Madrassah Fatima Tu Zahra, based in Batley, West Yorkshire, is the data controller for the personal information held on this website and in the MFTZ portal. Contact: info@mftz.org.uk or 07467 009847. [ICO registration number, if registered.]

• Applications: applicant and guardian details, to consider the application (legitimate interests / steps before enrolment).
• Enrolled students: contact details, attendance, progress, assessments and reports, to teach and care for students and keep families informed (contract and legitimate interests).
• Medical, allergy and SEND information you choose to share, to keep students safe (explicit consent, or vital interests in an emergency).
• Fees and payments, to bill and issue receipts (contract and legal obligations).
• Safeguarding records, only where needed to protect a child (legal obligation and substantial public interest).
• Staff records: employment, rota, leave and payroll (contract and legal obligations).
• Messages sent through the contact and feedback forms, to reply to you (legitimate interests).

Access is limited by role: parents see only their own children; teachers see only the students they teach; payroll and safeguarding records are restricted further. Staff accounts use two-step verification.

We use these service providers under contracts that require them to protect your data: Supabase (database, sign-in and file storage, UK/EU hosting), Vercel (website hosting), Resend (sending emails), Stripe (card payments: we never see card numbers) and, if you turn on browser notifications, your browser's push service (messages are encrypted). We do not sell personal data or use it for advertising.

• Applications that do not lead to a place: 12 months after the decision.
• Student records: [while enrolled plus 6 years].
• Financial records: 6 years after the end of the financial year.
• Notifications: 12 months. Email logs: 24 months. Audit logs: 6 years.
• Contact and feedback messages: 2 years.

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict its use, and withdraw consent at any time by emailing info@mftz.org.uk. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).