Privacy Policy
Last updated 18 October 2026
Lady Rabi'a Academy is a small, independent membership for parents. This page explains, in plain words, what personal information we collect, why, who helps us handle it, and the choices you have. We collect only what we need to run the Academy.
1. Who we are
Lady Rabi'a Academy ("we", "us") runs the website ladyrabiaacademy.org and the membership behind it. We are based in the United Kingdom and are the controller of your personal information. You can reach us at info@ladyrabiaacademy.org.
2. What we collect
- Your details. Name and email address when you request the free recording, create an account, or subscribe. If you choose "Sign in with Google", Google shares your name and email address with us; we never see your Google password.
- Membership and billing. Which plan you are on and its status (for example active or cancelled). Your card details are entered with our payment provider and are never held by us.
- Your progress. Which lessons you have opened, how far you have listened, and the private reflection notes you choose to write. Your notes are for you; they are not published.
- Community messages. Anything you post in the members' chat, together with your name, so other members and our team can see it.
- Messages to us. Questions or support requests you send, and our replies.
- Technical information. Basic data your browser sends when you visit, such as IP address, device type and pages requested, used to keep the site secure and working.
We do not knowingly collect information about children. The Academy is for adults.
3. Why we use it, and our legal basis
| Purpose | Basis (UK GDPR) |
|---|---|
| Send you the free recording you asked for, and the follow-up emails that come with it | Your request (consent), which you can withdraw at any time |
| Create your account, give you access to lessons and the community, take payment | Performing our contract with you |
| Remind you about lessons that have opened, or that you may have missed | Our legitimate interest in helping members benefit from what they pay for |
| Keep the service secure, prevent abuse, fix problems | Our legitimate interests |
| Keep records for tax and accounting | Legal obligation |
Every email we send has an unsubscribe link. Billing and account emails are separate and cannot be turned off while you hold an account.
4. Who we share it with
We never sell your information. We use a small number of trusted services to run the Academy. Each handles your information only to provide its service to us:
| Service | What it does for us |
|---|---|
| Outseta | Sign-up and login, subscriptions, email lists and our emails to you, support requests |
| Stripe | Takes card payments and manages subscriptions (through Outseta) |
| Supabase | Stores account records, lesson progress, notes, chat messages and lesson files |
| Vercel and Cloudflare | Host and deliver the website and its domain |
| Optional "Sign in with Google" | |
| Apple (iCloud Mail) | Receives mail sent to our contact address |
We may also disclose information where the law requires it.
5. Moving information abroad
Some of these services process information outside the United Kingdom, including in the United States. Where they do, they rely on recognised safeguards such as the UK International Data Transfer Addendum or adequacy arrangements.
6. Cookies
We use only the cookies and similar storage needed to keep you signed in and the site working. We do not currently use advertising or analytics cookies. If that changes we will update this page and ask for your consent first. "Sign in with Google" and our payment and login tools may set their own essential cookies when you use them.
7. How long we keep it
- Account and learning records: while you hold an account, and for up to 12 months after it closes, unless you ask us to delete them sooner.
- Billing records: for the period the law requires us to keep them (currently 6 years).
- Email list: until you unsubscribe or ask us to remove you.
- Support messages: for up to 2 years.
8. Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another service. You can withdraw consent to emails at any time. To use any of these rights, email info@ladyrabiaacademy.org. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk. We would be glad of the chance to put it right first.
9. Security
Access to member records is restricted, connections to the site are encrypted, and members only see the content their plan includes. No online service can promise perfect security, but we take it seriously and will tell you and the regulator if a breach affects you.
10. Changes
If we change this policy in a way that matters, we will update the date above and, where appropriate, email members.