Privacy | Alfurqan Institute

Who holds it

Who holds your details

Alfurqan Association Inc. (ABN 64 940 233 117), the incorporated association that runs Alfurqan Institute.

Your details are held by the people who run enrolment at the institute, in one register with one named owner. They are not kept in anyone's personal phone or in a chat group.

What we collect

Only what we need to enrol you and run the class.

On the enrol formYour name, email and mobile, how you heard about us, which course you want, whether you will come to the centre or join online, your gender (brother or sister), your date of birth, and whether you want the course book as a PDF or already have it. If you ask to pay in instalments, how many payments and the reason you give; only our staff see the reason, and it is never shown in your portal.

From Stripe, when you payThe name and email given at checkout, your mobile when the checkout asks for it, the last four digits of the card, the payment reference, and the answers to the questions on the payment page, which we use to match the payment to your booking. Your full card number never reaches us. Stripe keeps it.

From the website itselfWhen the form is saved, the storage also records which country your connection came from. The site sets no cookies and runs no analytics or advertising trackers.

Enrolling in an Islamic institute can say something about your religious beliefs. We treat that as sensitive information and take a higher standard of care with it. We hold it to run your class and to tell you about the next term of the course you enrolled in, and you can opt out of those messages by replying to any of them. We never use it for anything else and never hand it to another organisation for its own use.

Two questions people ask about

Why we ask for your date of birth and gender

Each one decides something real about your enrolment, and neither is used for anything else.

Date of birthEvery class we run is for adults, 18 and over. Your date of birth is how we check that before we take your place. We do not use it for anything else.

GenderBrothers and sisters learn in separate classes, and some programs are for sisters only. Your answer puts you in the right class and nothing more.

Who sees it

Five parties, each for one reason, and a sixth only if you join online.

StripeTakes the payment. Stripe processes payments on systems outside Australia, so your payment details are handled overseas under Stripe's own privacy policy.

CloudflareHosts the website and stores what you type into the form on its worldwide network, so a copy of your form sits outside Australia.

ResendOur email delivery service. The moment you register, a copy of your form (name, email, mobile, course, seat, gender, date of birth, book format, how you heard and, if you ask to pay in instalments, the number of payments and your reason) is emailed to our enrolment desk through Resend, which runs on servers outside Australia, so your form details pass through it on the way to our inbox.

GoogleOur email is Gmail and our enrolment register is kept in the Association's own Google Drive, so Google stores both for us, and may do so outside Australia.

Your teacherGets your name and email, and marks your attendance. Your teacher does not see your phone, date of birth or payment details.

If you join onlineIf a class is ever run online, we tell you which video service it uses before you join. That service sees your name when you join and follows its own privacy policy.

We never sell your details, never share them with advertisers, and never hand them to another organisation for its own use.

How long

How long we keep it

Two rules, one for people who paid and one for people who only registered interest. The person who holds the register goes through it at the end of every term and deletes whatever has passed its date: the row in the register, the copy in the website's storage, and the notification email in our inbox. Deleting a record means all three.

If you enrolled and paidWe keep your enrolment record for the term, and after that for as long as the law requires a financial record to be kept, because a payment is one. When that period ends we delete it.

If you registered interest but did not payWe delete your registration once the course you asked about has started and everyone on its list has been contacted. If that course has not started yet, we keep your name on its list until it does, or until you ask us to take you off.

What we cannot deleteStripe keeps its own record of every payment under its own rules, and we cannot delete that for them.

Your rights

Ask for a copy, a correction or deletion

Email alfurqaninstitute.vic@gmail.com from the address you enrolled with, and say which of the three you want.

We reply within 24 to 48 hours, and we tell you when the copy has been sent, the correction made or the record deleted. We send a copy only to the email address on the record, so nobody else can ask for your details in your name.

If you ask us to delete a record we have to keep for financial reasons, we will tell you that, and tell you the date it will go.

If you are not happy

Complaints

Tell us first and we will try to put it right. If you are still not satisfied, the Office of the Australian Information Commissioner at oaic.gov.au explains how privacy complaints work.

This page was last updated on 9 October 2026.

What we keep, and why.