Privacy page

Simple words. No small print.

Version 2026-09-v3. For madrasa.om. Written to follow Oman's Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulation.

Who we are

Madrasa (madrasa.om), Muscat, Sultanate of Oman, is responsible for your details (the law calls this the “controller”). You can write to us at hello@madrasa.om.

What Madrasa is

Madrasa is a survey. We count Indian and South Asian families in Oman who would consider moving their children to an Omani private school. We also count schools that are ready to offer these families a fair fee. Adding your family is not a school admission. We are not an agent for any school.

What we collect

From parents, only what you type in the form:

• Your surname, email address and phone number.
• The city and area where you live.
• How many children you have in school, their classes, and where they study now.
• The total monthly school fees you pay, how much more you can pay, and when you want to change.
• Your reasons for wanting to change, and anything you write in your own words.
• Your permission choices, the exact words you agreed to, the date and time, the page you were on, your internet (IP) address and your browser type. We keep this as proof that permission was given properly, as the law requires.
• Basic technical details: the page you came from, and campaign tags in the link, if any.

We do not collect children's names, dates of birth, or anything about one child. We do not collect anything the law calls sensitive data. The form is for adults only.

From schools: the school's name, location, curriculum, fees, class sizes, seats, the offer you make, and your contact details.

Why we collect it

• To understand demand by area, class and budget, and to share totals publicly. Totals never show a name.
• To show schools where the families are, without names, unless you tick the box that lets schools contact you.
• To email you when something changes for you, for example a school making an offer in your area.
• To run your account: log you in with a one-time code, and let you change, stop or delete what you gave us.

Your account

When you finish the form we email you an 8-digit code. Typing that code creates your account and saves your answers at the same time, so nothing about you is stored until you have shown the email address is yours. Until then, your answers sit only in your own browser. You can log back in with a fresh code any time to change or delete everything.

Proof of your permission

Each time you tick, untick, or take back a permission, we save a separate record: what you agreed to word for word, when, from which internet address and with which browser. These records cannot be edited or deleted by anyone, including us. They exist so that we can show a regulator exactly what you were asked and what you answered. You can read your own record, and download a copy, from your account.

Our right to use your details

Your permission. You give it by ticking the boxes at the end of the form. Two boxes are needed to save your answers at all. The third box, letting schools contact you, is your choice and is separate. You can take back any permission at any time from your account. Taking it back does not change anything done before.

Where your details are kept

On Supabase servers in the European Union (Frankfurt, Germany). That is outside Oman, so we ask for your clear permission for this, as Oman's law requires. The privacy law there (the EU's General Data Protection Regulation) is at least as strong as Oman's. Supabase works for us as a “processor” and does not use your details for itself.

Who can see your details

• The Madrasa team, for the reasons above.
• Schools that join Madrasa: only your surname and contact details, only if you switched school contact on, and only about admission and fees.
• Nobody else. We do not sell, rent or swap personal details. Public totals never identify a person.
• Government authorities, if the law obliges us.

How long we keep them

Until you delete them, or 24 months after the September intake you chose, whichever comes first. Then they are erased. The permission records above are kept for three years so we can answer any question about how consent was collected. Once your account is deleted, those records no longer carry your name, email or phone number: only the date, the wording, and a record number.

Your rights

• See everything we hold about you: log in at madrasa.om/account.
• Correct it: open the form again from your account and change any answer.
• Take back your permission and delete everything: one button in your account. It works at once. No questions asked.
• Object, limit, or ask for a copy of your details: email us and we will do it within the time the law sets.
• Complain to the Ministry of Transport, Communications and Information Technology, which looks after data protection in Oman, if you think we got something wrong.

Cookies and storage on your device

We set no advertising or analytics cookies. Your browser keeps a draft of the form while you fill it in, and your login after you confirm your email. Both stay on your own device. Clearing site data removes them.

We use hCaptcha to check that a real person is filling the form, and not a machine. hCaptcha is run by Intuition Machines, Inc. It sees your internet (IP) address and some information about your browser, and it may set a cookie on your device. It is there only to stop abuse. See the hCaptcha privacy policy.

Security

The site has no server of its own. Your browser talks directly to the database over encrypted connections. Database rules make it impossible for one account to read another account's details. Login uses a one-time code sent to your email, so there is no password to lose.

Changes

If we change what we collect or why, we will change the version number at the top and ask for your permission again before it applies to you.