Riyaaz Academy Privacy Policy

Last Updated: October 27, 2025

Riyaaz Academy (“Riyaaz Academy,” “we,” “us,” or “our”) provides online learning services focused on music education, including qawwali and related courses, via riyaazacademy.org and our subdomains, mobile experiences, and other services we operate (collectively, the “Services”).

We respect your privacy and are committed to protecting it. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using the Services, you agree to the practices described here.


1) Who we are & how to contact us

Data Controller (GDPR): Riyaaz Academy, 3400 Main St #14, Houston, TX 77002, USA
Email: [email protected]
Postal: Riyaaz Academy, 3400 Main St #14, Houston, TX 77002, USA


2) Scope

This Policy applies to personal information we collect about:

It does not cover websites, apps, or services we do not control. Please review their policies before sharing information.


3) Key terms


4) What we collect

A. Information you provide

B. Information collected automatically

C. Information from third parties


5) How we use your information

We process personal data for these purposes (and corresponding GDPR legal bases in parentheses):

We do not use learner recordings for model training or automated decision-making that has legal or similarly significant effects without your consent or another valid legal basis.


6) Cookies, analytics & ads

We use:

Your controls

We currently do not respond to Do Not Track (DNT) signals.


7) Payment processing

Transactions are processed by third parties (e.g., Stripe, PayPal). They receive the information necessary to process your payment and handle it per their privacy policies and PCI-DSS requirements. We do not store full payment card numbers.


8) How we share information

We do not sell your personal information. We may share as follows:

We may share aggregated/de-identified information that cannot reasonably identify you.


9) International data transfers

We operate in the United States and may transfer data to countries that may have different protection standards. When required, we implement appropriate safeguards (e.g., Standard Contractual Clauses) and assess transfer risks. By using the Services, you understand your data may be processed in the U.S. and elsewhere.


10) Data retention

We retain personal data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose. We may retain backups and logs for a limited period after account closure.


11) Security

We use administrative, technical, and physical safeguards appropriate to the nature of the data (e.g., encryption in transit, access controls, monitoring). No method is 100% secure; we cannot guarantee absolute security.


12) Your choices & rights

Marketing choices

You can unsubscribe from marketing emails using the link in any email or by contacting us at [email protected]. We may still send transactional or service messages.

Account & content

You can access and update certain account information in your profile. To request deletion of your account or content, contact us (note that some information may be retained as permitted by law).

GDPR (EEA/UK/Switzerland) rights

Where GDPR/UK GDPR applies, you may have the right to access, rectify, erase, restrict, object to processing (including for direct marketing), and data portability, and to withdraw consent where processing is based on consent. You can also lodge a complaint with your local supervisory authority.

Legal bases we rely on include: consent, contract performance, legal obligations, vital/public interests where applicable, and our legitimate interests (e.g., to provide, secure, and improve the Services, and to market similar offerings).

U.S. state privacy rights (incl. California CCPA/CPRA)

If you are a resident of a U.S. state with a comprehensive privacy law (e.g., CA, CO, CT, UT, VA), you may have rights to know/access, correct, delete, and opt out of certain data uses (e.g., targeted advertising, sales, or profiling).

Shine the Light (CA): We do not disclose personal information to third parties for their own direct marketing without your consent.

To exercise any rights, email [email protected] with the subject “Privacy Request” and tell us your residency and request type.


13) Learners under 18 & Children’s privacy


14) Community conduct & recordings

Music learning often involves audio/video. If you submit recordings (e.g., practice clips, performances) or participate in live sessions, they may be processed to deliver feedback and improve instruction.


15) SMS/texts & notifications (optional)

If you opt in to SMS or push notifications, message frequency may vary. You can reply STOP to SMS to unsubscribe or adjust notification settings in your device/account. Message/data rates may apply. Carriers are not liable for delayed/undelivered messages.


16) Third-party links & integrations

Our Services may link to or integrate with third parties (e.g., payment processors, course hosts, social networks, video platforms, analytics, ad partners, email providers). Their handling of your data is governed by their privacy policies. Please review those policies before using their services.


17) Changes to this Policy

We may update this Policy from time to time. We’ll post the updated version with a new “Last Updated” date and, if changes are material, we’ll provide additional notice as required by law. Your continued use of the Services after changes take effect means you accept the updated Policy.


18) How to contact us

Email: [email protected]
Postal: Riyaaz Academy, 3400 Main St #14, Houston, TX 77002, USA

If you are in the EEA/UK/Switzerland and believe we have not resolved your concern, you may contact your local data protection authority. We are happy to clarify our legal bases for any specific processing upon request.