UK Supplementary School Management: Your Complete 2026 Guide

Introduction

The United Kingdom has more supplementary schools per capita than almost any other country in the world. They serve communities whose children need additional education — in heritage languages, in religious traditions, in cultural practices — beyond what mainstream schools provide. Islamic supplementary schools (maktabs) form one of the largest and most established sectors within this broader landscape, educating an estimated 100,000–250,000 Muslim children each week.

And yet, the management infrastructure supporting these institutions is often a generation behind their importance to the community. In 2026, many UK supplementary Islamic schools are still run on paper registers, WhatsApp groups, and personal Excel spreadsheets — tools that were marginal before GDPR became law and are genuinely inadequate now.

This guide is written for the principal, the committee chair, or the dedicated volunteer who runs a UK supplementary Islamic school and wants to do so properly — legally, administratively, and educationally. It covers everything from governance and legal obligations to day-to-day management and the digital tools that make it sustainable.

What Is a Supplementary School in UK Law?

A supplementary school (also called a complementary school or community school) is an educational institution that:

• Operates outside mainstream school hours (evenings, weekends, school holidays)
• Provides education in addition to — not instead of — mainstream schooling
• Provides fewer than 18 hours of education per week (the threshold for registration as an independent school)
• Is typically run by a community organisation, charity, or religious institution

Supplementary schools are not legally required to register with Ofsted. They are not covered by the statutory framework that applies to mainstream or independent schools. However, they are not unregulated — they have significant legal obligations in areas including safeguarding, data protection, employment law, charitable governance, and health and safety.

The supplementary school sector in England is supported (but not regulated) by the Department for Education, which published updated guidance for supplementary schools in 2022. The National Resource Centre for Supplementary Education (NRCSE) and the Association of Muslim Schools UK (AMS-UK) provide specific support for Islamic supplementary schools.

The Legal Landscape for UK Supplementary Schools in 2026

The legal obligations on UK supplementary schools are real and substantial, even without Ofsted registration. In 2026, the key legal frameworks are:

Safeguarding: Every organisation working with children in the UK must comply with the statutory safeguarding framework — Working Together to Safeguard Children (2023 update) and, as best practice, Keeping Children Safe in Education (KCSIE). Having a Designated Safeguarding Lead, a written safeguarding policy, and staff training is not optional.

UK GDPR / Data Protection Act 2018: All personal data about students, parents, and staff must be handled in compliance with UK GDPR. This includes secure storage, privacy notices, lawful basis for processing, data retention policies, and breach procedures.

Equality Act 2010: Supplementary schools must not discriminate against students or staff on protected characteristics. For Islamic supplementary schools, this includes disability — reasonable adjustments must be made for students with disabilities.

Employment law: Anyone paid to work at a supplementary school — even on a sessional basis — has employment rights. Minimum wage, holiday pay entitlement, and right to work checks apply regardless of how the arrangement is described.

Charity law: Most supplementary schools operating under a charity structure (whether standalone or under a mosque umbrella) must comply with Charity Commission requirements, including annual reporting and trustee governance obligations.

Health and Safety at Work Act 1974: Employers (including charities with staff) must ensure the health and safety of employees and others (including students) affected by their activities.

None of these obligations are new in 2026. What has changed is the enforcement environment — the ICO has become more active in investigating data protection complaints, and safeguarding failures in supplementary schools have received more regulatory and media scrutiny. The era of benign neglect toward supplementary school compliance has ended.

Governance: Who Is Responsible for What

Good governance is the foundation of everything else. Without clarity about who is responsible for what, legal obligations fall through the gaps.

The Governance Structure Every UK Supplementary School Needs

Trustees / Management Committee: The governing body of the institution — typically 5–12 people. Collectively responsible for the institution’s legal compliance, financial health, strategic direction, and safeguarding culture. Individual trustees have personal legal duties under charity law.

Chair of Trustees: First among equals on the trustee board — chairs meetings, leads governance, and is the external face of the institution to regulators.

