Privacy Policy - St. Mary's School
St. Mary’s School, Rishra
Effective Date: 12th September 2025
St. Mary’s School, Rishra (“School”, “we”, “our”, “us”) respects your privacy and is committed to protecting the personal information of students, parents, staff, and visitors in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws.
1. Information We Collect
We may collect and process the following categories of personal data:
- Student Information – Name, date of birth, gender, address, academic records, medical details (if provided).
- Parent/Guardian Information – Name, contact details, ID proof (Aadhaar, PAN), and relationship to the student.
- Staff Information – Employment records, qualifications, bank details, ID proofs.
- Website/Online Forms – IP address, device/browser details, and information voluntarily submitted via forms.
2. Purpose of Collection
We collect personal data for legitimate educational, administrative, and statutory purposes, including:
- Student admissions, enrollment, and academic records.
- Communication with parents/guardians.
- Fee collection and financial records.
- Ensuring student safety, security, and health.
- Regulatory compliance with CISCE, Government, and Education Boards.
- Providing digital/online education platforms.
3. Lawful Basis of Processing
Under the DPDP Act, 2023, data is processed on the basis of:
- Consent – Information provided voluntarily by parents/guardians/students.
- Legal Obligation – Compliance with statutory and board regulations.
- Legitimate Purpose – Ensuring smooth functioning of the school and safeguarding student interests.
4. Data Storage & Security
- All personal data is stored securely in physical and electronic formats.
- Access is restricted to authorized staff only.
- CCTV surveillance is used solely for safety and discipline within the school premises.
- Reasonable security safeguards (digital and administrative) are implemented to prevent unauthorized access, disclosure, or misuse.
5. Data Sharing & Disclosure
We do not sell or trade personal data. Information may be shared with:
- Educational boards (CISCE) and government authorities for compliance.
- Service providers (IT, transport, healthcare) bound by confidentiality agreements.
- Law enforcement agencies if required by law.
6. Data Retention
- Student and staff records are retained only as long as necessary for academic, administrative, or legal purposes.
- Once retention is no longer required, records are securely deleted or archived.
7. Your Rights under DPDP Act
Parents, students, and staff have the right to:
- Access their personal data.
- Correction/Updation of inaccurate or incomplete information.
- Withdraw consent for optional data processing.
- Erasure of data, where applicable, subject to legal and academic obligations.
Requests can be made by writing to our Data Protection Officer (DPO) at: [email protected]
8. Children’s Data
We take special care in handling children’s personal data. Parental/guardian consent is required for processing student data below the age of 18.
9. Updates to Policy
This Privacy Policy may be updated from time to time in line with legal requirements and school practices. Updates will be published on our notice board/website.
10. Contact Us
For any privacy concerns, complaints, or queries, please contact:
Data Protection Officer (DPO)
St. Mary’s School, Rishra
- Email: [email protected]
