1 Who We Are
Miah's Class ("Miah's Class", "we", "us", "our") is an English language education provider registered in Bangladesh, operating the SELFOB online learning platform at miahsclass.com.
We are committed to protecting the privacy of our students, parents, and website visitors in accordance with applicable Bangladesh data protection legislation.
2 What Data We Collect
We collect personal data when you register, apply, use the platform, or contact us. This includes:
- Identity data: name (parent and child), salutation
- Contact data: email address, phone number, country
- Account data: username, encrypted password, profile settings
- Learning data: exercise submissions, scores, AI feedback records, session durations, program enrolment history
- Usage data: pages visited, features used, device type, browser, IP address
- Communication data: enquiry messages, support tickets, feedback submissions
We do not collect sensitive personal data such as NRIC numbers, financial account details, or biometric data unless explicitly required and separately notified to you.
3 How We Use Your Data
We use your personal data for the following purposes:
- Processing your enrolment application and issuing class join codes
- Creating and managing your learner account
- Delivering personalised AI-powered feedback on your submissions
- Tracking learning progress and generating performance reports
- Sending administrative communications (class schedules, join codes, receipts)
- Sending marketing and promotional materials (only with your consent)
- Improving the platform through aggregate, anonymised analytics
- Complying with legal and regulatory obligations
4 Legal Basis for Processing
Under applicable data protection law, we rely on the following bases to process your personal data:
- Consent — where you have given explicit consent (e.g., marketing communications)
- Contractual necessity — to perform our obligations under your enrolment agreement
- Legitimate interests — to operate, maintain, and improve the platform securely
- Legal obligation — where we are required to process data by law
You may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
5 Sharing Your Data
We do not sell your personal data. We may share it with:
- Service providers — cloud hosting, email delivery, analytics tools — bound by data processing agreements
- AI processing partners — anonymised or pseudonymised submission content for feedback generation only
- Legal authorities — where required by court order, law, or regulatory requirement
- Business transfers — in the event of a merger or acquisition, subject to equivalent privacy protections
All third-party processors are contractually required to handle your data securely and only for the purposes specified.
6 Data Retention
We retain personal data only as long as necessary for the purposes stated or as required by law:
- Active account data — for the duration of your enrolment plus 2 years
- Learning records — up to 5 years after account closure for academic records purposes
- Marketing consent records — until consent is withdrawn
- Server logs — 90 days on a rolling basis
After retention periods expire, data is securely deleted or anonymised.
7 Cookies & Tracking
We use cookies and similar technologies to:
- Maintain your login session securely (essential cookies)
- Remember your preferences and settings
- Measure page performance and usage patterns (analytics cookies)
You can control cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality. We do not use third-party advertising cookies.
8 Your Rights
Under applicable data protection law you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Withdrawal of consent — withdraw consent for marketing or non-essential processing
- Data portability — receive your data in a structured, machine-readable format (where applicable)
- Erasure — request deletion of data where there is no overriding legitimate basis to retain it
To exercise any right, contact us at info@miahsclass.com. We will respond within 30 days.
9 Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- TLS/HTTPS encryption for all data in transit
- Bcrypt-hashed passwords — we never store passwords in plain text
- Role-based access controls limiting staff access to personal data
- Regular security reviews and vulnerability assessments
In the event of a data breach that is likely to result in significant harm, we will notify the relevant authorities and affected individuals in accordance with applicable data breach notification obligations.
10 Contact & Complaints
For privacy-related enquiries or to exercise your rights, contact our Data Protection Officer:
If you are not satisfied with our response, you may lodge a complaint with the relevant data protection authority in Bangladesh.
We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated policy.