Privacy policy
The effective date has not been published yet.
Yasmine Center is a trading name of Yasmine Arabic School (company number available from the school on request, registered at an address we give you in writing on request), which provides live online Arabic lessons for children. The data controller for the personal data described here is Yasmine Arabic School, contactable at hiba@yasmineschool.com. This policy explains what personal data we collect, why, and the choices you have.
1. Data we collect
Account data: parent name, email, phone (optional), password (stored only as a secure hash), language and timezone. Child data: first name, age, gender, avatar choice, learning track, level and progress (lessons, homework scores, stars, badges, certificates). Lesson data: bookings, the Google Meet link used, and the teacher's written feedback report. Payment data: we never see or store card numbers — Stripe processes payments and we keep only the amount, date and a payment reference. Support data: messages you send via the contact form or WhatsApp. We deliberately collect the minimum needed to run lessons well.
2. Children's data
Children cannot create accounts themselves: every child profile is created and controlled by a parent or legal guardian. We collect only the child data listed above, never request a child's contact details, and never use children's data for advertising or profiling. For children under 13 in the United States, we give parents direct notice and obtain verifiable parental consent before collecting anything, by this method: the parent creates the account, confirms their own email address, and enters the child's details themselves — we never collect anything from a child directly. Parents can review, correct or delete their child's data at any time from the dashboard or by emailing hiba@yasmineschool.com.
3. Lessons are not recorded
Lessons take place live on Google Meet in your teacher's own meeting room. Yasmine Center does not record lessons, does not store recordings, and has no recording review process. Whether a teacher may record her own lesson is set out in her contract with the school; ask us and we will tell you what it says for your child's teacher. Google processes the video call itself under its own terms; nothing from the call reaches our systems except the teacher's written report.
4. Why we use data, and on what legal basis
We use data to run lessons (matching teachers, scheduling in your timezone), track learning progress, process payments, send service notifications, provide support, and keep children safe. We do not sell personal data, and we show no third-party advertising. The lawful basis for each purpose under Article 6 UK/EU GDPR is set out here: the lessons you buy rest on our contract with you; safety, security and fraud prevention on our legitimate interests; tax and accounting records on a legal obligation; and optional messages on your consent, which you can withdraw at any time.
5. Sharing and international transfers
Teachers see only what they need to teach: the child's first name, age, level, progress and lesson history — never your payment details. Our processors are Supabase (database hosting), Vercel (application hosting), Stripe (payments), Resend (email) and Google (Meet video calls), each under a contract that binds them to this policy. Where data leaves the UK or EEA, the transfer relies on: the standard contractual clauses published by each of the processors named above. We disclose data to authorities only where the law requires it or a child's safety demands it.
6. Security & retention
Passwords are hashed, sessions are encrypted, and access to personal data is role-restricted. We keep each category of data for a defined period and then delete or anonymise it: we have not yet published a table of periods, so ask us and we will tell you exactly what we hold about your family and for how long
7. Cookies
We use only the cookies this site needs to work: one that keeps you signed in, and one that remembers your language. We set no advertising cookies and run no third-party tracking or profiling.
8. Your rights
You may access, correct, export or delete your family's data, withdraw consent, and object to specific processing. Email hiba@yasmineschool.com and we will respond within 30 days. Families in the EU or UK may also contact our representative: we have not appointed a separate representative, so write to the address above and it reaches the school directly. If you remain unsatisfied you may complain to the data-protection authority of the country in which the school is established or to your own local data-protection authority.
9. Records of the messages we send you
We keep a record of every service email we send you — welcome messages, trial and lesson confirmations, reminders, lesson reports, receipts, credit-expiry warnings, cancellations and password-reset links — together with the date and whether it was actually delivered. We keep the same record of the notifications shown inside your dashboard, including whether they were opened. This exists so we can answer questions like "nobody told me the lesson was cancelled" with a factual answer rather than a guess. Support messages you send us are read by school staff, and staff can reply to you by email from inside our system; those replies are stored against your message. A school administrator can ask us to send a password reset link to your own registered email address — for example when you tell us you are locked out. No one at the school can see your password, is told it, or chooses it for you; only you set it, using the link. Every such action is recorded with the staff member's name, the time and a written reason. We keep these records under the same retention rules: we have not yet published a table of periods, so ask us and we will tell you exactly what we hold about your family and for how long. You can ask for a copy of yours, or ask us to correct it, at hiba@yasmineschool.com.
10. Messages sent through the platform
Yasmine Center runs a messaging service inside your account so you can write to the school and to your child's teacher. Because these are messages about children, they are not private between two people: every message sent through the platform is stored, and the school's administrator can read any conversation in full at any time — including messages between a parent and a teacher. We do this so we can answer a safeguarding concern, check how a child is being taught, and settle a disagreement from the record rather than from memory. The same statement appears above every box you type into. How long we keep a conversation after its last message: for as long as your family's account is open — we have set no shorter deletion period yet, and we delete a conversation sooner whenever you ask. If the school removes a message, its original text stays visible to the administrator alone, so deleting can never destroy the record. Nothing you send is scanned for advertising or shared outside the school, except where we are legally required to report a child-protection concern. If you would rather not use it, WhatsApp and email are still open to you.
11. Changes & contact
If we change this policy materially, we will notify you by email or dashboard notice before the change takes effect, and the effective date at the top of this page will change. Questions? Email hiba@yasmineschool.com — a human will answer.