Principal / Head Teacher: The educational leader — responsible for day-to-day operations, curriculum, teacher quality, and student welfare. Accountable to the trustees but holds operational authority.

Designated Safeguarding Lead (DSL): A named individual — typically the principal or a senior trustee — responsible for safeguarding policy, staff training, and managing any concerns.

Data Protection Lead: A named individual responsible for GDPR compliance. May be the same person as the DSL or a separate trustee.

Treasurer / Finance Lead: Responsible for financial oversight, fee collection, banking, and reporting to trustees.

What Trustees Must Not Do

Trustees must not micromanage the principal’s day-to-day decisions. The governance model is: trustees set the direction and hold the principal accountable; the principal leads the operational delivery. A mosque committee that overrides the principal on curriculum or staffing decisions, or a principal who makes strategic decisions without trustee oversight, are both governance failures.

Safeguarding: Your Most Important Legal Obligation

Every supplementary school has statutory safeguarding obligations. These are non-negotiable and apply regardless of size, denomination, or registration status.

The Minimum Safeguarding Framework

1. Written safeguarding policy — specifying how to recognise abuse, how to report concerns, and the role of the DSL. Reviewed annually by trustees.

2. Designated Safeguarding Lead (DSL) — named, trained, and known to all staff. Training must include at least DSL-level safeguarding training (often available free from the local authority).

3. Enhanced DBS checks — for all staff and regular volunteers before starting. No exceptions.

4. Safe recruitment — reference checks, interview, ID verification, and right-to-work checks before any appointment.

5. Code of conduct — written guidance for all staff and volunteers on appropriate conduct with students, including one-to-one teaching, physical contact, and online communication.

6. Concerns recording procedure — how concerns about a student’s welfare are documented and what triggers a referral to children’s social services.

7. Safer arrival and departure — a written procedure specifying who is authorised to collect each student, what to do if an unauthorised adult arrives, and what happens if a student is not collected.

The Ofsted Letter

Since 2018, Ofsted has sent letters to supplementary schools in England advising them of their safeguarding responsibilities. Receipt of this letter does not constitute Ofsted oversight, but it serves notice that supplementary schools are expected to maintain appropriate safeguarding standards. If your institution has received this letter and not acted on it, this is now a governance risk.

GDPR and Data Protection

UK GDPR applies to every maktab that holds personal data about students, parents, or staff — which is every maktab. For a detailed guide to UK GDPR compliance for Islamic supplementary schools, see our dedicated article:

GDPR for Maktabs and Supplementary Islamic Schools in the UK →

The core requirements in brief: a privacy notice, a lawful basis for processing, secure data storage (not WhatsApp), data retention policies, staff training, and a breach procedure. ICO registration is required for most organisations processing personal data (£40–60/year).

Premises and Health & Safety

The premises your school operates from — whether a mosque room, a hired school hall, or a dedicated building — must meet basic health and safety requirements.

Key Premises Requirements

Fire safety: A current fire risk assessment, working smoke alarms and fire extinguishers, clearly marked fire exits, and a fire evacuation procedure that all staff know. Most premises managers will have the main fire risk assessment; your school needs a supplementary assessment covering your specific use of the space.

First aid: A stocked first aid kit on site and at least one adult with current first aid training present during every session.

Supervision ratios: No specific legal ratio applies to supplementary schools, but best practice and insurance requirements typically specify:

• Ages 5–7: maximum 1:8
• Ages 8–12: maximum 1:10
• Ages 13+: maximum 1:15–20

Safe arrival and departure: A defined procedure for receiving students at the start of sessions and releasing them at the end — with a register of authorised adults for each student.

Disability access: The Equality Act 2010 requires reasonable adjustments for students with disabilities. Assess your premises for access — step-free entry, appropriate toilet facilities, accessible seating.

Risk assessments: A written risk assessment for the institution’s activities — covering the premises, any equipment used, and any activities that carry specific risks (science experiments, sports activities, outdoor areas). Review annually and after any incident.

Insurance

Two types of insurance are legally or practically non-negotiable:

Public liability insurance: Covers claims for injury or property damage to third parties (including students) arising from your activities. Minimum recommended: £5 million. Verify that your cover explicitly includes your supplementary school activities — mosque insurance policies sometimes exclude educational programmes.

Employers’ liability insurance: Required by law as soon as you have any paid staff, even on sessional contracts. Minimum required: £5 million.

Optional but recommended:

• Trustee indemnity insurance (protects trustees from personal liability for good-faith decisions)
• Professional indemnity insurance (if teachers give advice or assessments relied upon by parents)

Staffing and Employment Law

Employment Status: The Critical Question

The biggest staffing compliance gap in UK supplementary schools is incorrect employment status classification. Many institutions describe their teaching staff as “self-employed” or “voluntary” when, in law, they are workers or employees.

The employment status test focuses on the working arrangement, not the label:

• Is the person required to do the work personally (not send a substitute)?
• Does the institution control when, where, and how they work?
• Are they integrated into the institution’s operations?

If yes to these questions, the person is a worker or employee — not self-employed — regardless of what their “agreement” says.

Consequences of misclassification: HMRC can assess back-tax and National Insurance contributions. The worker can bring an employment tribunal claim for unpaid rights (holiday pay, minimum wage, unfair dismissal). Both are existential risks for a small charity.

Minimum Wage Compliance

The National Living Wage in 2024–2025: £11.44/hour for workers aged 21+. This applies to all workers and employees, regardless of how the payment is described. An “honorarium” of £8/hour to a regular sessional teacher is not GDPR-compliant labelling — it is an underpayment of wages.

Right to Work

Before any person starts working (paid or voluntary in a DBS-required role), their right to work in the UK must be verified by checking and copying original documents (passport, visa, biometric residence permit). Failure to carry out right-to-work checks can result in civil penalties of up to £60,000 per illegal worker.

Financial Management and Charitable Accountability

Charitable Reporting

If your school is a registered charity with the Charity Commission:

• Annual accounts must be prepared and, for charities with income over £25,000, independently examined or audited
• An annual return must be filed with the Charity Commission by the filing deadline (10 months after year-end)
• A trustees’ annual report must be prepared and filed
• Failure to file is a regulatory compliance failure and appears on the Charity Commission’s public register

Banking and Financial Controls

• The institution must have its own bank account — not a personal account
• All income must be paid into and all expenditure paid from the institutional account
• Any cash handling must involve two people, with signed records
• No trustee or staff member should have sole authority to make payments above a defined threshold (typically £500 for small institutions — lower for anything unusual)
• Reconcile the bank account monthly, not annually

Gift Aid

Registered charities can claim Gift Aid on eligible donations — an additional 25p for every £1 donated by UK taxpayers. Many maktabs miss this because parents pay fees (which are not eligible) but also make donations (which are). Structuring parent contributions as a combination of fee and voluntary donation — and registering for Gift Aid — can generate significant additional income for a community institution.

Curriculum and Programme Design

There is no legal curriculum requirement for UK supplementary schools — you can teach what you choose, within the boundaries of the law (you cannot teach content that promotes extremism, incites hatred, or constitutes radicalisation, which is covered by the Prevent duty for some organisations).

A well-designed Islamic supplementary school curriculum covers:

• Quranic education (Qaida → Nazirah → Hifz) structured across clear levels
• Islamic Studies (Aqeedah, Fiqh, Seerah, Arabic) with age-appropriate depth
• Tarbiyah (character development) integrated throughout, not as a separate lesson
• Arabic language (where resources allow)

The curriculum should have a written document — even a simple one-page progression framework — that can be shared with parents at enrolment and referenced by teachers as a common standard.

