Privacy Policy

This Privacy Policy explains how Gerizim Digital Ltd (“Gerizim Digital”, “we”, “us”, “our”) collects, uses and protects your personal information when you use Taleemia (the “Service”) and our other products and websites. Gerizim Digital Ltd is the data controller for the information described here.

We are a company registered in England & Wales. Company No. (pending). When the Company Number is confirmed by Companies House, it will appear in our footer and on our contact page.

This policy was last updated in May 2026. If you have any questions, please email privacy@gerizimdigital.co.uk.

We collect only what we need to run the Service:

• Account information— your name, email address, phone number, and (where required for institutional accounts) CNIC or other ID for verification.
• Payment information— processed by our payment partners (Stripe, PayPro, JazzCash, Easypaisa). We do not store full card numbers on our servers.
• Usage data— the pages you visit, the features you use, your device and browser type, and basic technical logs. Used to improve the product and detect abuse.
• Uploaded content— lessons, files, images, videos and any other material you choose to upload.
• Communications— messages you send to other users on Taleemia, and messages between you and our support team.

We use your data to:

• Provide and operate the Service you signed up for.
• Authenticate your account and keep it secure.
• Process subscription payments and payouts to creators.
• Detect, investigate and prevent fraud, abuse and policy violations.
• Understand how the product is used so we can improve it.
• Comply with UK and Pakistan law, including tax, financial and safeguarding rules.

We do not sell your personal information. We share it only with the following categories of recipients, and only where necessary:

• Payment processors— Stripe, PayPro / Safepay, JazzCash, Easypaisa, and local bank gateways to process payments. Because Gerizim Digital Ltd is a UK-registered company, your payment data is shared with our processors who may convert and settle the transaction in British Pounds (GBP). If you pay with a card or wallet held in a currency other than PKR, your issuing bank may apply its own currency-conversion rate and an international transaction fee(typically 1–3%), which may cause the amount on your statement to differ slightly from the price displayed on our pricing page. The exact PKR amount is always shown on the Stripe checkout screen before you confirm. See our Terms of Service for the full currency and conversion clause.
• Cloud infrastructure— Google Cloud Platform (including Firebase) for hosting, storage and authentication.
• Legal authorities— when required by a valid court order, regulatory request, or to protect the rights and safety of our users.
• Other users— only the information you choose to make public (for example, your name and bio on a marketplace listing).

Your data is stored on Google Cloud infrastructure, primarily in the UK and EU (London region). Daily backups are replicated across multiple regions for redundancy.

To improve performance for Pakistani users, we may replicate selected data to a Pakistani cloud region in future. Any cross-border transfers will be carried out under UK GDPR-compliant Standard Contractual Clauses.

• Active accounts— as long as you continue to use Taleemia.
• After account deletion— 30 days for recovery in case of accidental deletion, then permanent erasure from our live systems.
• Financial records— retained for 7 years as required by UK tax and company law (HMRC), even after account deletion.
• Backups— rolling backups age out within 90 days of deletion from the live system.

Under UK GDPR you have the right to:

• Access— get a copy of the personal data we hold about you.
• Rectify— correct any information that is wrong or out of date.
• Delete— ask us to erase your personal data (subject to legal retention rules above).
• Port— receive your data in a portable, machine-readable format.
• Restrict— pause certain uses of your data while we investigate a concern.
• Object— object to processing that relies on our legitimate interests.

To exercise any of these rights, email privacy@gerizimdigital.co.uk. We will respond within 30 days.

• Essential cookies— used for login sessions and basic security. These cannot be disabled without breaking the Service.
• Analytics— anonymised, aggregated usage data so we can improve the product. No third-party advertising.
• No advertising cookies— we do not run third-party ads, retargeting, or cross-site tracking.

Taleemia is available to users aged 13 and above. Users under 18 must have the consent of a parent or legal guardian, and institutional accounts must comply with local child safeguarding rules.

We do not knowingly collect personal data from children under 13. If you believe we have, please email privacy@gerizimdigital.co.uk and we will delete it.

We may update this policy from time to time. When we make material changes, we will notify you by email and through an in-app banner at least 14 days before the changes take effect.

For privacy questions or to exercise any of your rights, email us at privacy@gerizimdigital.co.uk.

If you are unhappy with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.