Privacy Policy

RISHS International School (hereinafter referred to as the “School”) is committed to protecting the privacy of the individuals whose personal information it collects and processes in the course of its educational and administrative functions. This Privacy Policy (hereinafter referred to as the “Policy”) describes the manner in which the School collects, uses, discloses, stores, and protects personal information collected through the School's website and portal (collectively, the “Portal”).

1. Scope

This Policy applies to all personal information collected through the Portal from parents, legal guardians, students, faculty, staff, and such other persons as may access the Portal in the course of dealing with the School.

2. Information Collected

The School may collect and process the following categories of information:

• Identification data: name, date of birth, gender, admission number, photograph, and similar particulars;
• Contact data: postal address, email address, and mobile number of the student and the parent or legal guardian;
• Academic data: grade, section, attendance, examination results, and related academic records;
• Financial data: fee payment status, ledger entries, and transaction reference numbers;
• Technical data: IP address, browser type, device identifiers, and log data generated during the use of the Portal.

Card numbers, banking credentials, and other sensitive payment instrument data are collected and processed directly by the payment gateway provider, and are not stored on the servers of the School.

3. Purposes of Processing

The School processes personal information for the following purposes:

• to administer admissions, enrolment, and academic records;
• to generate, issue, and settle invoices and receipts in respect of fees payable to the School;
• to communicate with parents and guardians on matters relating to attendance, leave, homework, examinations, and events;
• to comply with obligations arising under applicable laws, and under the directions of statutory and regulatory authorities, including the Central Board of Secondary Education;
• to maintain the security, integrity, and availability of the Portal; and
• to address grievances and respond to queries raised by users.

4. Disclosure of Information

The School shall not sell, rent, or trade personal information. Personal information may, however, be disclosed to:

• statutory and regulatory authorities, where such disclosure is required under applicable law;
• the Central Board of Secondary Education or other affiliating or examining authorities, to the extent necessary;
• the payment gateway provider (ICICI Bank Limited) and its authorised processors, strictly for the purpose of effecting fee-related transactions;
• service providers engaged by the School for hosting, maintenance, or technical support, subject to appropriate confidentiality obligations; and
• any person, pursuant to an order of a court or other competent authority.

5. Retention

Personal information shall be retained for such period as may be necessary to fulfil the purposes for which it was collected, and thereafter for such further period as may be required under applicable law or for the establishment, exercise, or defence of legal claims.

6. Security

The School employs reasonable technical, administrative, and physical measures designed to protect personal information against unauthorised access, loss, alteration, or disclosure. Such measures include, without limitation, access controls, encryption of sensitive data in transit, and periodic review of security practices. Notwithstanding the foregoing, no method of transmission or storage is entirely secure, and the School does not warrant absolute security.

7. Children's Data

Given the nature of the School's functions, personal information relating to children is collected and processed. Such information is collected with the knowledge of, and for the purposes of communication with, the parent or legal guardian of the child, and is handled in accordance with this Policy and applicable law.

8. Cookies

The Portal may use cookies and similar technologies to maintain session state, to recognise returning users, and to record preferences. The User may configure the browser to refuse cookies; however, certain features of the Portal may not function as intended in the absence of cookies.

9. Rights of the Data Principal

Subject to applicable law, the User may request:

• confirmation of whether personal information relating to the User is being processed;
• access to, and a copy of, such information;
• correction of inaccurate or incomplete information; and
• erasure of information that is no longer necessary for the purposes for which it was collected, save where retention is required by law.

Requests in this regard may be addressed, in writing, to the contact particulars set out in paragraph 11.

10. Amendments

The School reserves the right to amend this Policy from time to time. The revised Policy shall take effect upon publication on the Portal, and continued use of the Portal thereafter shall constitute acceptance of the revised Policy.

11. Contact

For any queries or requests relating to this Policy, or relating to the personal information processed by the School, the User may write to: