Kuruwan Public School

1. Information We Collect

We collect the following categories of personal data:

• Student data: Full name, date of birth, gender, Aadhar number, APAAR ID, PEN number, class and section, address, previous school records, health information (blood group), and parent/guardian contact details.
• Parent/Guardian data: Full name, mobile number, email address, Aadhar number, relationship to student, and occupation (for RTE/EWS income verification).
• Employee data: Full name, qualification details, employment history, bank account details (for salary disbursement), Aadhar number, PAN number, and emergency contact information.
• Website usage data: Pages visited, browser type, IP address, and referral source — collected anonymously for analytics purposes only.
• GPS/Location data (staff only): Latitude and longitude coordinates are collected from staff and teacher devices when they use the GPS geofenced self-attendance system within school premises. This data is used solely for verifying physical presence on campus and is not used for off-campus tracking.
• Health/Medical data (students): Blood group, known allergies, and any medical conditions disclosed during admission are treated as sensitive personal data under the DPDP Act, 2023. This information is collected with explicit guardian consent and is accessible only to the school nurse/health staff and Principal for emergency use.

2. Purpose of Data Collection

The personal information we collect is used strictly for the following lawful purposes:

• Student admission processing and academic record maintenance (report cards, attendance, marks registers)
• Government-mandated reporting to UDISE+, APAAR registry, and state/central education boards
• Fee collection, receipt generation, and salary disbursement processing
• Communication with parents regarding student progress, notices, and school events
• Transport and hostel management record keeping
• Identity verification for portal login and document issuance

We do not sell, rent, or share personal data with external marketers, advertisers, or unaffiliated third parties.

3. Data Storage & Security

All personal data is stored on secured school servers. Uploaded documents (Aadhar PDFs, marksheets, certificates) are stored in access-controlled directories. Access to personal data is restricted strictly to authorised personnel: Admin, Principal, and designated Office Staff. All staff with data access are bound by confidentiality obligations. We implement technical safeguards including role-based access control, session management, and .htaccess directory restrictions to prevent unauthorised access.

4. Data Retention

Student academic records are retained for a minimum of 10 years after the student leaves the school, as required by educational board regulations, for the purpose of certificate issuance and verification. Employee records are retained for 7 years after cessation of employment as required by applicable labour laws. Contact enquiry data submitted via the website is retained for 2 years. Data no longer required for its original purpose is securely deleted.

5. Third-Party Services

We use the following trusted third-party service providers to deliver certain services:

• Razorpay (Razorpay Software Pvt. Ltd.): Used for processing online fee payments. When you make an online payment, transaction data (amount, order ID, payment method) is processed by Razorpay under their own Privacy Policy. KPS does not store card or UPI credential details.
• Cloudflare Turnstile: Used for bot protection on public forms (contact, admission inquiry). Anonymous challenge tokens are verified; no personal browsing data is stored by KPS from this service.
• Government Portals (UDISE+, APAAR, CG State Boards): Student academic and identity data is shared with government education databases as mandated by law.

6. Cookies & Sessions

Our website uses session cookies strictly for portal authentication (Parent, Teacher, Staff, Admin, Principal login sessions). These cookies are temporary and are deleted when you close your browser or log out. We do not use advertising cookies, tracking pixels, or persistent third-party cookies. The language preference (?lang=hi/en) is stored as a session variable to serve the site in your chosen language.

7. Your Rights

Parents, students (via guardians), and employees have the following rights regarding personal data held by KPS:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or outdated personal data.
• Right to Withdraw Consent: Where processing is based on consent (e.g., optional contact forms), you may withdraw consent at any time by contacting us.
• Right to Grievance Redressal: File a complaint with our Grievance Officer (see Section 9 below) if you believe your data has been mishandled.

Note: Certain data (e.g., official academic records, UDISE/APAAR submissions) cannot be deleted as they are legally mandated government records.

8. Children's Privacy

Since we serve a school community, much of the data we collect relates to minors. All personal data of students under 18 years of age is collected only with explicit consent from a parent or legal guardian, obtained during the admission process. We do not allow minors to directly register on or access this website's public-facing contact forms without parental knowledge.

9. Photography & Media on Website/Social Media

Kuruwan Public School photographs and records school events, sports days, cultural programmes, and activities for publication on the school website gallery, social media handles (Facebook, YouTube), and official school communications. By enrolling a child at KPS, parents/guardians provide implied consent for their child to appear in such group event photographs and videos.

• Photos are used only for school promotion and documentation — never sold or licensed to commercial advertisers.
• Individual student names are not disclosed alongside photos in public-facing media.
• Parents who do not wish their child to appear in school media publications may submit a written opt-out request to the school office. KPS will make reasonable efforts to honour such requests.

10. Changes to This Policy

KPS reserves the right to update this Privacy Policy periodically to reflect changes in applicable laws, our data practices, or the services we provide. The "Last Updated" date at the top of this page will be revised accordingly. We encourage users to review this policy periodically. Continued use of the KPS website or portals after changes are published constitutes acceptance of the updated policy.

11. Grievance Officer & Contact for Privacy Matters

In accordance with the Information Technology Act, 2000 and the IT (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021, we have designated a Grievance Officer. If you have any concerns, complaints, or requests regarding your personal data, please contact: