Privacy Policy

Masjid As-Sunnah Islamic School · Last updated September 12, 2026

1. Who this covers

This policy covers the information Masjid As-Sunnah Islamic School (“the school”, “we”) collects when a family registers a child, and while that child attends. It applies to mas-sunnah.us and the registration, pickup and family pages hosted there.

Questions, corrections, or a request to delete your information: school.mas2@gmail.com · 407-935-0337 · 1535 S Hoagland Blvd, Kissimmee, FL 34746

2. What we collect

• About the family — parent and guardian names, home address, phone numbers, email addresses, and an emergency contact.
• About each child — name, date of birth, sex, class, and any illness or medication the parent tells us about so staff can respond safely.
• Consents — the liability waiver, photography permission, and text-message permission, each with the name and date given.
• While attending — attendance, class placement, books issued, tuition charged and payments recorded, and who is approved to collect a child.

We collect this because a school cannot enrol, teach, or safely release a child without it. We do not collect anything for advertising, and we run no analytics or tracking on these pages.

3. Text messages

If you agree to receive text messages, we use your mobile number only to send you tuition and book invoices, payment reminders, and school announcements. Agreeing is optional, is never a condition of enrolment, and you can withdraw it at any time on your family page or by replying STOP to any message. See our SMS Terms for the full programme description.

4. Who can see it

• School staff. Administrators see the school's records. A teacher sees only the children in their own class, and only what they need — including a medical note for a child in their room, because the adult present is the one who has to know.
• You. Each family has a private link to a page showing their own children, invoices and payments, and nobody else's.
• Nobody else. We do not sell, rent, or trade your information, and we do not share it for anyone's marketing.

We disclose information outside the school only where the law requires it, or where a child's safety demands it.

5. How it is protected

• Staff reach the records through an individual password-protected account. Accounts are approved by an administrator, and passwords are stored only as a salted, repeatedly hashed value that nobody — including us — can read back.
• Signed waiver and photo-consent images are stored privately and are not publicly reachable.
• The family page is reached by a long private link rather than a guessable address.

6. Services we rely on

The records live in Google (Sheets, Drive and Apps Script), the site is served by Cloudflare, email is sent through Google, and — if you have agreed to texts — messages are delivered by Telnyx. These providers process the information on our behalf in order to run the school. Page fonts are loaded from Google Fonts, which means Google can see the address of a device that opens the page.

7. How long we keep it

We keep a family's records for as long as a child attends, and afterwards for 5 years so that we can answer questions about attendance, payments and consent. Ask us and we will delete what we are not required to keep.

8. Children

The information we hold about a child is given to us by that child's parent or guardian, and is used only to run the school. We do not knowingly collect information directly from children, and we do not use it for advertising of any kind.

9. Your choices

• Ask us what we hold about your family, and have anything wrong corrected.
• Withdraw photography permission or text-message permission at any time, without affecting your child's place.
• Ask us to delete your records once your child no longer attends.

10. Changes

If this policy changes we will update the date at the top of this page. If the change affects how we use your information, we will tell you directly.