Privacy Policy

BRS Online School ("we", "our" or "us") is committed to protecting the privacy and security of our users’ personal data. This Privacy Policy explains how we collect, use, share and protect the personal information of our students, parents, guardians and website visitors, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to our website and to all educational services we provide, including our online school, tuition, Quran studies and Arabic lessons.

BRS Online School is the "data controller" responsible for your personal data. If you have any questions about this policy or how we handle your information, you can contact us using the details below:

We collect personal information that you provide to us when you register for our services, interact with our website or communicate with us. This information includes:

We use your personal information to:

We process your personal information based on one or more of the following legal grounds:

We may share your personal information with third parties under the following circumstances:

We do not sell your personal data to third parties.

As we serve families both in the UK and internationally, and some of our service providers may be based outside the UK, your personal data may be transferred to and processed in countries outside the UK. Where we do this, we ensure that appropriate safeguards are in place to protect your data in line with UK data protection law, such as standard contractual clauses or transfers to countries deemed adequate by the UK government.

We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Our security measures include encryption, secure data storage and regular security assessments.

We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law. Educational and safeguarding records may be retained for longer periods where we are legally or professionally required to do so. When your data is no longer needed, we will securely delete or anonymise it.

Under the UK GDPR and Data Protection Act 2018, you have the following rights regarding your personal information:

Protecting children is central to everything we do. We collect and process children’s data only with the consent of a parent or guardian, and solely for the purpose of providing our educational services and safeguarding their welfare.

Parents and guardians have the right to access, modify or delete their child’s personal data at any time by contacting us.

Where we have genuine concern for a child’s safety or welfare, we may be required to share relevant information with appropriate authorities. In such cases, safeguarding a child’s wellbeing takes precedence, and we may act without prior consent where the law permits or requires it. Our full approach to child protection is set out in our Safeguarding Policy.

We use a privacy-friendly analytics service (Simple Analytics) to understand how our website is used. It does not use cookies, so there is no cookie banner to accept, and it does not collect personal data or store your IP address. It records only anonymous, aggregated information, such as the pages visited, the referring website and the type of browser and device used. You can manage or block cookies through your browser settings at any time.

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, by email. Please review this policy periodically to stay informed about how we protect your privacy.

If you have any questions about this Privacy Policy or wish to make a complaint about how we handle your data, please contact us using the details in Section 2.

You also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO), at any time: