On this page
At a glance
What we collect
We collect only what you send us through our forms, and the technical details that any website receives.
What we never do
We never sell your information or use it for advertising, and we use analytics cookies only if you allow them.
Where it is stored
In our client records system, in a database in Canada. Our website host passes forms on and doesn’t keep them.
Your rights
You may see, correct or delete your information at any time. We reply within 30 days.
Who we are and what this policy covers
Hikmah Education is preparing to open a learning centre in Ottawa, Ontario, for students from Grade 1 to Grade 12. The centre is not yet open. This policy explains what personal information we collect through our website, hikmahedu.ca, why we collect it, who we share it with, how long we keep it, how we protect it and the rights you have. It applies to parents and persons responsible who join our waitlist, to anyone who writes to us through our contact page, to people who register interest in working with us, and to visitors to the website. It follows Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles. When the centre opens and our learning platform launches, we will give families a further notice about the information we need for enrolment and learning.
In brief
We collect only what you choose to send us, and the technical information any website receives. We use it to reply to you, to plan our opening and to consider you for roles. We do not sell it and we do not use it for advertising. This website uses Google Analytics only if you allow it. Forms you send go straight to our client records system, whose database is in Canada. You can ask to see, correct or delete your information at any time, and we will respond within 30 days.
Accountability and our privacy officer
Hikmah Education is responsible for the personal information it holds, including information handled for us by our service providers. We have a privacy officer who is accountable for our compliance with this policy and with privacy law, who answers questions and requests, and who will train every member of our team as we hire. You can reach our privacy officer through our contact page by choosing “Privacy request”. Once our business is registered, we will add our legal name to this policy.
Information you give us on the waitlist form
When you join the waitlist, we collect your name and email address, your agreement that we may contact you about the waitlist and, if you tick the optional box, your consent to receive occasional updates and news. If you choose to provide them, we also collect your telephone number, your child’s first name and grade, the programs that interest you, your neighbourhood or the first three characters of your postal code, your preferred language, any message you write, whether you would like a call and, if you choose to attach it, the summary of the AI-readiness check. We do not ask for a child’s surname, date of birth or school.
Information you give us on the contact form
When you write to us through our contact page, we collect your name, your email address, the topic you choose, your message and, if you choose to provide them, your telephone number and your consent to receive occasional updates and news. Please do not include sensitive information, such as health information or information about your child’s learning needs, in your message. If you do, we will use it only to answer you.
Information you give us about careers
When you register interest in working with us, we collect the role you choose or your general interest, your first and last name, your email address, your city, a link to your résumé, portfolio or professional profile, what draws you to this work and your consent for us to keep your information to contact you about roles. Your telephone number is optional, and so is your consent to receive news about future roles. If you share a link, we may view the page it leads to. We do not ask for your date of birth, social insurance number or any information about a disability at this stage; if you need an accommodation, you may tell us whenever you choose.
Information collected automatically
Like any website, ours receives technical information from your browser when you visit, such as your IP address, the type of browser and device you use, the page you asked for and the time of your visit. Our website host processes this information to deliver the website, keep it secure and protect it from abuse, including filtering spam from our forms. We do not use it to identify you, to build a profile of you or for advertising. When you send a form, it also carries the page you sent it from and, if you arrived through a link with campaign tags (for example from a newsletter), those tags.
Analytics, only if you allow it
If you choose to allow analytics, in the banner, the cookie settings or on our privacy choices page, this website loads Google Analytics through Google Tag Manager, both provided by Google LLC. Google Analytics places cookies in your browser and records how the website is used: the pages you view, how you arrived (for example from a search or a campaign link), the type of device and browser you use and your approximate location, such as your city. It does not receive your name, your email address or anything you type into our forms, and the code in a readiness link our centre sends you is removed from the page address before anything is recorded. We use these statistics only to understand which pages help families and to improve the website. We tell Google that the information may not be used for advertising or ad personalization. Google processes it in the United States and elsewhere, and keeps it for no more than 14 months. Analytics stays off until you allow it and stays off when your browser sends a Global Privacy Control signal. You can turn it off at any time; when you do, we stop loading it and remove its cookies from this website.
The AI-readiness check
The AI-readiness check works out your results in your browser. To open the full report, you give us your name and email address and your child’s grade, and, if you choose, your child’s first name and your postal code; we then receive those details with your answers and the score for each of the six capacities, so that a mentor can contact you about your child’s results. If you tick the separate box, we also send you occasional news. We treat this information like the rest of your inquiry information: it is stored in Canada, used only to talk with you about your child and our programs, and removed within 12 months, or sooner if you ask. The results are also kept briefly in your browser so that you can choose to attach them to the waitlist form, and they are cleared when you close the tab. If you open the check from a link our centre sent you, the page tells you before you start that your answers and results will go to the centre when you finish, so that your child’s mentor can go through them with you; they are then kept with your family’s record.
