Google Maps Platform APIs: We may share info with Google Maps or Places APIs. Google Maps uses location estimates (GPS, Wi-Fi, cell towers) to provide directions.
5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
- In Short: We may use cookies and tracking technologies to collect and store information.
We use cookies, web beacons, and pixels to maintain security, prevent crashes, fix bugs, and save preferences. Third parties may also use tracking technologies for analytics and tailored advertising. Detailed cookie settings are located in our separate Cookie Notice.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
- In Short: We keep your information as long as necessary to fulfil the purposes in this notice unless required by law.
We will not keep your information longer than the period in which you have an active account with us, unless required for tax, accounting, or legal purposes. When we have no ongoing business need, we will delete or anonymise it, or securely isolate it within backups.
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
- In Short: We aim to protect your data through organizational and technical security measures.
We have implemented standard security controls. However, no transmission over the internet can be 100% secure; transmission is at your own risk, and you should only access services within a secure environment.
8. DO WE COLLECT INFORMATION FROM MINORS?
- In Short: We do not knowingly collect data from or market to children under 18.
By using our Services, you represent that you are at least 18 years old. If we discover data collected from minors under 18, we will deactivate the account and promptly delete the records. Contact us at info@zaytoonacademy.co.uk if you believe we hold such data.
9. WHAT ARE YOUR PRIVACY RIGHTS?
- In Short: In regions like the EEA, UK, and Switzerland, you have rights allowing greater control over your personal data.
Depending on your region, your rights include requesting access, copies, rectification, erasure, processing restriction, or data portability. You can submit a request using the contact methods below.
- EEA/UK Complaints: You have the right to complain to your local Member State or the UK Information Commissioner's Office (ICO).
- Withdrawing Consent: You can withdraw processing consent at any time without affecting prior lawful processing.
- Marketing Opt-Out: Click the unsubscribe link in emails or contact us to be removed from marketing lists.
- Account Control: Log in to your account settings to update or request account termination.
10. CONTROLS FOR DO-NOT-TRACK FEATURES
Most browsers offer a Do-Not-Track ('DNT') signal. Because no uniform standard has been finalised, we do not currently respond to automated DNT browser mechanisms.
11. DO WE MAKE UPDATES TO THIS NOTICE?
- In Short: Yes, we update this notice to stay compliant with relevant laws.
The updated version will show a revised date at the top. Material changes will be communicated via prominent notice or direct notification.
12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
If you have questions, contact us via email at info@zaytoonacademy.co.uk or by post at:
Zaytoon Academy Educational Trust
23 Arden Rd
Aston
Birmingham
B6 6AP
United Kingdom
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?
Depending on your country's laws, you have the right to request access, correction, or deletion of your personal data. To submit a request, please submit a formal data subject access request.
This document was originally generated via Termly.