Student Records and Progress Tracking

Minimum required records per student:

• Personal details (name, DoB, address, parent contacts, medical needs)
• Enrolment date and any prior learning history
• Attendance record (per session)
• Quranic progress (current stage, Hifz position if applicable)
• Islamic Studies progress (by curriculum stage)
• Fee payment history
• Any safeguarding notes or concerns (held separately, restricted access)

These records must be held in compliance with UK GDPR — securely, with restricted access, retained for the required period, and available for Subject Access Requests.

Parent Engagement

Parent engagement is one of the strongest predictors of student progress in Islamic education. Students whose parents are actively informed about their child’s Hifz progress, who reinforce learning at home, and who attend parent evenings make faster progress than those whose parents are passive.

Effective parent engagement requires:

Structured progress communication: Not just verbal updates at collection time, but regular written or digital progress reports — ideally via a secure parent portal rather than WhatsApp.

Clear enrolment communication: What the programme covers, what is expected of students in terms of home revision, how fees are paid, and how progress will be reported.

Responsive communication channels: Parents must be able to contact the school with questions and receive timely responses. A dedicated email address or in-app messaging — not the principal’s personal mobile — is the right channel.

Parent evenings: At least one structured parent-teacher meeting per year, at which Hifz progress, Tarbiyah development, and any concerns are discussed face to face.

The Digital Management Infrastructure You Need in 2026

Running a UK supplementary Islamic school in 2026 without a proper digital management system is no longer a sustainable choice. The legal obligations — GDPR, safeguarding records, financial reporting — require record-keeping that paper and WhatsApp cannot provide.

The digital system you need must handle:

A generic school management system designed for mainstream schools will not meet all of these needs — specifically, it will not have Hifz tracking, Tarbiyah assessment, or Salah monitoring. An Islamic-specific platform designed for the supplementary school context is required.

How Ilmify Serves UK Supplementary Islamic Schools

Ilmify is the only school management platform designed specifically for the UK supplementary Islamic school context. Every feature is built around the specific needs of maktabs, evening schools, and weekend Islamic programmes — not retrofitted from a mainstream school system.

GDPR compliance: Encrypted cloud storage, no third-party data sharing (confirmed in App Store privacy declarations), role-based access control, audit trail, Subject Access Request support, and data retention tools.

Hifz tracking: The only UK school management platform with full three-stream Hifz tracking — Sabak, Sabaq Para, and Dhor — giving teachers and administrators the complete picture of each student’s Quran progress.

Tarbiyah assessment: Built-in character development tracking across four dimensions, with individual goal-setting and parent-facing reports.

Salah monitoring: For institutions that run prayer sessions, Ilmify tracks Fard, Sunnah, and Nawafil attendance across prayer times.

Parent portal: Secure, individual parent access — each parent sees only their own child’s data. No shared WhatsApp group needed for individual updates.

Multi-language support: English, Urdu, Tamil, Malayalam, and Arabic — essential for the UK’s diverse Muslim communities.

Offline mode: Works without internet, syncing when connected — critical for maktabs in mosque spaces with unreliable WiFi.

Affordable pricing: Designed to be accessible for community-run institutions operating on tight margins.

UK-based support: The Ilmify team understands the UK supplementary school regulatory environment and can provide guidance on UK-specific compliance questions.

💡 The only Islamic school management platform built for UK supplementary schoolsGDPR-compliant, Hifz-tracking, multi-language, offline-capable. Everything UK maktabs need in 2026.Explore Ilmify for UK Supplementary Schools →

Conclusion

Running a UK supplementary Islamic school in 2026 is a serious undertaking with real legal obligations. Governance, safeguarding, GDPR, employment law, financial accountability — these are not optional extras for institutions that consider themselves “too small” or “too informal” to worry about compliance. They are the foundation of a sustainable, trustworthy institution.

The good news: the tools and guidance to meet these obligations are available. This guide covers the framework; Ilmify provides the digital infrastructure. Together, they give any UK supplementary Islamic school what it needs to operate professionally, legally, and sustainably.

See how Ilmify supports UK supplementary Islamic schools →