Privacy Policy (Draft)
Last updated: [to confirm]
This is a draft for review — not a finished legal document. It has not been reviewed by a lawyer and must be before NoorPath accepts real signups or real payments.
- What we collect. Account details (name, email, role), booking and class history, forum posts, and — for parent accounts — information about linked children needed to manage their classes.
- What we don't do. We don't sell personal information to third parties.
- Payments. [To confirm: once a real payment processor is connected, this section must describe exactly what payment data is collected and by whom — e.g. "NoorPath never stores your full card number; that's handled by [processor]." Do not publish a payments-privacy section before the real processor is chosen.]
- Children's data. Because many students are minors, children's accounts are managed through a parent account. [To confirm: specific children's-privacy compliance requirements for each region NoorPath launches in — this needs a lawyer's review, particularly for any market outside Bangladesh.]
- Data storage & security. [To confirm: where data is hosted and how it's secured, once the production infrastructure is finalized.]
- Your rights. [To confirm: process for a user to request their data or request deletion, once decided.]
- Contact for privacy questions. [to confirm — likely the same contact as the Contact page above, or a dedicated privacy email.]