Privacy notice

Last updated 10 October 2026

This page explains what Mashal Academy keeps when you use this website, why we keep it, who can see it, and how to have it deleted. It describes how the website works today.

What we collect

When you apply or request counselling

The form on the apply page asks for a name and a phone number. Everything else is optional: an email address, your city, your class or level, the batch you are interested in, and a message.

We also record the internet (IP) address the form was sent from, so that automated spam can be found and blocked. It is never shown on the website.

When you ask for WhatsApp updates

The sign-ups on the batches page and the Journal ask for a name and a WhatsApp number, and we note what you asked for: a message when new batches open, or the weekly guide.

When you browse

Like most websites, our web server keeps access logs: your IP address, your browser, the page you asked for and when. They help keep the site secure and working, and are rotated automatically, so older entries are deleted.

Google Analytics

We use Google Analytics to understand how the website is used: which pages are visited, how visitors found us (a search, a link, WhatsApp), the type of device and browser, the approximate city and country, which links out to WhatsApp or the booking page were clicked, and whether an application or sign-up was sent. We see this as totals and trends, not as a record of any one person.

It stores two cookies in your browser, named _ga and one beginning _ga_, so that it can recognise a returning visit. By default they last up to two years. Google says Analytics does not store IP addresses: it uses yours to estimate your location, then discards it.

We never send your name, phone number, email address or message to Google Analytics. To opt out, block cookies for this site in your browser, or install Google's Analytics opt-out add-on. Google explains its own use of this information in how Google uses information from sites that use its services.

What we do not collect

Apart from Google Analytics, there are no tracking scripts on this website, and no advertising scripts or tracking pixels at all. The only cookies on its public pages are the two Google Analytics cookies described above.
If you switch between the light and dark theme, that choice is saved in your own browser and never sent to us.
No payment is taken on this website. Fees are arranged with the academy directly.

Why we keep it

To get back to you about the application, counselling session or updates you asked for. If you go on to enrol, we also keep the further details needed to run your classes and your fees.

Who can see it

Mashal Academy staff with an account on our admin system. Your details are also handled by these services, which run parts of the website for us:

Our server and database, which we rent and manage, where applications and sign-ups are stored.
Cloudflare R2, which stores a nightly backup of that database. Backups are deleted automatically after a set number of days.
Resend, an email delivery service we may use to forward new applications to the academy's own inbox.
Supabase, which serves the photographs on this website. Like any web server, it sees your IP address when your browser loads an image.
Google, which runs Google Analytics and receives the browsing information described above, never the details you type into a form.

How long we keep it, and how to have it deleted

An application or sign-up stays in our system until a member of staff deletes it. To ask what we hold about you, or to have it deleted, email contact@mashalacademy.me or message us on WhatsApp at +92 301 4692397. Deleted details can remain in a database backup until that backup is itself deleted.

Changes to this notice

We update this page when the way the website handles information changes. The date at the top shows when it last changed.