Why we collect it
We tell you why we collect information at the time we collect it, and we use it only for those purposes. We use waitlist information to tell you about our opening and your founding-family offer, to arrange any call you ask for, and to help us decide where to open, which programs to offer first and which languages and grades to plan for. We use contact messages to answer you and to keep a record of what we discussed. We use career-interest information to consider you for roles and to contact you about them. We use technical information to run and secure the website. If we want to use your information for a new purpose, we will ask for your consent first, unless the law allows or requires the new use.
Consent
We ask for your consent to collect, use and disclose your personal information, and we explain what we are asking for in plain language. When you send us a form, you consent to the uses described on that form and in this policy. Optional fields are optional: leaving them blank will not prevent you from joining the waitlist or contacting us. We ask for express consent before sending email updates, and the consent box is never ticked in advance. You may withdraw your consent at any time, subject to legal or contractual limits and reasonable notice; we will tell you what withdrawing will mean, for example that we can no longer tell you when we open. In limited cases, the law allows us to use or disclose information without consent, for example to comply with a court order or to protect someone’s safety in an emergency.
Children and teenagers
Our forms are for adults, and we do not knowingly collect personal information directly from children under 13. Any information about a child comes from a parent or person responsible, who consents on the child’s behalf. In Quebec, we ask for the consent of the parent or person responsible for a child under 14. When our centre opens, we plan to ask for the consent of the parent or person responsible for every learner under 18, and to explain to teenagers, in words suited to their age, what we record about them and why. Our children’s data page explains this in more detail.
Limiting what we collect
We collect only the information we need for the purposes we have identified. That is why most of our form fields are optional, why we ask for only part of your postal code and why we ask for only a child’s first name and grade. We do not buy information about you from others, and we do not combine what you send us with information from other sources.
How we use and disclose information
Only the people at Hikmah Education who need your information to reply to you, plan our opening or consider you for a role can see it. We do not sell, rent or trade personal information, and we do not disclose it to anyone for their own marketing. We disclose it only to the service providers described below, who handle it on our behalf; when the law requires it, for example in response to a valid court order; when needed to protect the safety of a person or to investigate fraud or misuse of our website; or, if our business is ever reorganized, sold or merged, to the other party, under an agreement that requires them to protect it and use it only for the same purposes. If that happens, we will tell you.
Service providers and storage outside Canada
We use trusted service providers to run our website and our work. Our website is hosted by Netlify, Inc., which processes the technical information described above and passes the forms you send to our client records system. Netlify is based in the United States, and information may be processed there or in other countries where it or its own providers operate. If our records system can’t receive a form right away, Netlify holds it for us until it can, for no more than 90 days. Our client records system, which our team uses to reply to you and to plan our opening, has its database hosted by Supabase in Canada; the application runs on Netlify. We use Google Workspace for email and documents, so messages and information you send us may be held by Google in the United States or elsewhere. If you allow analytics, Google LLC also processes the analytics information described above. We choose providers that protect information with appropriate safeguards and that may use it only to provide their services to us. Information stored outside Canada is subject to the laws of the country where it is held, and the courts, law enforcement and national security authorities of that country may be able to obtain access to it.
How long we keep it
We keep personal information only as long as we need it for the purposes we have identified, or as the law requires. We remove personal information within 12 months after our last contact with you, or after your family stops working with Hikmah: waitlist information, contact messages and career-interest registrations alike, unless you become a Hikmah family, we hire you, or you ask us to delete it sooner. If your family enrols, the same rule applies when you leave, except basic records the law requires us to keep, such as payment and tax records, which we keep only as long as required. What we keep afterwards is anonymous: information that can’t identify you or your child, which we use to measure and improve our teaching. Technical information is kept by our website host for its own limited period. When we remove information, we delete it securely. If you ask us for access to your information, we will keep it for as long as you need to exhaust any recourse you have under the law.
Keeping information accurate
We rely on you to give us accurate information and to tell us when it changes. If you notice something is wrong, such as a misspelled name or an old email address, tell us through our contact page and we will correct it. If we have shared the inaccurate information with a service provider, we will make sure the correction reaches them too.
How we protect it
We protect personal information with safeguards suited to its sensitivity. These include encrypted connections to our website, access limited to the people who need it, strong passwords and two-step sign-in on our accounts, keeping devices up to date and locked, and requiring our service providers to protect information to a comparable standard. As we hire, we will train every member of our team in privacy and confidentiality. No system is perfectly secure, so we review our safeguards regularly and will strengthen them as we grow, especially before we handle any information about children’s learning.
Openness about our practices
We want our practices to be easy to understand. This policy, our children’s data page and our privacy choices page are always available on our website, in English and French. If you would like any of them in another format, or explained in another way, please ask.
