Creative Education Foundation (“Institution,” “we,” “our,” or “us”) is deeply committed to safeguarding the privacy and personal data of our students, prospective applicants, parents, guardians, faculty, and campus visitors.
This Privacy Policy outlines how we collect, process, store, and protect personal information through our educational portal, admission systems, solved papers library, hostel visitor requests, and communication channels. This policy is aligned with India’s Digital Personal Data Protection Act (DPDP Act, 2023) and the Information Technology Act, 2000.
1. Categories of Personal Data We Collect
We collect information directly from you when you submit forms, visit our campuses, or interact with our digital services:
- Student & Parent Identity Data: Full name of student, date of birth, gender, blood group, parent/guardian full names, relation to student, and emergency contact details.
- Contact Data: Residential address, phone numbers (mobile and WhatsApp numbers), and email addresses.
- Academic & Admission Data: Qualifying examination marks (10th standard / SSLC / CBSE / ICSE marks card), stream preferences (e.g., PCMB, PCMC, EBAM, EBAC), competitive coaching interests (NEET, JEE, CET, CA Foundation), and previous school details.
- Hostel & Campus Visitor Data: Visitor full name, relationship with student, photo identification metadata, vehicle registration number, purpose of hostel visit, and campus entry/exit timestamps.
- Payment & Transaction Meta: Transaction reference numbers, date and time of payment, receipt numbers, and fee head descriptions. (Note: We do not store credit/debit card numbers or net banking passwords; all payments are processed through RBI-regulated payment gateways.)
- Technical & Log Data: Device IP address, browser type, operating system, campus selection cookie, access times, and referring URLs, used exclusively for security monitoring and website performance.
2. Lawful Purposes for Data Processing
We process personal data only for legitimate educational and administrative purposes, including:
- Evaluating and processing admission applications and eligibility for Pre-University and school courses;
- Generating admission test hall tickets, scheduling entrance evaluations, and communicating exam scores;
- Sending critical academic alerts, fee due reminders, and attendance notifications to parents via SMS and WhatsApp;
- Managing hostel security, student curfews, and authorizing parental visitor requests;
- Fulfilling statutory compliance obligations under the Department of Pre-University Education (DPUE), Karnataka School Examination Board (KSEAB), and district educational authorities;
- Preventing fraud, safeguarding campus cyber infrastructure, and securing online transactions.
3. Strict Policy Against the Sale of Personal Data
We do not sell, rent, lease, or monetize personal information. Student and parent data is treated with utmost institutional confidentiality and is never disclosed to commercial advertising brokers or third-party marketing agencies.
4. Limited Sharing & Third-Party Processors
Data may be shared strictly on a need-to-know basis with trusted partners bound by contractual non-disclosure and security safeguards:
- Authorized Campus Faculty & Staff: For admissions review, academic counseling, and student welfare.
- Government & Educational Boards: To register students for board examinations, scholarships, and state educational censuses.
- Secure Service Vendors: Verified SMS/WhatsApp service providers (MSG91) for parent notifications, and RBI-authorized payment gateways for online fee collections.
- Law Enforcement & Statutory Authorities: When required by court order, statutory directive, or to protect the safety of students and campus personnel.
5. Data Security Measures & Technical Safeguards
We implement industry-standard physical, electronic, and managerial procedures to safeguard student information:
- SSL/TLS encryption for all website traffic, online applications, and API communications;
- Role-based access control (RBAC) ensuring only designated admission and hostel officers can access student dossiers;
- Firewalls, intrusion prevention systems, and continuous vulnerability reviews on our web hosting infrastructure;
- Database backup encryption and strict audit logs for administrative data access.
6. Data Retention Policy
Personal information is retained only as long as necessary to fulfill the educational purpose for which it was collected:
- Enquiry & Lead Forms: Retained for the relevant academic admission cycle and archived or anonymized thereafter.
- Enrolled Student Records: Maintained for the duration of the student’s academic tenure plus the statutory period mandated by educational boards for transfer certificate (TC) and transcript issuance.
- Hostel Visitor Logs: Maintained for campus security purposes for a standard audit cycle of 12 months before systematic purge.
7. Your Rights as a Data Principal (Parents & Students)
Under the DPDP Act, 2023, you hold the following rights regarding personal data held by us:
- Right to Access: Request a summary of the personal data we hold about you or your ward;
- Right to Correction: Request correction of inaccurate, outdated, or incomplete academic and contact details;
- Right to Grievance Redressal: Submit grievances regarding data handling to our designated Grievance Officer;
- Right to Nominate: Parents or guardians may nominate an authorized representative in accordance with legal provisions.
8. Data Protection & Grievance Redressal Officer
In accordance with the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are provided below:
For inquiries, correction requests, or privacy grievances, please write to:
Administrative Secretary & Data Officer
Creative Education Foundation
creativepucollegekarkala@gmail.com
+91 90198 44492