1. Introduction

Dron Public School ("we," "our," or "us"), located at Sardhana, Meerut, Uttar Pradesh, India, is committed to protecting the privacy and personal information of our students, parents, staff, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable laws in India.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Student Information: Name, date of birth, address, contact details, academic records, photographs, medical information, emergency contact details, Aadhaar number (if provided voluntarily), and other information required for admission and academic purposes.
• Parent/Guardian Information: Names, contact information, addresses, occupation details, emergency contacts, and financial information for fee payment purposes.
• Staff Information: Employee personal details, qualification records, employment history, and other HR-related information.
• Website Visitors: IP address, browser type, device information, pages visited, time spent on site, and other usage analytics.
• Communication Data: Emails, phone calls, messages, and other communications with the school.

2.2 Sensitive Personal Data

We may collect sensitive personal data including passwords, financial information (bank account details for fee payments), physical and mental health records, biometric information (if applicable), and sexual orientation (only if voluntarily disclosed and relevant).

3. How We Collect Information

Information is collected through:

• Admission forms and application processes
• Direct interaction with students, parents, and staff
• Our website and online portals
• Educational activities and assessments
• CCTV surveillance (with appropriate notices)
• Third-party educational platforms and tools
• Government and regulatory authorities

4. Purpose of Data Collection and Use

We use your personal information for the following purposes:

• Educational Services: Student admission, academic management, curriculum delivery, assessment, and certification
• Administrative Purposes: Fee collection, transportation, hostel management, library services, and communication with parents
• Safety and Security: Campus security, emergency response, and child protection
• Compliance: Meeting legal and regulatory requirements including reporting to education boards and government authorities
• Communication: Sending important notices, updates, newsletters, and event information
• Website Improvement: Analyzing website usage to enhance user experience
• Alumni Relations: Maintaining contact with former students for networking and fundraising (with consent)

5. Legal Basis for Processing

We process personal information based on:

• Consent: Where you have given clear consent for specific purposes
• Contract: Processing necessary for educational services and fee payments
• Legal Obligation: Compliance with education laws, child protection laws, and other applicable regulations
• Legitimate Interests: For administrative purposes, safety, and educational excellence
• Vital Interests: To protect health, safety, and wellbeing of students and staff

6. Data Sharing and Disclosure

We may share your personal information with:

• Educational Authorities: CBSE, State Education Department, and other regulatory bodies
• Government Agencies: As required by law or regulation
• Service Providers: Third-party vendors for transportation, catering, security, IT services, and educational platforms
• Medical Professionals: In case of medical emergencies or health-related issues
• Law Enforcement: When required by law or to protect safety
• Parent/Guardian: Academic progress, behavior, and other relevant student information
• Insurance Companies: For student insurance claims

We do not sell, rent, or commercially distribute personal information to third parties without explicit consent.

7. Data Security

We implement appropriate technical and organizational security measures including:

• Secure servers with encryption and firewall protection
• Access controls and user authentication systems
• Regular security audits and vulnerability assessments
• Staff training on data protection and confidentiality
• Physical security measures for paper records
• Backup and recovery systems
• Incident response procedures

8. Data Retention

We retain personal information for different periods based on:

• Student Academic Records: Permanently for certification and verification purposes
• Administrative Records: 7 years after graduation or last attendance
• Financial Records: 7 years as per legal requirements
• CCTV Footage: 30-90 days unless required for investigations
• Website Analytics: 2 years for improvement purposes
• Staff Records: 7 years after termination of employment

9. Your Rights

Under applicable Indian laws, you have the following rights:

• Right to Access: Request information about personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Withdrawal: Withdraw consent for specific processing activities (where applicable)
• Right to Complaint: File complaints with appropriate authorities
• Right to Information: Understand how your data is being processed

Please note that some rights may be limited due to educational and legal requirements.

10. Cookies and Website Technologies

Our website uses cookies and similar technologies to:

• Ensure proper website functionality
• Analyze website traffic and user behavior
• Personalize content and improve user experience
• Remember your preferences and login information

You can control cookie settings through your browser, but disabling cookies may affect website functionality.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

As an educational institution, we collect and process information about minors (under 18 years) for educational purposes. We:

• Obtain parental consent for data collection and processing
• Implement additional safeguards for children's data
• Limit data collection to what is necessary for educational purposes
• Provide parents with access to their child's information
• Follow child protection policies and procedures

13. Data Transfers

Personal information is primarily stored and processed within India. If data is transferred outside India, we ensure appropriate safeguards are in place to protect your information in accordance with applicable laws.

14. Updates to Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through our website and other appropriate channels. Continued use of our services after such updates constitutes acceptance of the revised policy.

15. Grievance Redressal

If you have any concerns or complaints regarding privacy matters, please contact our Grievance Officer who will address your concerns within the timeframe specified under applicable laws.

17. Acknowledgment

By using our services, visiting our premises, or providing personal information to us, you acknowledge that you have read, understood, and agree to this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

This Privacy Policy is effective as of the date mentioned above and supersedes all previous versions.