Seeing and correcting your information
You may ask us whether we hold personal information about you, how we have used it and to whom we have disclosed it, and you may ask for a copy of it. You may also ask us to correct it or to delete it. Use our contact page and choose “Privacy request”. We will confirm your identity before we act, to protect your information, and there is no fee. We will respond within 30 days. If we need more time, which PIPEDA allows in some cases for up to a further 30 days, we will tell you why and when to expect a reply. If we cannot give you access to some information, for example because it would reveal information about another person or because the law prevents it, we will tell you why and how you can challenge our decision.
Questions and complaints
If you have a concern about how we handle personal information, please tell our privacy officer through our contact page, choosing “Privacy request”. We will look into every concern, tell you what we found and, if we got something wrong, put it right and change our practices where needed. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada, which oversees PIPEDA. If you live in Quebec, you may also contact the Commission d’accès à l’information du Québec.
Email and Canada’s anti-spam law
We send email updates about our opening only to people who have given express consent by ticking the consent box on our form, which is never ticked in advance. We keep a record of when and how you gave consent. Each update identifies Hikmah Education, explains how to reach us and includes a working unsubscribe link. We process unsubscribe requests promptly and within 10 business days, as Canada’s Anti-Spam Legislation requires. Replies to a message you send us, and messages needed to answer a privacy request, are not marketing and do not require this consent.
Children’s information
This website is intended for parents and persons responsible for children, and we do not knowingly collect personal information directly from children under 13. The only information about a child that we ask for is an optional first name and grade, and the programs that interest them, provided by a parent or person responsible. Our children’s data page explains our approach in more detail, including parental consent, how we treat teenagers, and our commitments for the centre and the learning platform we are building, which will hold information such as diagnostic results, mastery data and mentor notes.
Your privacy choices and Global Privacy Control
We do not sell personal information, and we do not share it for advertising. If your browser sends a Global Privacy Control signal, we treat it as a valid request to opt out of any sale or sharing of your personal information and of any analytics or marketing tools for that browser. You may review and set your preferences, and learn how to withdraw consent or make a request, on our privacy choices page.
If you live in Quebec
If you live in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25) gives you additional rights. You may ask to be informed of the personal information we hold about you and how it is used, to have it corrected, to withdraw your consent, to have us stop disseminating it or de-index any link to it where the law allows, and to receive personal information you gave us in a structured, commonly used technological format. You may also ask to be informed if a decision about you is made solely by automated processing; we do not make such decisions today. Our privacy officer is the person in charge of the protection of personal information for the purposes of Quebec law, and can be reached through our contact page. For a child under 14, we ask for the consent of the parent or person responsible. Because our service providers store information outside Quebec, we assess the protection it will receive before it is transferred, as Quebec law requires. If you are not satisfied with how we handled a request, you may contact the Commission d’accès à l’information du Québec.
If you live in California or another US state
Hikmah Education is a Canadian organization that serves families in Ontario, and some US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act, may not apply to us. We choose to honour the rights they describe. In the past 12 months, we may have collected these categories of personal information: identifiers and contact details (such as your name, email address and telephone number); information about your family’s interest in our programs (such as your child’s first name and grade, and your neighbourhood or partial postal code); professional information you share about career interest; and technical information that your browser sends when you visit (such as your IP address). We collect it from you and from your browser, for the purposes described in this policy, and we disclose it only to service providers for business purposes. We do not sell or share personal information, have not done so in the past 12 months and have no actual knowledge of selling or sharing the information of anyone under 16. We do not collect sensitive personal information to infer characteristics about you. You may ask to know what we collect, use and disclose, to receive a copy, to delete it, to correct it and to opt out of its sale or sharing. We honour Global Privacy Control as an opt-out request. We will not discriminate against you for exercising these rights. To make a request, use our contact page and choose “Privacy request”; you may use an authorized agent, and we will confirm your identity before we act. If we decline your request, you may appeal by replying to our response, and we will explain our decision.
If there is a privacy breach
If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada as soon as feasible, as Canadian law requires. We will tell you what happened, what information was involved, what we have done and what you can do to protect yourself. We will also notify any other organization that may be able to reduce the harm. If you live in Quebec, we will notify you and the Commission d’accès à l’information du Québec of any confidentiality incident that presents a risk of serious injury. We will keep a record of every breach, as the law requires, and notify people in other places where their law requires it.
Changes to this policy
We will update this policy as our plans develop, and in particular before the centre opens, before our learning platform launches and if we begin to use new service providers or tools. When we do, we will post the new version on this page with a new date. If a change is significant, or if we want to use your information for a new purpose, we will tell you by email or on the website and, where the law requires it, ask for your consent before the change applies to you.
How to contact us
For any question about this policy, to make a privacy request or to reach our privacy officer, use our contact page and choose “Privacy request”. We will reply in English or French, as you prefer. Once our business is registered and our centre has an address, we will add our legal name and mailing address to this page.