This Privacy Notice explains how Mishab Pullat trading as Muslim Family Academy (“we”, “us” or “our”) collects, uses, stores and shares your personal data when you use our website, ebooks and membership services.
1. Who we are
Mishab Pullat is the data controller for the personal data described in this notice. We are responsible for deciding how your information is used and protected.
2. What personal data we collect
- Account data: name, email address and password when you register or sign in.
- Profile data: display name, preferences and membership status.
- Payment data: Paddle processes your card and billing details on our behalf. We do not store full payment card numbers.
- Usage data: pages viewed, ebooks read and downloads accessed.
- Device and log data: IP address, browser type, device identifiers and approximate location for security and analytics.
- Support data: messages you send to customer support.
3. How we use your data
- To create and manage your account and provide access to purchases.
- To process payments, subscriptions, refunds and tax invoices.
- To keep the platform secure, prevent fraud and enforce our terms.
- To respond to support requests and improve our products.
- To send service updates and, where permitted, marketing about new ebooks and bundles.
4. Legal basis
We process personal data on the basis of: (a) performance of a contract with you; (b) our legitimate interests in running a secure and effective service; (c) your consent, where required; and (d) compliance with legal obligations such as tax and accounting rules.
5. Who we share data with
- Paddle.com Limited — our Merchant of Record for payment processing, subscription management, tax compliance and invoicing.
- Service providers — hosting, analytics, email delivery and customer support tools.
- Professional advisers — lawyers and accountants when necessary.
- Authorities — when required by law or to protect our rights.
6. International transfers
Some of our service providers operate outside the country where you live. When we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions approved under applicable data protection law.
7. Data retention
We keep your personal data only as long as necessary for the purposes described above, including to meet legal, tax and accounting requirements. When no longer needed, we delete or anonymise the data.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict processing of your personal data, to object to processing, and to receive your data in a portable format. You may also withdraw consent at any time. To exercise your rights, contact us through your account page or at the email shown in your order confirmation.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and regular security reviews.
10. Cookies
We use essential cookies to keep you signed in and maintain your session. We may also use analytics cookies to understand how visitors use the site. You can manage cookie preferences through your browser settings.
11. Changes to this notice
We may update this Privacy Notice from time to time. The latest version will always be posted on this page with the updated date.