Privacy Policy

1. Who is responsible

Muslim Family Academy, United States, is the controller of the personal information described here. Paddle.com, our reseller and Merchant of Record, is the controller of the payment information you give at checkout and processes it under its own privacy policy. Contact us at support@muslimfamilyacademy.org.

2. What we collect

• Purchase information: your email address, name, and billing country and postal code (shared with us by Paddle), what you bought, and the amount. We never receive or store your card details.
• Free preview and contact forms: the email address (and name and message, for the contact form) you give us.
• Download records: when a guide is downloaded, the time, your browser type, and a one-way scrambled (hashed) version of your IP address, used to enforce download limits and prevent link sharing.
• Visit information: a random visitor ID stored in a cookie, the pages you view, and how you arrived (for example which Instagram post or link, and campaign tags in the link). This tells us which content is helpful. It is not linked to your identity unless you later buy or sign up.
• Advertising measurement (only if allowed, see section 5): Meta Pixel and Meta Conversions API events such as page views, sign-ups, and purchases, with your email address and visitor ID sent in hashed form.

3. How we use it, and our legal bases

• To deliver your guides, give you access to My Library, send your receipt and download emails, and provide support (performance of a contract).
• To send the free preview you requested and occasional related guidance, which you can unsubscribe from at any time (consent and legitimate interest).
• To prevent fraud, abuse, and sharing of paid files, and to keep the website secure (legitimate interest).
• To understand which content and campaigns are useful, and to measure our advertising (legitimate interest, and consent where the law requires it).
• To meet legal and accounting obligations (legal obligation).

4. Who we share it with

We share information only with service providers who help us run the store, under contracts that protect it:

• Paddle.com (checkout, payments, tax, invoicing, refunds).
• Supabase (database and secure file storage) and Vercel (website hosting).
• Resend (sending our emails).
• Meta Platforms (advertising measurement, only where allowed).

We may also disclose information when required by law. We never sell or rent your personal information.

5. Cookies

• Essential: mfa_session keeps you signed in to My Library. Admin sign-in cookies are used only by our staff.
• Measurement (first party): mfa_vid (random visitor ID, 12 months), mfa_attr (how you arrived, 30 days), mfa_cc (your country, to decide whether to ask for cookie consent, 7 days). This data stays with us.
• Advertising: _fbp and _fbc (Meta Pixel, up to 90 days). Visitors in the UK, the EU and EEA, and Switzerland are asked first, and these are only set if you choose Accept. Your choice is remembered in mfa_consent for 12 months. To change it, clear this site's cookies in your browser and you will be asked again.
• Checkout: Paddle sets its own cookies inside the secure checkout window to process your payment and prevent fraud.

6. How long we keep it

• Purchase records: for as long as you have access to your guides, and at least as long as tax and accounting law requires.
• Free preview sign-ups: until you unsubscribe or ask us to delete them.
• Visit and download records: up to 24 months, then deleted or anonymised.

7. Your rights

Depending on where you live, you can ask to access, correct, delete, or export your information, object to or restrict how we use it, and withdraw consent at any time. Email support@muslimfamilyacademy.org and we will respond within 30 days. If you are unhappy with our answer, you can complain to your local data protection authority (in the UK, the ICO).

8. International transfers

Our providers may process information outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. Security

Your files are stored in a private bucket and are only ever delivered through short-lived signed links. Download, sign-in, and session links are stored only as one-way hashes, and connections to the website are encrypted. No system is perfect, but we work hard to protect your information.

10. Children

Our guides are for adults who are married or preparing for marriage. We do not knowingly collect information from anyone under 18.

11. Changes

We will update this page if our practices change, and show the new date at the top.